Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS53135.roa
File: AS53135.roa (raw, json)
Hash identifier: 4VHTUR2HH8Ydh3kmjd1/+FqB5fwhcpBt0csipcgfCx0=
Subject key identifier: 84:F7:7D:78:BB:95:B3:63:61:D6:70:08:F8:49:7E:9D:5D:1A:A1:54
Certificate issuer: /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial: 6E66837E94D97CD8EBDC4752A6733E6F626EF768
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS53135.roa
Signing time: Wed 10 Apr 2024 22:01:14 +0000
ROA not before: Wed 10 Apr 2024 21:56:14 +0000
ROA not after: Wed 09 Apr 2025 22:01:14 +0000
asID: 53135
IP address blocks: 131.221.92.0/22 maxlen: 24
138.219.152.0/22 maxlen: 24
168.227.232.0/22 maxlen: 24
170.79.184.0/22 maxlen: 24
177.39.240.0/21 maxlen: 24
177.39.248.0/21 maxlen: 24
186.192.176.0/20 maxlen: 24
186.193.48.0/20 maxlen: 24
191.243.112.0/20 maxlen: 24
2804:1054::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:66:83:7e:94:d9:7c:d8:eb:dc:47:52:a6:73:3e:6f:62:6e:f7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Validity
Not Before: Apr 10 21:56:14 2024 GMT
Not After : Apr 9 22:01:14 2025 GMT
Subject: CN=84F77D78BB95B36361D67008F8497E9D5D1AA154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5e:96:ec:bc:20:5b:c7:f9:af:16:1f:0c:ec:
19:84:59:a2:cd:ca:0f:f5:01:f5:c5:ae:25:07:83:
d4:c0:78:f9:99:21:fe:92:20:3a:31:40:86:38:ba:
7c:93:73:ce:6a:53:e3:b5:f4:f9:29:b9:43:04:60:
f4:a1:5f:56:e4:cd:b6:be:c5:6c:28:46:70:05:40:
04:f8:e4:2a:8f:ef:05:a9:0b:ab:1a:09:1b:9c:67:
e4:3b:c0:1c:9b:37:37:46:b1:0f:22:48:a6:bf:7b:
f2:42:dc:2b:a9:20:15:38:ec:d5:32:e3:77:47:5c:
6f:e9:1d:59:c2:bb:7b:f9:fa:bb:c3:df:e3:06:b1:
3a:9b:df:23:ae:d0:ec:15:cb:ef:d4:05:07:a0:d6:
73:ec:eb:a6:41:c2:38:0e:ed:7d:13:f1:0f:59:b1:
ba:fb:24:0b:8a:a9:f8:2d:6b:81:cd:cc:a7:c2:09:
be:aa:6e:45:f6:31:30:ca:a1:9d:4a:ae:7b:00:c0:
1c:a5:27:e5:3d:95:eb:2c:c1:ff:2f:b2:4a:c5:4a:
6d:2a:f2:de:0e:fe:a6:9f:93:ff:a7:95:2a:f3:ee:
cf:0d:8b:c1:58:c7:e4:df:da:97:8b:8c:49:bf:3c:
42:7c:90:f7:78:b4:af:a1:9f:28:d4:df:0d:e0:09:
6e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F7:7D:78:BB:95:B3:63:61:D6:70:08:F8:49:7E:9D:5D:1A:A1:54
X509v3 Authority Key Identifier:
keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS53135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.92.0/22
138.219.152.0/22
168.227.232.0/22
170.79.184.0/22
177.39.240.0/20
186.192.176.0/20
186.193.48.0/20
191.243.112.0/20
IPv6:
2804:1054::/32
Signature Algorithm: sha256WithRSAEncryption
4f:bf:0d:46:ee:07:e6:8f:c9:1b:a1:fa:2d:e4:b1:2d:81:bd:
4f:00:73:0a:19:04:88:c9:a5:75:b1:d9:a9:b9:d8:4b:50:bd:
d0:9d:95:5a:dd:1e:25:57:15:91:5b:3f:b6:63:25:4c:96:cc:
13:4c:a1:22:bd:f0:75:f5:d5:b2:4e:bb:9f:d9:8d:b4:e0:9d:
07:3e:b3:66:6c:5f:c1:62:40:0f:1b:c7:59:85:1a:28:a8:12:
bd:7d:20:51:bb:3b:3b:07:a5:0b:b0:80:4a:16:07:a6:23:68:
c9:58:89:f8:10:81:cb:bb:f7:9e:60:a1:e7:3b:a5:51:23:d2:
24:05:39:bd:f1:a6:4b:00:39:25:4a:e3:9b:bd:28:66:5c:1f:
3e:72:7a:6e:49:d8:23:33:43:f2:aa:c3:bb:ac:ef:85:a5:d5:
fc:37:26:6d:fc:8f:61:5b:7e:e0:86:4d:53:4b:85:70:fe:60:
a3:91:49:ad:9f:e5:cd:07:bb:9e:4c:4f:b0:e1:7a:a4:9e:a8:
ed:98:e9:0a:ed:ed:e5:c4:e1:7b:8d:b3:a1:24:1a:59:aa:b1:
a1:a1:49:b3:1d:a6:81:66:54:7b:8e:67:c1:bf:89:91:93:17:
73:11:24:26:b3:ab:49:23:dd:b6:d3:d5:f8:86:70:c5:37:5d:
d9:b0:3e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org