Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS268193.roa
File: AS268193.roa (raw, json)
Hash identifier: f+5PEMpuEWcH5fzDMGnGyROlFM+i371rEgWQaNHznV8=
Subject key identifier: 0C:6D:C7:6B:25:0C:B9:C9:93:D0:C7:9F:AD:52:36:1D:4D:34:05:D9
Certificate issuer: /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial: 40680BE0AD1F2A351F1D135FDF9ADC1A8C52E9A5
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS268193.roa
Signing time: Wed 12 Mar 2025 23:23:55 +0000
ROA not before: Wed 12 Mar 2025 23:18:55 +0000
ROA not after: Wed 11 Mar 2026 23:23:55 +0000
asID: 268193
IP address blocks: 45.235.168.0/22 maxlen: 24
2804:4d64::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:68:0b:e0:ad:1f:2a:35:1f:1d:13:5f:df:9a:dc:1a:8c:52:e9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Validity
Not Before: Mar 12 23:18:55 2025 GMT
Not After : Mar 11 23:23:55 2026 GMT
Subject: CN=0C6DC76B250CB9C993D0C79FAD52361D4D3405D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ff:50:d8:af:d0:6d:1d:09:96:5b:cd:d6:96:
07:51:23:ee:db:e0:5b:22:f2:7e:f7:77:d7:46:0e:
02:23:d7:3c:bb:4b:4c:b4:6e:d3:90:28:e0:d1:76:
af:db:7e:99:30:c2:7e:ce:b4:87:d9:3f:e9:40:6d:
04:b8:3f:59:52:e3:2d:f8:70:ae:52:4b:36:13:c6:
f3:41:24:ed:7c:50:9f:dc:79:18:b3:4c:b2:b0:31:
b9:f5:ce:b1:6b:3c:7f:61:b1:97:96:fb:8f:cb:76:
45:08:af:3f:a7:89:ea:25:5e:e7:4c:10:60:f9:ec:
24:08:82:76:90:22:82:dd:c9:12:c1:6d:82:be:ef:
33:94:25:67:99:24:be:4a:ae:10:50:31:8a:fe:22:
43:07:4a:f6:3f:87:f6:8d:a0:29:e8:b8:2b:37:e9:
24:32:af:b8:62:ab:e6:f1:36:9b:b3:b7:d1:97:7c:
12:c1:fc:bb:10:86:02:9c:92:d4:be:51:5f:9c:51:
b6:54:58:6f:44:26:dd:28:0f:fd:22:52:7d:7e:99:
6d:0c:1f:68:a5:fe:4f:74:23:37:ae:e6:90:90:78:
85:37:01:a0:1e:10:8a:8c:34:4a:32:1e:29:2a:85:
eb:2f:06:0e:60:80:b4:ba:fd:0e:7c:30:b5:ec:e6:
97:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6D:C7:6B:25:0C:B9:C9:93:D0:C7:9F:AD:52:36:1D:4D:34:05:D9
X509v3 Authority Key Identifier:
keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS268193.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.168.0/22
IPv6:
2804:4d64::/32
Signature Algorithm: sha256WithRSAEncryption
a5:d7:f0:b0:60:55:ac:51:c9:03:98:6d:63:3d:51:99:72:67:
f6:24:42:63:e6:75:30:01:db:7f:23:c8:ec:af:4d:27:5f:a3:
7b:30:45:51:53:f7:dd:c8:3c:56:b8:25:f7:14:80:02:c9:1c:
86:5f:b3:8b:e4:6c:8a:7d:79:13:03:a7:7c:a9:f1:70:ea:9f:
b6:a2:35:cc:2f:30:5a:4e:3a:9a:91:de:b1:79:23:85:46:9e:
db:00:15:b7:10:57:2f:6a:7b:29:b1:63:f4:c7:59:a7:92:0b:
93:a2:ce:dc:b9:36:b0:85:56:ed:54:0b:6c:15:6f:66:8b:59:
dc:77:32:98:79:b1:6e:e2:2b:c4:d5:f9:54:42:68:14:45:27:
14:85:c5:03:db:dd:bd:3e:08:06:fb:fe:14:67:f7:41:8d:e9:
89:89:e4:e5:e3:9d:9f:f8:fb:9a:71:4f:0e:14:7a:ef:90:6c:
17:dc:a7:6a:4f:83:8a:06:ee:10:4e:45:75:cb:b4:c2:6a:27:
72:4c:b3:9f:52:cb:c4:ab:0a:2d:ff:37:01:24:fb:56:4a:2c:
f2:b4:78:d1:d1:af:bd:1f:b2:50:b4:51:82:29:21:f5:30:fc:
50:36:07:6f:7d:28:6b:8d:c6:fd:e5:c1:67:da:e2:50:96:cc:
f5:b4:b9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:18:39 2025 by rpki-client