Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS268333.roa
File: AS268333.roa (raw, json)
Hash identifier: ryzvdkHLMrqxJgGSmvvg+Q0/dPDUTtI1BWADz4yuHhk=
Subject key identifier: 77:30:30:F0:AC:0C:97:17:C9:AA:4B:DE:AD:40:63:6D:37:0C:82:82
Certificate issuer: /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial: 3A4AF7EFFA5EE9444F11D392A84E3655BB66474F
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS268333.roa
Signing time: Fri 16 Aug 2024 00:33:42 +0000
ROA not before: Fri 16 Aug 2024 00:28:42 +0000
ROA not after: Fri 15 Aug 2025 00:33:42 +0000
asID: 268333
IP address blocks: 45.237.252.0/22 maxlen: 24
2804:4f8c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:4a:f7:ef:fa:5e:e9:44:4f:11:d3:92:a8:4e:36:55:bb:66:47:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Validity
Not Before: Aug 16 00:28:42 2024 GMT
Not After : Aug 15 00:33:42 2025 GMT
Subject: CN=773030F0AC0C9717C9AA4BDEAD40636D370C8282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:29:5e:31:6a:8f:39:24:d3:10:6d:e9:a9:58:
df:fd:f9:64:0e:4a:8a:28:97:87:35:82:a3:10:3b:
d9:14:65:71:05:4e:fd:08:8a:93:36:3a:e5:61:04:
6b:23:34:d2:bd:c5:43:52:99:67:6c:e5:bb:51:4d:
ae:8f:fb:35:ae:a1:65:c5:8f:c2:7f:1e:bd:99:fa:
e0:12:8e:69:e6:2e:35:a0:16:64:33:14:ff:9d:38:
cc:d7:38:dd:4e:c5:ef:dc:31:d6:00:f9:32:30:5b:
70:aa:ff:58:30:aa:1c:1c:88:37:ac:e9:27:20:aa:
97:93:91:fd:d8:f5:ac:33:04:2e:8e:21:e1:09:73:
ab:d6:5c:9b:b3:77:f5:84:12:05:44:44:73:fc:df:
34:a1:d6:0a:4b:46:4b:6b:53:5c:93:10:dc:2d:c4:
05:76:04:33:5f:90:77:94:7d:0c:40:ec:97:34:df:
52:02:4d:35:15:45:0c:57:ee:e3:b8:8e:7f:78:a3:
b8:41:f1:e4:25:51:21:99:e2:71:8d:eb:47:76:19:
5a:3e:56:40:11:3f:00:55:31:07:f2:05:57:d8:99:
48:e6:53:46:be:de:5a:69:1f:b1:47:b3:a3:37:0f:
60:56:4d:ce:95:15:86:b5:83:69:fe:a6:6e:8a:d9:
4e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:30:30:F0:AC:0C:97:17:C9:AA:4B:DE:AD:40:63:6D:37:0C:82:82
X509v3 Authority Key Identifier:
keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS268333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.252.0/22
IPv6:
2804:4f8c::/32
Signature Algorithm: sha256WithRSAEncryption
34:bc:eb:91:99:32:7d:b6:e8:64:f9:36:68:2c:5c:d7:db:16:
b9:7a:1c:c4:d2:88:52:49:98:28:89:6e:f3:3c:40:f7:aa:0e:
9f:de:73:98:4f:98:5d:fa:b8:ba:47:a4:5b:3d:5d:25:62:8d:
6f:46:8b:6c:8b:ef:1f:2f:ed:1c:f5:ae:5c:27:ed:e7:ef:07:
8d:7e:43:34:51:42:05:b2:71:60:6b:b5:a4:1c:56:e1:f7:f4:
bd:6e:55:01:3e:79:58:7f:fa:5d:d2:67:3c:0e:aa:a6:5b:2c:
b0:e0:a2:18:de:a9:e7:0f:2d:4b:fb:c9:80:ad:e1:5e:46:13:
23:77:b3:a4:30:ba:c0:73:ba:aa:9a:25:96:31:1f:d4:03:64:
ac:27:ab:81:22:61:d0:a5:2e:12:69:d5:56:56:03:a9:15:24:
47:33:36:c7:07:fe:3c:18:db:0e:18:66:19:74:71:15:7a:3e:
7d:e5:94:ef:84:7f:5e:ee:89:ff:9f:c8:65:ef:a0:1e:71:e4:
2b:62:a3:77:46:86:77:86:55:8e:f5:e9:43:ad:d0:c5:0e:52:
63:bb:43:e3:07:6c:a7:fc:a7:48:7d:01:9c:6d:b8:9c:2b:1e:
e5:34:49:ba:3d:d7:43:cc:39:c4:29:7d:af:92:85:da:9a:82:
c8:c4:90:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:33:35 2025 by rpki-client