Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS271242.roa
File: AS271242.roa (raw, json)
Hash identifier: dLWJuTsmf+wg3/I+6IuhfQIH2OiMswUsSoop+IX9SiI=
Subject key identifier: EE:AC:43:CC:73:CD:83:ED:BC:07:62:78:EE:CC:1D:F7:7C:6A:E2:18
Certificate issuer: /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial: 642F6751D376D9BE8E203500090B2C17F5763752
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS271242.roa
Signing time: Fri 21 Mar 2025 12:24:08 +0000
ROA not before: Fri 21 Mar 2025 12:19:08 +0000
ROA not after: Fri 20 Mar 2026 12:24:08 +0000
asID: 271242
IP address blocks: 179.51.216.0/22 maxlen: 24
2804:7870::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:2f:67:51:d3:76:d9:be:8e:20:35:00:09:0b:2c:17:f5:76:37:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Validity
Not Before: Mar 21 12:19:08 2025 GMT
Not After : Mar 20 12:24:08 2026 GMT
Subject: CN=EEAC43CC73CD83EDBC076278EECC1DF77C6AE218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:aa:46:50:8b:11:e1:fe:ac:55:3a:93:6b:
d5:cf:f2:3b:e2:76:ee:7d:d7:4a:db:07:48:d2:bc:
fe:9d:fc:4e:ed:9f:b1:70:91:01:94:c9:65:36:b6:
e6:3a:6e:6d:64:29:ce:bd:45:95:36:47:32:e0:e8:
d0:a0:31:19:50:cc:b3:36:33:7e:4a:15:9d:6d:b3:
0b:e0:8b:50:9d:85:96:38:19:56:99:bd:e2:da:6b:
0c:4f:db:8a:25:69:54:b9:5c:aa:8a:73:93:51:bf:
93:31:bd:74:96:4e:17:44:92:ff:77:8a:8f:8e:fa:
0e:2c:b3:2b:3a:15:7b:ca:b9:47:51:ff:32:48:9d:
76:b0:d5:0c:e0:a9:fe:50:46:8e:52:7c:39:79:17:
68:9b:d2:41:e4:8c:84:fd:1d:2e:6c:b4:62:26:46:
e2:3f:57:64:9f:49:79:66:a6:13:ad:42:a0:87:e8:
0c:0a:74:98:78:b0:55:ae:8e:18:96:58:f4:71:f8:
c0:55:be:f9:82:2d:de:6b:9d:66:c4:3f:ab:91:6a:
05:57:63:a6:54:c6:4e:0a:9a:b2:fa:1b:ed:c8:46:
d4:74:b7:f3:6b:4a:e1:61:21:42:ed:b1:f8:f3:d5:
1c:2e:44:ad:73:fc:8d:c0:6f:6c:b7:08:78:19:1f:
76:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AC:43:CC:73:CD:83:ED:BC:07:62:78:EE:CC:1D:F7:7C:6A:E2:18
X509v3 Authority Key Identifier:
keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS271242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.51.216.0/22
IPv6:
2804:7870::/32
Signature Algorithm: sha256WithRSAEncryption
99:34:bb:73:c7:e2:79:0a:fd:2c:c8:7a:eb:42:5b:96:c3:52:
59:9f:29:20:be:c2:61:8e:43:4a:79:25:56:9a:19:6a:2f:64:
46:32:0d:98:3f:ff:75:c6:7e:4f:b7:a2:02:5d:78:86:bc:c2:
5d:da:ea:a4:82:5b:54:ae:64:63:73:e9:27:ac:02:95:54:be:
85:97:23:27:8e:ae:89:f8:1d:d9:ea:33:05:da:e5:41:79:1c:
47:5e:c6:1b:bb:d4:6a:f3:92:c0:90:5f:c5:f2:c2:f4:0a:83:
95:0f:9e:6a:6c:9c:b9:94:57:ff:e0:c5:bb:53:93:b4:24:52:
a5:09:b8:54:e9:ce:5c:8f:db:21:4d:41:b6:b5:70:94:6f:71:
5c:17:a4:2b:e8:88:df:34:67:9c:24:1f:8c:25:8a:8d:a7:41:
c2:d2:d3:5e:4e:9c:71:19:e9:9f:84:f2:f0:f3:0e:ba:35:77:
74:9d:ad:ec:6e:7a:0c:43:71:6d:9c:c5:32:00:56:14:aa:a1:
98:84:bb:88:a2:f2:b5:46:5f:0f:29:b6:76:f7:d7:43:53:94:
d5:93:30:8e:06:b2:c8:e2:fa:7b:cc:7f:a2:ba:c9:95:14:f3:
5f:14:e3:bc:49:a6:55:45:49:57:dc:e1:f6:d3:33:08:99:f5:
25:d2:f7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:30:34 2025 by rpki-client