Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS262673.roa
File: AS262673.roa (raw, json)
Hash identifier: fT5qaeZBSzgd135I2Appjxpx0/dIBMlOYrmUUADcQxg=
Subject key identifier: DE:44:05:2A:06:D3:D2:C4:5F:F8:30:5B:40:5A:A7:C6:74:AE:26:91
Certificate issuer: /CN=D4206C10F587084E3266C97EDA0F65643299E1B8
Certificate serial: 41BFBF6537782518BCEA0B225FD0FAB5E9D45387
Authority key identifier: D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS262673.roa
Signing time: Mon 25 Nov 2024 16:59:36 +0000
ROA not before: Mon 25 Nov 2024 16:54:36 +0000
ROA not after: Mon 24 Nov 2025 16:59:36 +0000
asID: 262673
IP address blocks: 177.184.96.0/20 maxlen: 24
177.184.112.0/20 maxlen: 24
186.235.192.0/20 maxlen: 24
186.235.208.0/20 maxlen: 24
187.73.64.0/19 maxlen: 24
201.162.64.0/18 maxlen: 24
2804:187c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:bf:bf:65:37:78:25:18:bc:ea:0b:22:5f:d0:fa:b5:e9:d4:53:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4206C10F587084E3266C97EDA0F65643299E1B8
Validity
Not Before: Nov 25 16:54:36 2024 GMT
Not After : Nov 24 16:59:36 2025 GMT
Subject: CN=DE44052A06D3D2C45FF8305B405AA7C674AE2691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a2:cd:4c:16:6a:3f:20:72:8e:21:e6:0d:05:
1a:22:bf:b8:60:8c:8d:f2:f6:ca:1e:e1:dd:0b:ca:
67:4f:9a:96:33:1b:09:ca:d5:ba:d2:35:f7:d0:2d:
d6:fb:91:6f:74:5e:72:1e:38:70:b3:fd:8b:67:03:
82:35:a0:86:5a:4e:58:6c:31:db:53:31:16:7b:fe:
eb:35:74:24:c3:ff:e3:3b:a3:43:f9:b8:dc:0e:7d:
75:9b:7c:ee:b2:29:62:dd:9d:ef:a6:c4:fc:cd:80:
73:d4:69:2f:59:66:a9:48:1f:8f:6c:ba:fa:98:51:
13:fa:13:4a:52:5b:5d:53:c5:09:27:ee:54:8e:0f:
b3:3a:2c:6b:b1:af:5b:20:4c:e8:93:f0:23:3a:c0:
4e:a1:46:02:01:ac:b9:1c:81:bc:90:ae:ca:32:d0:
5f:bb:0a:ea:23:d5:43:8a:ce:be:69:2f:00:b0:f3:
34:61:3b:15:c5:80:04:0a:aa:c2:02:b5:8c:16:21:
30:1b:a3:42:79:83:d7:4f:73:fa:33:2a:c3:a8:c9:
2c:e4:8c:c9:27:16:ed:71:a0:c9:23:de:b8:67:d6:
c6:f3:38:9b:42:ea:28:ac:e6:fb:04:be:86:a1:fd:
86:a4:1d:95:c9:4e:3f:5f:e4:89:78:4e:db:ce:38:
a9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:44:05:2A:06:D3:D2:C4:5F:F8:30:5B:40:5A:A7:C6:74:AE:26:91
X509v3 Authority Key Identifier:
keyid:D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS262673.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.184.96.0/19
186.235.192.0/19
187.73.64.0/19
201.162.64.0/18
IPv6:
2804:187c::/32
Signature Algorithm: sha256WithRSAEncryption
a7:3a:de:15:a9:71:00:41:01:d2:75:87:74:ff:11:a3:8f:1c:
28:ab:44:d8:d3:f7:5e:17:87:f3:fa:16:84:a1:13:4e:9b:b9:
86:bf:6f:a3:b7:50:ed:49:45:7c:fb:32:72:66:a3:82:51:7c:
09:46:48:f5:76:84:8a:2a:a7:df:91:be:b4:01:07:6f:48:75:
2c:84:35:62:5a:50:ef:97:ce:b5:a6:bc:be:30:f9:a3:c0:f3:
fa:fe:ba:a4:d1:0a:52:8f:65:a9:3c:6a:83:70:f8:cc:e8:88:
ff:b5:34:0a:86:58:b9:71:17:93:88:bb:7d:e5:b4:f7:56:32:
de:e8:70:4a:7a:56:31:9f:b8:b0:d2:81:99:9d:02:72:3a:0b:
c8:1a:b4:3f:2b:4a:1a:29:03:2c:70:01:a1:33:d3:cb:0d:07:
e3:e8:8f:03:90:a2:9e:c0:75:ca:a8:57:88:1e:60:85:23:42:
ac:a0:8e:22:fa:99:29:80:06:86:7f:0d:f5:c1:c8:c1:b5:0c:
9e:10:d3:74:0f:b3:67:c1:9c:7c:6c:2f:f7:fe:f3:66:21:be:
b5:bf:16:7a:16:c5:f1:0e:ba:8b:a4:61:02:bf:68:4a:cc:cc:
33:46:2f:37:f5:19:0f:6e:56:ec:1e:79:5a:b9:73:18:b7:f5:
2d:e0:b5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:00:39 2025 by rpki-client