Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS263645.roa
File: AS263645.roa (raw, json)
Hash identifier: p5GgvaLj0zmkXzV5AJyY44lMxFFzVbvUYUQ/diWLcgI=
Subject key identifier: 60:A0:B8:52:AD:1F:09:31:CE:C1:C2:BB:A1:9F:6A:AB:10:2B:BC:76
Certificate issuer: /CN=D4206C10F587084E3266C97EDA0F65643299E1B8
Certificate serial: 38815277D82DCBAFC14F19FE66458CC9F6056A88
Authority key identifier: D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS263645.roa
Signing time: Mon 25 Nov 2024 16:59:38 +0000
ROA not before: Mon 25 Nov 2024 16:54:38 +0000
ROA not after: Mon 24 Nov 2025 16:59:38 +0000
asID: 263645
IP address blocks: 179.127.248.0/21 maxlen: 24
2804:10b4::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:81:52:77:d8:2d:cb:af:c1:4f:19:fe:66:45:8c:c9:f6:05:6a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4206C10F587084E3266C97EDA0F65643299E1B8
Validity
Not Before: Nov 25 16:54:38 2024 GMT
Not After : Nov 24 16:59:38 2025 GMT
Subject: CN=60A0B852AD1F0931CEC1C2BBA19F6AAB102BBC76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a9:55:67:8f:f6:91:3e:e5:97:bd:26:18:b3:
ec:f6:9e:8d:20:a3:71:4b:93:d0:45:19:c6:2a:e1:
66:c7:ea:7a:e9:80:1c:80:2e:50:1c:b9:77:6f:81:
64:9d:83:d3:4a:7f:62:d5:4f:37:b7:9d:a4:c1:16:
0e:38:cc:2f:a7:07:7b:c9:b2:a0:6b:80:2c:83:35:
28:2c:be:83:9f:3d:a7:41:be:31:65:c7:16:2f:c5:
eb:64:d8:09:4b:e5:c3:02:57:4c:cf:1f:74:a1:5a:
a9:0f:bc:09:3c:4b:d6:90:b7:89:f6:5f:f8:68:0f:
43:ae:73:6b:58:72:c3:ac:c7:47:aa:82:eb:1f:7c:
53:b6:27:09:22:14:4e:86:76:63:3f:1b:bc:b2:1c:
3b:c0:42:5a:9b:cd:f3:4d:32:e7:bd:cd:87:a6:d5:
93:d1:57:03:48:97:02:96:39:d8:2f:a4:e2:1c:aa:
6b:d8:d0:20:ae:3c:5f:c4:43:12:3c:f3:ca:96:0c:
82:6e:50:8f:7a:a4:49:41:c1:ac:ac:9d:f2:0d:fe:
43:84:40:48:ac:c3:4d:63:2e:de:eb:7f:a0:17:e0:
8e:95:e4:9d:f4:84:e0:4f:73:ab:70:0c:f1:46:c0:
02:7a:29:60:e6:00:1e:da:24:47:1e:88:f2:42:b9:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A0:B8:52:AD:1F:09:31:CE:C1:C2:BB:A1:9F:6A:AB:10:2B:BC:76
X509v3 Authority Key Identifier:
keyid:D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS263645.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.127.248.0/21
IPv6:
2804:10b4::/32
Signature Algorithm: sha256WithRSAEncryption
4b:e4:01:95:cf:4a:8c:35:bd:e1:b7:71:f1:06:b8:9e:2e:70:
fa:5d:92:f3:17:b0:57:8f:b3:fe:0c:54:4c:2a:67:fc:a0:09:
e2:75:d2:65:56:e5:6e:5e:57:64:46:38:9a:0c:24:6d:e6:61:
2d:0d:1e:8e:d8:87:d3:00:a8:28:91:97:ea:9e:20:a9:09:11:
9e:ea:76:77:04:e0:6b:c2:d7:9f:92:1d:97:9b:eb:64:34:c0:
f8:86:31:c5:4e:de:ed:29:76:3e:30:29:4d:03:43:50:45:f2:
fd:09:26:47:23:0f:d7:15:b3:4b:8c:cd:8f:29:9a:b2:5f:96:
84:a8:df:70:67:60:4f:f8:01:9b:31:48:4e:7a:f7:7f:68:00:
e9:44:dd:2e:2f:70:3f:da:96:c3:b0:a2:83:10:18:aa:fd:62:
d7:5e:88:31:b6:13:54:51:f4:f3:8b:cd:54:08:16:9d:09:11:
a7:a4:1a:7a:ad:65:45:0d:01:f3:96:20:06:66:69:bc:c2:23:
e2:85:38:d9:7f:96:cc:b9:49:c4:27:ef:a8:5f:ea:a9:dc:41:
7e:dd:68:75:b8:55:c0:0a:16:1b:d7:f5:90:f4:85:fe:e7:70:
c9:26:44:c8:09:bd:5f:3f:e5:86:49:97:3e:9e:23:22:f7:46:
42:e7:a5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:41:22 2025 by rpki-client