Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS53191.roa
File: AS53191.roa (raw, json)
Hash identifier: YRj5jFdYku7hBACKoPIF6cTj6CYqCKeoK+TmUR6pUAY=
Subject key identifier: 93:A3:F7:D5:B1:14:56:85:46:05:4E:07:55:07:12:72:B9:BC:D8:E1
Certificate issuer: /CN=D4206C10F587084E3266C97EDA0F65643299E1B8
Certificate serial: 4A3D1D9D81157E38BFD1037DC29A87218B978118
Authority key identifier: D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS53191.roa
Signing time: Mon 25 Nov 2024 16:59:29 +0000
ROA not before: Mon 25 Nov 2024 16:54:29 +0000
ROA not after: Mon 24 Nov 2025 16:59:29 +0000
asID: 53191
IP address blocks: 177.8.216.0/22 maxlen: 24
186.232.128.0/21 maxlen: 24
2804:f2c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:3d:1d:9d:81:15:7e:38:bf:d1:03:7d:c2:9a:87:21:8b:97:81:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4206C10F587084E3266C97EDA0F65643299E1B8
Validity
Not Before: Nov 25 16:54:29 2024 GMT
Not After : Nov 24 16:59:29 2025 GMT
Subject: CN=93A3F7D5B114568546054E0755071272B9BCD8E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:3d:36:6f:26:a3:d5:24:27:c2:6c:2f:7e:
53:7b:f9:15:88:50:df:69:17:09:2a:1a:94:25:47:
86:83:64:13:e1:b8:90:24:e7:5f:dc:51:10:c3:13:
08:bd:62:cd:b9:e7:99:87:05:36:92:06:97:60:27:
93:0d:b4:5d:5d:a6:01:fc:94:2b:36:6a:78:24:15:
52:c3:85:08:42:f5:1f:b8:32:55:2c:48:fd:2a:92:
2f:73:71:fe:10:af:c7:db:ff:16:a6:d9:da:88:37:
33:b3:cd:83:34:35:23:d6:53:06:6a:5b:34:be:36:
3b:9b:85:3e:eb:42:ae:22:5b:a1:25:e6:85:00:6a:
86:13:80:f8:65:f0:51:8a:65:1c:2e:5d:12:d8:ed:
81:da:de:98:9d:21:e4:80:8f:17:ff:8e:eb:a9:fb:
17:ea:c6:62:c5:e6:3f:56:91:49:3d:a9:55:3e:4a:
b9:27:4a:d4:4b:18:71:df:de:5b:f8:7a:5e:da:49:
74:45:8d:b9:37:77:87:70:84:21:b0:bc:33:fc:11:
68:11:95:a3:9c:9e:0b:b3:9d:f9:e1:79:ac:47:2d:
70:cc:ce:27:d9:84:cb:ee:92:ca:e6:04:8e:b9:fe:
43:dd:9c:a6:f2:97:21:05:69:ca:32:1d:a0:27:aa:
62:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A3:F7:D5:B1:14:56:85:46:05:4E:07:55:07:12:72:B9:BC:D8:E1
X509v3 Authority Key Identifier:
keyid:D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS53191.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.8.216.0/22
186.232.128.0/21
IPv6:
2804:f2c::/32
Signature Algorithm: sha256WithRSAEncryption
ca:6c:00:0b:99:17:01:3a:f5:0d:99:dc:c8:e4:6b:92:bf:68:
b8:79:61:d5:a4:95:a0:7f:0c:07:a0:01:f4:0b:96:c8:ef:f7:
74:89:9f:02:bd:8a:95:57:cb:a7:77:aa:ff:b0:ec:e5:57:8e:
3d:57:92:45:bd:7c:53:26:02:da:78:e7:5c:35:77:45:ea:2c:
98:02:3a:04:32:5f:33:5a:35:8b:c8:50:eb:62:df:cd:c8:94:
d5:fd:49:06:2a:07:b4:70:a3:a6:27:a1:5a:aa:22:ac:70:98:
0b:4e:87:72:d4:5d:ff:4a:3c:1f:67:e2:a0:83:82:77:0e:08:
e3:c6:4e:da:6a:bc:84:0f:73:9a:16:8c:61:f5:bd:ab:16:a5:
c7:ac:78:d2:46:b7:6d:d7:ff:40:bb:3e:d4:1b:df:75:9a:e4:
ab:79:9f:1d:0c:e7:88:54:3d:ee:0d:a7:22:2a:c2:d2:1d:fc:
1e:1c:13:c6:40:c3:2c:57:38:54:5b:ff:8e:bb:35:a7:b9:4d:
5e:3e:16:77:5e:5e:c4:51:bf:ee:b8:31:93:ba:e9:04:c8:a8:
1d:da:ee:0a:7c:00:a4:a9:da:0b:fd:8a:54:b5:61:ba:9d:14:
5e:e0:80:a2:ea:dc:90:21:cb:c5:a0:69:18:63:f5:1c:fc:8f:
9b:8d:c2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:41:41 2025 by rpki-client