Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS262605.roa
File: AS262605.roa (raw, json)
Hash identifier: 2fj8pVo46ONzYndVkJlfsJCbFTVFl5k81/NPvgsWL7A=
Subject key identifier: 32:14:47:C2:1B:F2:B2:A3:33:1B:D7:24:D4:0B:4F:F8:0C:12:3E:81
Certificate issuer: /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial: 7769A6530859449BC36C922A4E6E11014C4E03AC
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS262605.roa
Signing time: Wed 10 Apr 2024 22:01:14 +0000
ROA not before: Wed 10 Apr 2024 21:56:14 +0000
ROA not after: Wed 09 Apr 2025 22:01:14 +0000
asID: 262605
IP address blocks: 132.255.252.0/22 maxlen: 24
138.99.84.0/22 maxlen: 24
143.202.108.0/22 maxlen: 24
170.80.104.0/22 maxlen: 24
177.84.232.0/22 maxlen: 24
177.128.44.0/22 maxlen: 24
177.184.248.0/21 maxlen: 24
186.250.8.0/22 maxlen: 24
186.250.12.0/22 maxlen: 24
2804:24c::/32 maxlen: 48
2804:da8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:69:a6:53:08:59:44:9b:c3:6c:92:2a:4e:6e:11:01:4c:4e:03:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Validity
Not Before: Apr 10 21:56:14 2024 GMT
Not After : Apr 9 22:01:14 2025 GMT
Subject: CN=321447C21BF2B2A3331BD724D40B4FF80C123E81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:be:c1:d6:0a:3a:c0:b5:4c:c3:b2:bf:26:
1b:88:91:f4:8e:bc:fb:6e:da:7e:ba:3c:f4:90:9a:
24:ca:c9:da:d0:c5:e7:c3:fa:59:ec:b0:da:77:46:
fc:f5:cf:1a:3c:2a:60:26:77:b2:df:d6:60:f3:76:
97:10:56:32:2b:39:d7:91:a2:c4:67:00:3d:84:be:
e9:b8:0e:de:a6:ac:dc:46:d1:27:41:92:37:aa:e7:
87:2e:b5:7d:3b:0c:43:54:c2:10:2e:d9:c4:39:66:
bd:ca:d6:ed:2c:d0:44:68:7d:76:a0:4c:c0:b2:47:
b7:85:64:e6:09:a1:a6:a2:4f:1a:7a:4a:d6:d1:c6:
d9:61:f4:b8:ae:f8:c5:3b:c3:eb:4c:52:5e:91:2f:
1e:c6:43:6c:fe:1d:37:44:f8:c7:49:85:58:10:b8:
6a:9e:81:d5:9d:dc:c2:e6:b9:90:36:df:39:f2:e7:
9b:29:a2:3c:c4:44:e4:1b:a7:d8:bd:e8:62:94:e2:
54:c7:f7:88:76:64:6a:13:a1:91:d8:6e:fc:82:84:
e7:99:b6:c0:64:5e:69:80:e9:82:a9:70:00:cb:2f:
e9:0d:c7:23:72:04:0a:25:41:2b:59:6f:79:79:f6:
92:bb:7c:57:9c:8e:6d:21:72:3c:96:c0:a7:d2:55:
31:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:14:47:C2:1B:F2:B2:A3:33:1B:D7:24:D4:0B:4F:F8:0C:12:3E:81
X509v3 Authority Key Identifier:
keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS262605.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.252.0/22
138.99.84.0/22
143.202.108.0/22
170.80.104.0/22
177.84.232.0/22
177.128.44.0/22
177.184.248.0/21
186.250.8.0/21
IPv6:
2804:24c::/32
2804:da8::/32
Signature Algorithm: sha256WithRSAEncryption
7e:71:57:3d:a7:f0:c5:72:44:29:e6:e6:6a:46:70:0c:71:a1:
1c:bd:b1:a1:fe:61:b2:ac:03:83:a8:2d:31:7c:65:cd:6a:b8:
e7:f3:3a:19:cb:ea:6b:9a:6f:8e:e7:7b:bf:70:08:04:8b:b1:
81:69:76:3e:1d:fe:32:cd:c2:ee:51:e2:c3:cc:05:a9:1a:56:
f1:4e:5b:df:d0:c9:d0:3a:c7:db:02:da:3c:6d:c6:57:3b:bb:
75:f2:38:f1:77:20:75:c7:54:55:ed:76:7c:47:fe:ae:dd:94:
80:6d:0e:15:42:3b:2f:db:0b:bb:d5:99:56:a9:36:46:15:d7:
5d:45:1e:42:4d:95:83:64:0b:f6:5a:28:6c:dc:22:32:53:2e:
30:f5:de:23:1c:56:7d:2a:4b:9b:f5:c9:0b:48:e8:24:c9:e6:
6e:19:01:44:df:f9:f6:4e:fa:e4:84:84:fc:fc:22:f6:df:d3:
98:f0:3c:62:0e:14:e2:7e:32:d2:d8:23:e7:92:c3:b9:d9:c4:
42:c3:a1:9a:27:b3:4d:ea:a3:b4:54:b4:56:f0:00:92:5c:f3:
50:46:0e:2b:bd:21:6e:82:c4:69:b5:a9:93:8f:ba:cb:ee:35:
09:a6:1f:a9:23:2b:8a:c4:bd:80:67:09:56:2b:d5:17:06:1f:
75:c7:19:d5
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUd2mmUwhZRJvDbJIqTm4RAUxOA6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJFOTE0NzVFQjZDODZBQTQwRjNBMTNBQTBDM0MzOERC
OTYyN0JDRDAeFw0yNDA0MTAyMTU2MTRaFw0yNTA0MDkyMjAxMTRaMDMxMTAvBgNV
BAMTKDMyMTQ0N0MyMUJGMkIyQTMzMzFCRDcyNEQ0MEI0RkY4MEMxMjNFODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrPb7B1go6wLVMw7K/JhuIkfSO
vPtu2n66PPSQmiTKydrQxefD+lnssNp3Rvz1zxo8KmAmd7Lf1mDzdpcQVjIrOdeR
osRnAD2Evum4Dt6mrNxG0SdBkjeq54cutX07DENUwhAu2cQ5Zr3K1u0s0ERofXag
TMCyR7eFZOYJoaaiTxp6StbRxtlh9Liu+MU7w+tMUl6RLx7GQ2z+HTdE+MdJhVgQ
uGqegdWd3MLmuZA23zny55spojzEROQbp9i96GKU4lTH94h2ZGoToZHYbvyChOeZ
tsBkXmmA6YKpcADLL+kNxyNyBAolQStZb3l59pK7fFecjm0hcjyWwKfSVTGTAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUMhRHwhvysqMzG9ck1AtP+AwSPoEwHwYDVR0j
BBgwFoAUW+kUdetshqpA86E6oMPDjblie80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW
Nm8vMS81QkU5MTQ3NUVCNkM4NkFBNDBGM0ExM0FBMEMzQzM4REI5NjI3QkNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCRTkxNDc1RUI2Qzg2QUE0
MEYzQTEzQUEwQzNDMzhEQjk2MjdCQ0QuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr
BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82NzNx
WVBTSzJEV1dqQ0JhbVdoTkM3cmdycWhDUVBBamRHSFNkQ1puOVY2by8xL0FTMjYy
NjA1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/
BFAwTjA2BAIAATAwAwQChP/8AwQCimNUAwQCj8psAwQCqlBoAwQCsVToAwQCsYAs
AwQDsbj4AwQDuvoIMBQEAgACMA4DBQAoBAJMAwUAKAQNqDANBgkqhkiG9w0BAQsF
AAOCAQEAfnFXPafwxXJEKebmakZwDHGhHL2xof5hsqwDg6gtMXxlzWq45/M6Gcvq
a5pvjud7v3AIBIuxgWl2Ph3+Ms3C7lHiw8wFqRpW8U5b39DJ0DrH2wLaPG3GVzu7
dfI48XcgdcdUVe12fEf+rt2UgG0OFUI7L9sLu9WZVqk2RhXXXUUeQk2Vg2QL9loo
bNwiMlMuMPXeIxxWfSpLm/XJC0joJMnmbhkBRN/59k765ISE/Pwi9t/TmPA8Yg4U
4n4y0tgj55LDudnEQsOhmiezTeqjtFS0VvAAklzzUEYOK70hboLEabWpk4+6y+41
CaYfqSMrisS9gGcJVivVFwYfdccZ1Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:43:16 2025 by rpki-client