Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS265427.roa
File: AS265427.roa (raw, json)
Hash identifier: 99ZnTPlESkCRbab1epre3MgGUx4VlKiLOPy0XL9kWII=
Subject key identifier: 9E:5D:A9:43:05:3E:54:14:96:A6:CD:E7:B3:2B:01:5D:70:7F:E4:30
Certificate issuer: /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial: 6FA8F2F0737349C95835C7D10F5BE59D84F8F46E
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS265427.roa
Signing time: Thu 18 Apr 2024 13:30:04 +0000
ROA not before: Thu 18 Apr 2024 13:25:04 +0000
ROA not after: Thu 17 Apr 2025 13:30:04 +0000
asID: 265427
IP address blocks: 168.195.192.0/22 maxlen: 24
2804:33f4::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:a8:f2:f0:73:73:49:c9:58:35:c7:d1:0f:5b:e5:9d:84:f8:f4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Validity
Not Before: Apr 18 13:25:04 2024 GMT
Not After : Apr 17 13:30:04 2025 GMT
Subject: CN=9E5DA943053E541496A6CDE7B32B015D707FE430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:d9:7d:69:97:7f:e1:3b:59:23:52:0b:41:
4e:db:34:3d:e2:23:53:7a:4f:5a:55:98:f4:32:04:
04:1c:da:db:65:b3:ab:7f:f0:89:37:0f:de:88:53:
c5:78:0f:ec:16:22:f0:1c:91:70:ec:e2:b0:e3:96:
61:bb:a1:6a:1d:96:5c:7e:a0:fc:b2:ae:bc:ba:0b:
e6:40:39:b9:35:cc:0a:ef:b9:39:81:30:04:f7:9b:
87:d0:7b:e6:08:bc:a3:26:34:b8:39:ed:98:23:cf:
dc:31:30:9e:4c:12:8d:71:d8:9f:2e:3f:9d:e7:47:
1c:c9:aa:c2:3e:11:76:16:22:a9:25:67:4e:a3:a7:
5e:e7:ef:ef:51:3f:60:3f:37:d1:f6:83:4c:72:ff:
21:e6:fa:ac:ca:ed:aa:b2:86:00:c1:71:df:5f:97:
dd:f9:a3:7b:03:e5:bc:2c:2f:54:0b:7f:de:09:96:
bf:30:fa:d6:04:6a:a2:33:63:24:41:9c:64:33:da:
4d:c0:e0:01:f3:f5:78:a8:a2:77:e9:ea:0c:eb:a0:
14:24:1c:cb:fb:76:e4:c9:37:39:ad:14:78:aa:f4:
8f:2d:43:5d:0c:b1:ae:fa:55:dc:3d:8d:93:70:67:
35:85:41:c7:e8:05:27:8e:ba:5a:fe:fb:ee:35:92:
6e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5D:A9:43:05:3E:54:14:96:A6:CD:E7:B3:2B:01:5D:70:7F:E4:30
X509v3 Authority Key Identifier:
keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS265427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.192.0/22
IPv6:
2804:33f4::/32
Signature Algorithm: sha256WithRSAEncryption
5d:f7:9e:e0:2c:94:48:aa:4f:ab:75:3b:dd:ee:74:11:96:f7:
a7:a5:c1:93:4b:c2:e3:2d:b1:fb:16:e6:18:a5:7e:5f:38:3a:
71:19:b4:c3:8c:0c:f7:96:91:44:9b:f1:ae:26:93:c4:03:e3:
be:30:fe:db:54:be:80:6e:10:be:41:5c:6c:ed:2c:ca:59:6c:
89:7c:7a:27:f2:62:a4:a5:55:51:62:89:2a:ea:e6:50:8f:a9:
fa:2f:de:2d:0c:f0:cf:92:ed:86:b0:91:8b:7a:95:dd:5c:90:
87:b9:47:38:a3:fb:6b:99:65:a0:2a:88:05:68:57:90:da:e4:
05:ba:c1:98:23:0b:08:ef:ad:df:ed:b4:bc:6c:38:b5:13:d4:
66:5f:86:53:01:35:0b:f3:3f:7d:a8:b9:73:97:2d:82:fb:9b:
fd:a5:a3:8d:e4:5a:23:98:24:76:e9:d1:f7:2e:5e:23:f0:9e:
61:cb:2c:90:30:a3:9d:ae:d4:91:9f:35:e6:66:d5:9a:e9:0e:
30:9a:8c:b4:e6:c3:f0:fa:24:d7:d3:37:d1:d2:ac:78:94:30:
6e:4b:cd:9b:41:c9:40:94:b0:6e:94:79:f5:a2:13:5e:1d:3f:
33:f9:ff:39:18:b3:14:9a:79:44:bc:d9:00:c2:7b:8e:56:9d:
7b:e8:e7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:53 2025 by rpki-client