Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS52866.roa
File: AS52866.roa (raw, json)
Hash identifier: sY43Q11mlrZ3qM7+yZtCZSHWYwTu3qCh+Eo3za0a0N0=
Subject key identifier: EE:7F:F2:BD:DC:95:81:50:B2:34:82:52:93:A3:14:98:25:DF:46:BC
Certificate issuer: /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial: 7017AB706734F8C3B49DE671926046B3952574A3
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS52866.roa
Signing time: Wed 10 Apr 2024 22:11:50 +0000
ROA not before: Wed 10 Apr 2024 22:06:50 +0000
ROA not after: Wed 09 Apr 2025 22:11:50 +0000
asID: 52866
IP address blocks: 131.100.128.0/22 maxlen: 24
138.94.112.0/22 maxlen: 24
170.81.244.0/22 maxlen: 24
177.125.24.0/22 maxlen: 24
186.233.220.0/22 maxlen: 24
2804:bdc::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:17:ab:70:67:34:f8:c3:b4:9d:e6:71:92:60:46:b3:95:25:74:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Validity
Not Before: Apr 10 22:06:50 2024 GMT
Not After : Apr 9 22:11:50 2025 GMT
Subject: CN=EE7FF2BDDC958150B234825293A3149825DF46BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0d:d8:62:8f:87:f1:cf:aa:3b:db:69:03:c5:
b3:bb:75:8c:61:46:70:72:42:4c:0a:cc:1d:1b:c3:
48:9d:a0:fa:40:ba:e9:6c:e2:06:9c:1e:be:0b:a4:
b4:4b:18:8a:67:46:63:7b:33:68:2b:95:06:da:5d:
ae:23:b9:9b:5f:bb:e5:1c:77:bb:06:f5:eb:bc:54:
7b:aa:c9:01:17:dc:0b:8c:af:57:6c:a5:dc:62:a0:
c8:36:d3:ce:c9:7e:e5:b6:9a:af:7c:b4:19:23:9a:
f4:19:da:e9:c3:64:ea:02:34:c7:cd:28:6d:f9:eb:
4f:38:08:6d:d3:4f:c7:74:e4:98:fd:65:b4:14:4c:
7f:e2:2a:8b:59:95:7a:9a:cf:13:d7:90:5e:02:95:
6a:6c:79:14:3a:bf:29:3d:c6:ee:80:2d:31:8b:71:
97:c9:10:35:de:c7:76:ef:ab:90:50:f8:9e:8a:32:
70:e3:6c:39:b4:dd:c9:9c:82:f7:fe:d6:e3:1d:90:
6a:7a:b6:b7:5e:9e:a4:45:8b:6f:02:37:bb:95:2a:
df:8e:78:1b:f6:dc:4a:40:fa:9f:b3:28:8a:7a:d5:
df:ad:38:29:b1:06:e0:90:e6:30:09:ef:cc:43:ff:
cd:af:b7:dd:07:65:3f:3f:dd:8d:26:0f:a2:96:cb:
ef:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7F:F2:BD:DC:95:81:50:B2:34:82:52:93:A3:14:98:25:DF:46:BC
X509v3 Authority Key Identifier:
keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS52866.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.128.0/22
138.94.112.0/22
170.81.244.0/22
177.125.24.0/22
186.233.220.0/22
IPv6:
2804:bdc::/32
Signature Algorithm: sha256WithRSAEncryption
5f:01:b7:7a:70:a1:03:f3:90:48:2c:a3:35:8c:49:a5:0d:6d:
54:e8:87:c2:2e:bf:aa:8c:71:09:cb:e4:ac:da:c5:16:c7:f0:
f1:96:a1:78:38:75:fc:54:5b:a6:b8:64:ec:b6:46:d9:5d:56:
01:b1:10:d2:9b:cd:5d:a5:37:fc:34:05:d5:0a:31:fb:5a:eb:
06:a3:b7:fa:38:d7:ce:ad:b0:e0:ad:a3:2d:f3:de:91:7a:34:
15:bd:29:b1:c4:b0:3f:3d:55:78:8a:7f:c7:89:04:5c:5c:61:
7a:2d:72:47:83:81:97:3f:05:5f:43:56:a6:31:39:ff:f2:3d:
5e:56:6a:7a:2a:35:a9:46:74:bd:d1:a7:ff:64:40:24:22:88:
3d:0d:01:df:44:97:ae:35:7f:b2:f5:4d:64:86:5f:d3:77:52:
ea:88:55:2e:a2:f7:3d:03:9e:cc:58:c1:ba:ea:2b:b5:20:d0:
1e:79:28:89:3c:cf:97:5e:5e:e1:4a:50:0d:1a:bc:d5:5b:ed:
b8:08:87:86:8c:54:11:41:16:5a:b1:12:de:86:5e:e2:7c:42:
9b:4b:2b:7b:06:34:bd:9c:f2:c9:b3:be:ec:80:33:da:e7:94:
10:2e:3a:5d:ac:45:1d:6e:5f:9f:dd:51:0d:44:b0:0a:fb:49:
e7:7f:ce:8a
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUcBercGc0+MO0neZxkmBGs5UldKMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJFOTE0NzVFQjZDODZBQTQwRjNBMTNBQTBDM0MzOERC
OTYyN0JDRDAeFw0yNDA0MTAyMjA2NTBaFw0yNTA0MDkyMjExNTBaMDMxMTAvBgNV
BAMTKEVFN0ZGMkJEREM5NTgxNTBCMjM0ODI1MjkzQTMxNDk4MjVERjQ2QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIDdhij4fxz6o722kDxbO7dYxh
RnByQkwKzB0bw0idoPpAuuls4gacHr4LpLRLGIpnRmN7M2grlQbaXa4juZtfu+Uc
d7sG9eu8VHuqyQEX3AuMr1dspdxioMg2087JfuW2mq98tBkjmvQZ2unDZOoCNMfN
KG356084CG3TT8d05Jj9ZbQUTH/iKotZlXqazxPXkF4ClWpseRQ6vyk9xu6ALTGL
cZfJEDXex3bvq5BQ+J6KMnDjbDm03cmcgvf+1uMdkGp6trdenqRFi28CN7uVKt+O
eBv23EpA+p+zKIp61d+tOCmxBuCQ5jAJ78xD/82vt90HZT8/3Y0mD6KWy+9RAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQU7n/yvdyVgVCyNIJSk6MUmCXfRrwwHwYDVR0j
BBgwFoAUW+kUdetshqpA86E6oMPDjblie80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW
Nm8vMS81QkU5MTQ3NUVCNkM4NkFBNDBGM0ExM0FBMEMzQzM4REI5NjI3QkNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCRTkxNDc1RUI2Qzg2QUE0
MEYzQTEzQUEwQzNDMzhEQjk2MjdCQ0QuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr
BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82NzNx
WVBTSzJEV1dqQ0JhbVdoTkM3cmdycWhDUVBBamRHSFNkQ1puOVY2by8xL0FTNTI4
NjYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRgYIKwYBBQUHAQcBAf8E
NzA1MCQEAgABMB4DBAKDZIADBAKKXnADBAKqUfQDBAKxfRgDBAK66dwwDQQCAAIw
BwMFACgEC9wwDQYJKoZIhvcNAQELBQADggEBAF8Bt3pwoQPzkEgsozWMSaUNbVTo
h8Iuv6qMcQnL5KzaxRbH8PGWoXg4dfxUW6a4ZOy2RtldVgGxENKbzV2lN/w0BdUK
Mfta6wajt/o4186tsOCtoy3z3pF6NBW9KbHEsD89VXiKf8eJBFxcYXotckeDgZc/
BV9DVqYxOf/yPV5WanoqNalGdL3Rp/9kQCQiiD0NAd9El641f7L1TWSGX9N3UuqI
VS6i9z0DnsxYwbrqK7Ug0B55KIk8z5deXuFKUA0avNVb7bgIh4aMVBFBFlqxEt6G
XuJ8QptLK3sGNL2c8smzvuyAM9rnlBAuOl2sRR1uX5/dUQ1EsAr7Sed/zoo=
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:40:46 2025 by rpki-client