Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS52900.roa
File: AS52900.roa (raw, json)
Hash identifier: rAQHUFdoANlWtjyYYCcd822RMT0eYFnXZF+WVubqJ90=
Subject key identifier: AC:2D:28:F8:3F:2E:F6:74:2D:02:78:64:6E:D0:F4:E8:22:84:D1:D4
Certificate issuer: /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial: 7AD560DCD5B0399A3E09F3ED33231AD02F0B98F7
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS52900.roa
Signing time: Wed 10 Apr 2024 22:18:29 +0000
ROA not before: Wed 10 Apr 2024 22:13:29 +0000
ROA not after: Wed 09 Apr 2025 22:18:29 +0000
asID: 52900
IP address blocks: 131.221.252.0/22 maxlen: 24
138.186.52.0/22 maxlen: 24
186.251.156.0/22 maxlen: 24
2804:26c8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:d5:60:dc:d5:b0:39:9a:3e:09:f3:ed:33:23:1a:d0:2f:0b:98:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Validity
Not Before: Apr 10 22:13:29 2024 GMT
Not After : Apr 9 22:18:29 2025 GMT
Subject: CN=AC2D28F83F2EF6742D0278646ED0F4E82284D1D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:29:71:76:2c:09:1d:58:53:83:94:9d:7e:2b:
14:1f:cb:b9:33:2d:24:43:a3:5d:86:7d:ee:46:f2:
f3:2c:ee:f6:4d:17:b0:e8:0e:0b:40:97:b3:e9:f4:
3a:24:d5:ea:bd:82:3a:88:7e:81:d9:ed:f8:df:85:
e4:a4:1d:0a:d7:8a:e7:1c:d4:62:4b:3c:8b:38:ff:
10:fb:9a:6f:37:53:3b:3d:53:95:ff:90:6a:f4:a0:
16:bb:3d:3b:60:17:66:56:5a:35:c3:8d:f1:04:39:
d8:c3:cf:1a:f1:e0:52:dd:42:2b:16:fa:96:94:e4:
cc:ac:2f:cb:72:95:f7:d1:af:24:77:66:38:df:d2:
06:eb:c7:55:0d:c1:c5:22:b7:48:39:1e:90:ee:b7:
9a:ae:6c:62:e4:38:01:4a:24:09:98:09:20:2b:9f:
cf:a0:78:1a:55:89:fb:6a:98:d4:2e:4b:26:3d:40:
ad:5b:f6:b4:00:7f:be:6f:15:44:2e:a5:91:57:34:
51:67:80:37:2d:44:ec:ba:f8:b4:09:e2:e3:1a:f9:
a5:24:dd:34:48:32:9e:9c:9c:4c:5e:16:64:cc:94:
63:2c:3c:8f:b2:69:9a:88:8d:96:2c:e1:95:7f:e6:
ed:4d:00:a5:65:dd:9c:83:e8:50:b9:f3:ce:3f:51:
b2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2D:28:F8:3F:2E:F6:74:2D:02:78:64:6E:D0:F4:E8:22:84:D1:D4
X509v3 Authority Key Identifier:
keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS52900.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.252.0/22
138.186.52.0/22
186.251.156.0/22
IPv6:
2804:26c8::/32
Signature Algorithm: sha256WithRSAEncryption
80:80:ce:ee:d4:d8:26:c5:42:7e:e5:66:f7:8d:97:6e:98:5e:
84:a6:4f:0f:41:23:f0:d6:dc:42:11:cd:c4:fc:82:b7:f2:d6:
eb:98:78:4c:5f:a5:c1:e1:c1:8d:e7:4e:7f:53:b4:5e:5b:ce:
58:6f:95:c3:94:ef:c5:d2:7e:fc:f9:7d:ec:37:c1:a8:08:7a:
1a:d3:b0:9f:a7:b7:19:00:8e:92:3c:c4:b5:83:20:d7:f3:f2:
2c:7d:62:fd:ad:d9:32:11:57:0c:5f:ba:8b:2c:f4:82:40:4a:
99:2e:07:f5:4a:c8:f9:9f:23:55:05:e9:ca:3c:aa:2b:dc:3a:
22:d1:2f:d5:9a:52:0d:3b:0c:85:07:b6:bf:92:45:b3:8c:0f:
54:35:0d:b6:1b:88:84:06:44:a6:46:c2:29:3c:f0:d8:49:2f:
d1:86:2c:e3:cc:a4:b4:a6:e3:43:df:d0:48:aa:a2:bf:69:1f:
58:91:b6:e8:66:a7:37:bf:73:31:53:c7:00:c7:f5:35:82:56:
37:81:35:2f:03:15:f2:9f:3f:66:e7:4e:cc:f8:f3:da:59:70:
54:50:18:77:58:33:ed:c9:1f:cf:b3:43:22:d2:4b:51:24:b4:
bc:ac:17:62:fb:0c:8a:4a:e1:ec:56:c9:66:fc:19:c6:d0:0a:
da:04:a3:74
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUetVg3NWwOZo+CfPtMyMa0C8LmPcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJFOTE0NzVFQjZDODZBQTQwRjNBMTNBQTBDM0MzOERC
OTYyN0JDRDAeFw0yNDA0MTAyMjEzMjlaFw0yNTA0MDkyMjE4MjlaMDMxMTAvBgNV
BAMTKEFDMkQyOEY4M0YyRUY2NzQyRDAyNzg2NDZFRDBGNEU4MjI4NEQxRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTKXF2LAkdWFODlJ1+KxQfy7kz
LSRDo12Gfe5G8vMs7vZNF7DoDgtAl7Pp9Dok1eq9gjqIfoHZ7fjfheSkHQrXiucc
1GJLPIs4/xD7mm83Uzs9U5X/kGr0oBa7PTtgF2ZWWjXDjfEEOdjDzxrx4FLdQisW
+paU5MysL8tylffRryR3Zjjf0gbrx1UNwcUit0g5HpDut5qubGLkOAFKJAmYCSAr
n8+geBpViftqmNQuSyY9QK1b9rQAf75vFUQupZFXNFFngDctROy6+LQJ4uMa+aUk
3TRIMp6cnExeFmTMlGMsPI+yaZqIjZYs4ZV/5u1NAKVl3ZyD6FC5884/UbKbAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUrC0o+D8u9nQtAnhkbtD06CKE0dQwHwYDVR0j
BBgwFoAUW+kUdetshqpA86E6oMPDjblie80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW
Nm8vMS81QkU5MTQ3NUVCNkM4NkFBNDBGM0ExM0FBMEMzQzM4REI5NjI3QkNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCRTkxNDc1RUI2Qzg2QUE0
MEYzQTEzQUEwQzNDMzhEQjk2MjdCQ0QuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr
BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82NzNx
WVBTSzJEV1dqQ0JhbVdoTkM3cmdycWhDUVBBamRHSFNkQ1puOVY2by8xL0FTNTI5
MDAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8E
KzApMBgEAgABMBIDBAKD3fwDBAKKujQDBAK6+5wwDQQCAAIwBwMFACgEJsgwDQYJ
KoZIhvcNAQELBQADggEBAICAzu7U2CbFQn7lZveNl26YXoSmTw9BI/DW3EIRzcT8
grfy1uuYeExfpcHhwY3nTn9TtF5bzlhvlcOU78XSfvz5few3wagIehrTsJ+ntxkA
jpI8xLWDINfz8ix9Yv2t2TIRVwxfuoss9IJASpkuB/VKyPmfI1UF6co8qivcOiLR
L9WaUg07DIUHtr+SRbOMD1Q1DbYbiIQGRKZGwik88NhJL9GGLOPMpLSm40Pf0Eiq
or9pH1iRtuhmpze/czFTxwDH9TWCVjeBNS8DFfKfP2bnTsz489pZcFRQGHdYM+3J
H8+zQyLSS1EktLysF2L7DIpK4exWyWb8GcbQCtoEo3Q=
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:45:47 2025 by rpki-client