Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS263405.roa
File: AS263405.roa (raw, json)
Hash identifier: +wkEzfkdnJPrKbNp6xawdHr6gTez2gb6nsALw8uXOgI=
Subject key identifier: 9C:B8:D6:F1:05:A3:EE:D8:97:43:53:86:95:48:14:0B:C1:D1:ED:74
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 2B1C7D3480F221C0A12D8BF678E68EB2DEFF4A1B
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS263405.roa
Signing time: Fri 03 May 2024 22:02:15 +0000
ROA not before: Fri 03 May 2024 21:57:15 +0000
ROA not after: Fri 02 May 2025 22:02:15 +0000
asID: 263405
IP address blocks: 128.201.0.0/22 maxlen: 24
143.255.252.0/22 maxlen: 24
170.254.32.0/22 maxlen: 24
177.222.248.0/21 maxlen: 24
2804:15b4::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:1c:7d:34:80:f2:21:c0:a1:2d:8b:f6:78:e6:8e:b2:de:ff:4a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:57:15 2024 GMT
Not After : May 2 22:02:15 2025 GMT
Subject: CN=9CB8D6F105A3EED8974353869548140BC1D1ED74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:ca:4b:71:c3:ec:c2:93:31:df:e7:6f:3c:
27:06:b8:87:62:af:d8:a6:55:dc:08:75:69:10:0c:
5a:0e:b8:96:4f:28:1e:d8:a2:0b:3f:70:13:14:fa:
aa:23:b9:ca:91:c3:b6:75:6a:8a:f8:f1:b5:e9:f6:
4f:db:29:3f:0d:ac:15:2d:2c:c9:25:9d:f3:c7:8e:
08:af:f5:e4:b5:a3:60:21:b3:d2:2b:90:c4:77:42:
55:b8:25:82:f6:7b:42:ee:76:25:7e:10:62:5f:4f:
45:c4:1b:a5:18:e4:69:f0:fb:eb:4f:f5:86:16:02:
c8:2d:ec:21:95:a8:0c:d2:77:9a:33:6a:99:62:d9:
ad:e2:ab:31:6e:e8:dd:85:31:a6:00:6d:c0:45:c4:
17:76:92:df:74:f1:6a:87:29:16:84:95:e9:e1:91:
3e:23:fe:ce:be:c8:e2:4b:69:4c:f1:81:cc:a9:50:
d5:d1:d0:9e:13:20:8a:44:1b:a3:c8:ea:be:c4:aa:
e6:b5:f3:80:94:43:9a:04:73:d5:c4:84:0a:ef:c3:
61:63:1a:7e:36:37:6c:ee:4b:5c:2d:cb:9e:6c:36:
25:53:31:87:33:db:5b:fe:64:17:15:86:d4:70:b9:
ae:27:c9:77:d0:56:39:78:22:09:f5:6f:92:c0:d7:
b1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B8:D6:F1:05:A3:EE:D8:97:43:53:86:95:48:14:0B:C1:D1:ED:74
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS263405.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.0.0/22
143.255.252.0/22
170.254.32.0/22
177.222.248.0/21
IPv6:
2804:15b4::/32
Signature Algorithm: sha256WithRSAEncryption
03:11:ca:8d:b7:34:95:de:ee:32:0d:31:5b:88:c0:72:25:6e:
5b:0b:c4:8c:60:49:78:66:bc:39:25:4e:ef:fc:14:88:b2:6a:
60:07:e7:e7:c3:91:a7:88:e6:35:62:00:f6:40:09:a4:f8:d6:
26:bc:23:3c:8c:57:68:05:3f:61:1c:e2:3f:37:f8:14:b3:fd:
a1:3f:ec:f7:31:ce:52:f5:e9:29:15:16:3c:97:46:10:a6:29:
34:fd:79:88:3e:55:61:36:ca:55:9c:0e:41:5d:ce:68:1d:86:
f9:05:ba:fd:6e:4a:2a:84:44:b0:97:8b:f9:d7:85:0e:18:ca:
68:58:d0:36:79:45:ad:d7:ed:dd:3a:52:1c:f5:fc:e4:33:4b:
4a:38:35:51:af:38:c5:d2:ef:56:bf:4a:8f:3d:e6:8d:94:45:
34:6a:68:04:44:60:bf:25:6d:1e:8b:8d:0a:dc:3a:56:95:10:
a9:6e:f3:d3:4e:93:6c:0c:a2:44:65:b9:71:64:61:60:2d:3e:
83:56:c6:4c:48:95:e8:76:3c:7e:bd:46:5f:b8:dd:4d:4d:e6:
43:fe:ab:b1:e9:25:c7:dd:ed:22:4c:ae:e7:60:ad:bf:75:40:
15:1b:ee:69:a7:5c:a2:3d:c9:19:9a:76:d2:7f:e8:1b:37:b9:
8c:e2:e8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:32:17 2025 by rpki-client