Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/3/AS26506.roa
File: AS26506.roa (raw, json)
Hash identifier: JzKiNmlKjBKc4SOVfLNyk0mLZCvgKPg9cj1ER5X+9RE=
Subject key identifier: A4:F3:00:7A:4D:86:06:74:67:80:61:3B:A1:75:95:64:6D:DD:88:42
Certificate issuer: /CN=5AD2B67D62031233884B53819B977DA9CF164DF9
Certificate serial: 5C1935D9A335F02560B1254F57808D56FFD8D3D0
Authority key identifier: 5A:D2:B6:7D:62:03:12:33:88:4B:53:81:9B:97:7D:A9:CF:16:4D:F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AD2B67D62031233884B53819B977DA9CF164DF9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/3/AS26506.roa
Signing time: Mon 23 Dec 2024 14:38:38 +0000
ROA not before: Mon 23 Dec 2024 14:33:38 +0000
ROA not after: Mon 22 Dec 2025 14:38:38 +0000
asID: 26506
IP address blocks: 191.53.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:19:35:d9:a3:35:f0:25:60:b1:25:4f:57:80:8d:56:ff:d8:d3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AD2B67D62031233884B53819B977DA9CF164DF9
Validity
Not Before: Dec 23 14:33:38 2024 GMT
Not After : Dec 22 14:38:38 2025 GMT
Subject: CN=A4F3007A4D8606746780613BA17595646DDD8842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:38:c8:e0:d5:8a:75:cc:a9:c0:e1:58:18:77:
0a:38:67:b6:18:08:3a:7c:f8:75:40:53:67:48:07:
2a:14:cc:54:61:c0:b7:f8:e1:34:cc:e8:97:ea:e9:
a0:f8:e9:88:e7:17:3c:0d:8d:04:6f:83:50:b5:bf:
e7:2f:c5:07:04:12:29:06:a3:5c:d9:d6:9e:eb:8f:
2f:c9:41:57:ad:dc:86:4a:56:96:16:b6:29:6f:bb:
c3:ff:b7:51:2b:bb:b2:a7:cf:21:de:eb:2a:7d:13:
25:e4:16:5f:9b:46:5f:3b:40:d1:14:20:01:ac:ba:
65:e1:12:07:6d:e4:52:85:be:30:4a:4e:56:8a:96:
ce:e1:52:de:8d:52:32:d5:9c:db:59:58:dc:4d:56:
d5:2c:13:17:9b:bb:46:2d:51:40:b3:b0:6c:0a:f9:
00:3c:1f:21:cd:a6:b7:ab:bd:ec:45:29:de:96:e2:
4d:7b:26:72:d1:01:15:10:d1:7b:c0:6c:de:ad:3b:
a5:4e:c6:10:6b:89:f2:43:c9:cb:7f:91:24:a6:bb:
3c:31:67:e8:c0:97:5a:b9:00:97:dc:c3:ea:b6:93:
99:cf:27:4a:b3:99:44:8a:17:64:74:03:c2:b7:8b:
5b:75:1f:d1:fe:42:e4:ab:37:f1:d7:c1:7f:14:56:
51:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F3:00:7A:4D:86:06:74:67:80:61:3B:A1:75:95:64:6D:DD:88:42
X509v3 Authority Key Identifier:
keyid:5A:D2:B6:7D:62:03:12:33:88:4B:53:81:9B:97:7D:A9:CF:16:4D:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/3/5AD2B67D62031233884B53819B977DA9CF164DF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AD2B67D62031233884B53819B977DA9CF164DF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/3/AS26506.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.53.52.0/24
Signature Algorithm: sha256WithRSAEncryption
25:b4:dd:c9:1e:38:63:bd:87:48:f2:3b:ef:ee:58:c4:14:f0:
52:df:1c:58:8f:38:56:dd:d7:60:ac:22:f7:ed:9b:d5:47:87:
fb:53:03:21:68:a9:43:cd:96:af:cd:01:56:a1:60:54:c1:09:
08:db:f1:11:62:34:69:12:cf:40:10:0a:db:f0:af:22:e7:d0:
13:da:19:72:e3:2a:5b:8b:82:00:41:63:28:c7:46:8a:45:a2:
aa:5b:5d:07:bf:d8:15:19:ad:3d:b2:91:95:6f:67:c7:cc:bc:
77:27:7e:ed:de:a3:fa:51:79:96:f5:7a:26:3e:84:38:cd:48:
d4:f2:23:9e:f4:11:f0:60:d7:8b:9b:5e:95:d3:5e:fd:35:8d:
7f:87:91:2c:b8:9b:b0:ba:88:0a:8b:31:0f:ab:29:25:d5:9a:
21:0e:be:1d:16:bc:25:18:4c:1b:21:31:48:72:be:99:b4:2e:
31:21:b9:e4:30:62:21:7b:86:ae:9a:07:30:56:c6:2d:98:19:
f3:6f:3d:b5:cf:8c:3d:d4:14:14:e8:ed:50:17:87:7e:35:7b:
97:10:22:96:65:5c:62:5b:c5:88:17:ba:de:2b:73:a8:8e:c3:
2d:9f:eb:18:c8:0a:8c:d8:83:8d:8a:bc:36:01:2c:47:9d:aa:
41:23:04:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 9 17:49:06 2025 by rpki-client on console.sobornost.net