Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/AS28343.roa
File: AS28343.roa (raw, json)
Hash identifier: wy9o0Bd1C1hW08tAnq+UA9d0SE/97YVpQp5+JuKyetk=
Subject key identifier: 89:64:4B:0F:17:5B:FB:E1:44:C2:97:D9:E1:37:0A:4D:C6:5A:1D:B4
Certificate issuer: /CN=3BCE948E59955EF881BD1ECD2DE385FE7959F195
Certificate serial: 06789C0C0BBBE29E24BAFA5EA6E15FC8357A2A57
Authority key identifier: 3B:CE:94:8E:59:95:5E:F8:81:BD:1E:CD:2D:E3:85:FE:79:59:F1:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BCE948E59955EF881BD1ECD2DE385FE7959F195.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/AS28343.roa
Signing time: Mon 25 Nov 2024 11:49:33 +0000
ROA not before: Mon 25 Nov 2024 11:44:33 +0000
ROA not after: Mon 24 Nov 2025 11:49:33 +0000
asID: 28343
IP address blocks: 45.65.196.0/22 maxlen: 24
45.234.184.0/22 maxlen: 24
131.72.108.0/22 maxlen: 24
131.72.148.0/22 maxlen: 24
131.100.92.0/22 maxlen: 24
131.161.16.0/22 maxlen: 24
131.161.144.0/22 maxlen: 24
131.221.88.0/22 maxlen: 24
131.221.176.0/22 maxlen: 24
132.255.12.0/22 maxlen: 24
138.0.200.0/22 maxlen: 24
138.36.204.0/22 maxlen: 24
138.94.72.0/22 maxlen: 24
138.94.188.0/22 maxlen: 24
138.97.136.0/22 maxlen: 24
138.99.20.0/22 maxlen: 24
138.118.28.0/22 maxlen: 24
138.118.148.0/22 maxlen: 24
138.118.196.0/22 maxlen: 24
138.121.188.0/22 maxlen: 24
138.122.208.0/22 maxlen: 24
138.204.60.0/22 maxlen: 24
143.0.212.0/22 maxlen: 24
143.208.96.0/22 maxlen: 24
143.208.196.0/22 maxlen: 24
143.208.212.0/22 maxlen: 24
143.255.220.0/22 maxlen: 24
167.249.224.0/22 maxlen: 24
167.250.176.0/22 maxlen: 24
168.0.120.0/22 maxlen: 24
168.194.36.0/22 maxlen: 24
168.196.132.0/22 maxlen: 24
168.232.24.0/22 maxlen: 24
168.232.232.0/22 maxlen: 24
170.78.198.0/23 maxlen: 24
170.78.212.0/22 maxlen: 24
170.81.216.0/22 maxlen: 24
170.81.220.0/22 maxlen: 24
170.82.176.0/22 maxlen: 24
170.82.240.0/22 maxlen: 24
170.84.120.0/22 maxlen: 24
170.231.24.0/22 maxlen: 24
170.238.216.0/22 maxlen: 24
170.246.72.0/22 maxlen: 24
170.246.200.0/22 maxlen: 24
170.254.220.0/22 maxlen: 24
177.8.240.0/21 maxlen: 24
177.10.96.0/21 maxlen: 24
177.10.104.0/21 maxlen: 24
177.22.0.0/20 maxlen: 24
177.53.124.0/22 maxlen: 24
177.54.0.0/20 maxlen: 24
177.66.144.0/22 maxlen: 24
177.67.200.0/21 maxlen: 24
177.72.40.0/21 maxlen: 24
177.73.136.0/22 maxlen: 24
177.73.140.0/22 maxlen: 24
177.73.184.0/22 maxlen: 24
177.74.208.0/20 maxlen: 24
177.74.240.0/20 maxlen: 24
177.101.96.0/19 maxlen: 24
177.104.0.0/20 maxlen: 24
177.107.160.0/20 maxlen: 24
177.125.104.0/22 maxlen: 24
177.125.232.0/21 maxlen: 24
177.129.104.0/22 maxlen: 24
177.130.224.0/20 maxlen: 24
177.130.248.0/21 maxlen: 24
177.136.160.0/21 maxlen: 24
177.184.144.0/21 maxlen: 24
177.200.192.0/19 maxlen: 24
177.221.160.0/21 maxlen: 24
177.221.168.0/21 maxlen: 24
177.222.144.0/20 maxlen: 24
179.127.160.0/19 maxlen: 24
179.190.96.0/19 maxlen: 24
186.193.160.0/20 maxlen: 24
186.208.16.0/20 maxlen: 24
186.209.16.0/21 maxlen: 24
186.209.24.0/21 maxlen: 24
186.209.192.0/20 maxlen: 24
186.216.240.0/20 maxlen: 24
186.225.0.0/20 maxlen: 24
186.226.32.0/20 maxlen: 24
186.226.144.0/21 maxlen: 24
186.226.152.0/21 maxlen: 24
186.227.136.0/21 maxlen: 24
186.235.56.0/22 maxlen: 24
186.237.144.0/21 maxlen: 24
186.249.192.0/20 maxlen: 24
186.251.108.0/22 maxlen: 24
187.45.64.0/20 maxlen: 24
187.85.160.0/20 maxlen: 24
187.85.176.0/20 maxlen: 24
187.87.96.0/20 maxlen: 24
187.94.96.0/20 maxlen: 24
187.102.0.0/20 maxlen: 24
187.108.208.0/20 maxlen: 24
189.28.192.0/19 maxlen: 24
189.45.192.0/20 maxlen: 24
189.90.48.0/20 maxlen: 24
189.91.192.0/20 maxlen: 24
189.113.224.0/19 maxlen: 24
189.127.16.0/20 maxlen: 24
191.6.88.0/21 maxlen: 24
191.37.172.0/22 maxlen: 24
191.52.240.0/21 maxlen: 24
191.240.216.0/21 maxlen: 24
191.253.96.0/19 maxlen: 24
200.10.4.0/22 maxlen: 24
200.34.224.0/19 maxlen: 24
200.50.216.0/22 maxlen: 24
201.49.244.0/22 maxlen: 24
201.131.80.0/21 maxlen: 24
201.131.136.0/21 maxlen: 24
201.131.156.0/22 maxlen: 24
201.159.248.0/22 maxlen: 24
2804:c::/32 maxlen: 48
2804:30c::/32 maxlen: 48
2804:ed8::/32 maxlen: 48
2804:f58::/32 maxlen: 48
2804:fe4::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:78:9c:0c:0b:bb:e2:9e:24:ba:fa:5e:a6:e1:5f:c8:35:7a:2a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BCE948E59955EF881BD1ECD2DE385FE7959F195
Validity
Not Before: Nov 25 11:44:33 2024 GMT
Not After : Nov 24 11:49:33 2025 GMT
Subject: CN=3082010A0282010100C8B74CB892A5FC8875E9D85B8C9845C5B1C24039D0DB233F9CB0CF2C7809A0C734C35A990A562A1D553A7BAF763BEBEBDB97FC1CE85FD218FA113FC90A06312E50F00963885CB0E5ED0C75EF46DDFF872E32216BAD9B9038DB90DED82D102917090027376894C3D6C126A54EADB0A212B28E3B0516518CE24D38BC1665F820557763A49550994A043965CF61DF4B44BADEC562BC044DBD2DC02283B5342CFB1098F3E49AF10A72D24342EF5FC40B4A4BB2D34D5A60E40BBEC03ED66C61BCE7A721BD19A0397D724329E70EEA498149DD146FE6BAFECCB47CFC251CB9CDF96FF0CBE5F3EED0775ED01889CEF8409E84776BB026D3ED1E51722965147DD356929D0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b7:4c:b8:92:a5:fc:88:75:e9:d8:5b:8c:98:
45:c5:b1:c2:40:39:d0:db:23:3f:9c:b0:cf:2c:78:
09:a0:c7:34:c3:5a:99:0a:56:2a:1d:55:3a:7b:af:
76:3b:eb:eb:db:97:fc:1c:e8:5f:d2:18:fa:11:3f:
c9:0a:06:31:2e:50:f0:09:63:88:5c:b0:e5:ed:0c:
75:ef:46:dd:ff:87:2e:32:21:6b:ad:9b:90:38:db:
90:de:d8:2d:10:29:17:09:00:27:37:68:94:c3:d6:
c1:26:a5:4e:ad:b0:a2:12:b2:8e:3b:05:16:51:8c:
e2:4d:38:bc:16:65:f8:20:55:77:63:a4:95:50:99:
4a:04:39:65:cf:61:df:4b:44:ba:de:c5:62:bc:04:
4d:bd:2d:c0:22:83:b5:34:2c:fb:10:98:f3:e4:9a:
f1:0a:72:d2:43:42:ef:5f:c4:0b:4a:4b:b2:d3:4d:
5a:60:e4:0b:be:c0:3e:d6:6c:61:bc:e7:a7:21:bd:
19:a0:39:7d:72:43:29:e7:0e:ea:49:81:49:dd:14:
6f:e6:ba:fe:cc:b4:7c:fc:25:1c:b9:cd:f9:6f:f0:
cb:e5:f3:ee:d0:77:5e:d0:18:89:ce:f8:40:9e:84:
77:6b:b0:26:d3:ed:1e:51:72:29:65:14:7d:d3:56:
92:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:64:4B:0F:17:5B:FB:E1:44:C2:97:D9:E1:37:0A:4D:C6:5A:1D:B4
X509v3 Authority Key Identifier:
keyid:3B:CE:94:8E:59:95:5E:F8:81:BD:1E:CD:2D:E3:85:FE:79:59:F1:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/3BCE948E59955EF881BD1ECD2DE385FE7959F195.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BCE948E59955EF881BD1ECD2DE385FE7959F195.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/AS28343.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.196.0/22
45.234.184.0/22
131.72.108.0/22
131.72.148.0/22
131.100.92.0/22
131.161.16.0/22
131.161.144.0/22
131.221.88.0/22
131.221.176.0/22
132.255.12.0/22
138.0.200.0/22
138.36.204.0/22
138.94.72.0/22
138.94.188.0/22
138.97.136.0/22
138.99.20.0/22
138.118.28.0/22
138.118.148.0/22
138.118.196.0/22
138.121.188.0/22
138.122.208.0/22
138.204.60.0/22
143.0.212.0/22
143.208.96.0/22
143.208.196.0/22
143.208.212.0/22
143.255.220.0/22
167.249.224.0/22
167.250.176.0/22
168.0.120.0/22
168.194.36.0/22
168.196.132.0/22
168.232.24.0/22
168.232.232.0/22
170.78.198.0/23
170.78.212.0/22
170.81.216.0/21
170.82.176.0/22
170.82.240.0/22
170.84.120.0/22
170.231.24.0/22
170.238.216.0/22
170.246.72.0/22
170.246.200.0/22
170.254.220.0/22
177.8.240.0/21
177.10.96.0/20
177.22.0.0/20
177.53.124.0/22
177.54.0.0/20
177.66.144.0/22
177.67.200.0/21
177.72.40.0/21
177.73.136.0/21
177.73.184.0/22
177.74.208.0/20
177.74.240.0/20
177.101.96.0/19
177.104.0.0/20
177.107.160.0/20
177.125.104.0/22
177.125.232.0/21
177.129.104.0/22
177.130.224.0/20
177.130.248.0/21
177.136.160.0/21
177.184.144.0/21
177.200.192.0/19
177.221.160.0/20
177.222.144.0/20
179.127.160.0/19
179.190.96.0/19
186.193.160.0/20
186.208.16.0/20
186.209.16.0/20
186.209.192.0/20
186.216.240.0/20
186.225.0.0/20
186.226.32.0/20
186.226.144.0/20
186.227.136.0/21
186.235.56.0/22
186.237.144.0/21
186.249.192.0/20
186.251.108.0/22
187.45.64.0/20
187.85.160.0/19
187.87.96.0/20
187.94.96.0/20
187.102.0.0/20
187.108.208.0/20
189.28.192.0/19
189.45.192.0/20
189.90.48.0/20
189.91.192.0/20
189.113.224.0/19
189.127.16.0/20
191.6.88.0/21
191.37.172.0/22
191.52.240.0/21
191.240.216.0/21
191.253.96.0/19
200.10.4.0/22
200.34.224.0/19
200.50.216.0/22
201.49.244.0/22
201.131.80.0/21
201.131.136.0/21
201.131.156.0/22
201.159.248.0/22
IPv6:
2804:c::/32
2804:30c::/32
2804:ed8::/32
2804:f58::/32
2804:fe4::/32
Signature Algorithm: sha256WithRSAEncryption
7a:0a:b4:73:32:d8:ac:37:d0:47:5f:d2:e8:f6:dc:c4:a8:5c:
4d:78:1e:e4:38:a3:e6:b7:bd:24:3f:55:09:ce:6f:a3:ef:e6:
0c:44:88:87:69:70:35:e2:dc:b3:53:0f:cd:c4:cf:57:6d:89:
51:b9:12:ed:b6:be:5b:97:c4:32:06:84:89:9d:4e:3e:33:12:
6a:10:b1:9d:b0:0a:94:aa:b5:7f:4e:da:ae:18:1b:fb:b8:b9:
c3:0a:31:d2:64:89:02:ce:19:78:75:34:aa:b1:fb:bd:75:0d:
21:27:a0:85:59:9b:3e:d5:b2:b8:8f:73:31:bb:4f:2f:8b:f5:
5c:4c:b4:af:4f:81:54:cb:88:53:97:73:cb:c6:23:45:82:45:
8a:bc:f4:22:b1:c5:f2:6f:a7:3e:3e:fd:a6:12:f1:fe:5c:6d:
ee:16:76:0f:b6:29:f6:13:45:3b:28:8c:29:71:ca:2a:a8:29:
ca:6d:06:bc:be:e6:24:16:8c:db:b4:21:f3:3e:36:90:bb:38:
ff:17:5f:54:19:7f:51:f7:40:c7:eb:a5:35:b8:3d:7b:a4:84:
de:be:1d:37:df:1b:05:96:6a:7a:d1:a4:88:f4:6d:2c:ff:9d:
68:00:07:eb:13:28:1d:08:55:e5:17:34:85:82:cd:f1:f9:25:
8b:5d:ab:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:28:53 2025 by rpki-client