Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/AS28220.roa
File: AS28220.roa (raw, json)
Hash identifier: JbVSAptH4cqXy64v3vDeEaAjJ25fCBQ27AcE1zpCSeQ=
Subject key identifier: 42:8C:46:6A:60:0F:A8:26:B8:C7:08:6F:06:65:46:0E:CE:89:FA:8C
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 49C17C4C74EA197DA0FB16AA7D7EAF92519DC062
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/AS28220.roa
Signing time: Wed 10 Apr 2024 02:39:41 +0000
ROA not before: Wed 10 Apr 2024 02:34:41 +0000
ROA not after: Wed 09 Apr 2025 02:39:41 +0000
asID: 28220
IP address blocks: 45.4.64.0/22 maxlen: 22
138.0.100.0/22 maxlen: 22
168.227.108.0/22 maxlen: 22
168.227.108.0/23 maxlen: 23
168.227.108.0/24 maxlen: 24
168.227.109.0/24 maxlen: 24
168.227.110.0/23 maxlen: 23
168.227.110.0/24 maxlen: 24
168.227.111.0/24 maxlen: 24
168.228.68.0/22 maxlen: 22
170.82.92.0/22 maxlen: 22
170.82.92.0/23 maxlen: 23
170.82.92.0/24 maxlen: 24
170.82.93.0/24 maxlen: 24
170.82.94.0/23 maxlen: 23
170.82.94.0/24 maxlen: 24
170.82.95.0/24 maxlen: 24
177.89.0.0/16 maxlen: 16
177.89.248.0/21 maxlen: 21
177.137.192.0/20 maxlen: 20
177.137.193.0/24 maxlen: 24
177.137.194.0/24 maxlen: 24
177.137.195.0/24 maxlen: 24
177.137.196.0/24 maxlen: 24
177.137.197.0/24 maxlen: 24
177.137.198.0/24 maxlen: 24
177.137.199.0/24 maxlen: 24
177.137.200.0/24 maxlen: 24
177.137.201.0/24 maxlen: 24
177.137.202.0/24 maxlen: 24
177.137.203.0/24 maxlen: 24
177.137.204.0/24 maxlen: 24
177.137.205.0/24 maxlen: 24
177.137.206.0/24 maxlen: 24
177.137.207.0/24 maxlen: 24
179.96.192.0/21 maxlen: 21
179.96.240.0/20 maxlen: 20
179.190.128.0/17 maxlen: 17
179.190.208.0/21 maxlen: 21
186.192.16.0/20 maxlen: 20
186.192.16.0/21 maxlen: 21
186.192.16.0/22 maxlen: 22
186.192.16.0/23 maxlen: 23
186.192.16.0/24 maxlen: 24
186.192.17.0/24 maxlen: 24
186.192.18.0/23 maxlen: 23
186.192.18.0/24 maxlen: 24
186.192.19.0/24 maxlen: 24
186.192.20.0/22 maxlen: 22
186.192.20.0/23 maxlen: 23
186.192.20.0/24 maxlen: 24
186.192.21.0/24 maxlen: 24
186.192.22.0/23 maxlen: 23
186.192.22.0/24 maxlen: 24
186.192.23.0/24 maxlen: 24
186.192.24.0/21 maxlen: 21
186.192.24.0/22 maxlen: 22
186.192.24.0/23 maxlen: 23
186.192.24.0/24 maxlen: 24
186.192.25.0/24 maxlen: 24
186.192.26.0/23 maxlen: 23
186.192.26.0/24 maxlen: 24
186.192.27.0/24 maxlen: 24
186.192.28.0/22 maxlen: 22
186.192.28.0/23 maxlen: 23
186.192.28.0/24 maxlen: 24
186.192.29.0/24 maxlen: 24
186.192.30.0/23 maxlen: 23
186.192.30.0/24 maxlen: 24
186.192.31.0/24 maxlen: 24
186.193.96.0/20 maxlen: 20
186.193.96.0/21 maxlen: 21
186.193.103.0/24 maxlen: 24
186.193.104.0/21 maxlen: 21
186.193.104.0/24 maxlen: 24
186.208.208.0/21 maxlen: 21
186.208.208.0/24 maxlen: 24
186.208.209.0/24 maxlen: 24
186.208.210.0/23 maxlen: 23
186.208.210.0/24 maxlen: 24
186.208.211.0/24 maxlen: 24
186.208.213.0/24 maxlen: 24
186.208.214.0/24 maxlen: 24
186.208.215.0/24 maxlen: 24
186.235.0.0/20 maxlen: 20
186.236.192.0/19 maxlen: 19
186.251.112.0/21 maxlen: 21
186.251.112.0/22 maxlen: 22
186.251.112.0/24 maxlen: 24
186.251.113.0/24 maxlen: 24
186.251.114.0/24 maxlen: 24
186.251.115.0/24 maxlen: 24
186.251.116.0/22 maxlen: 22
186.251.116.0/24 maxlen: 24
186.251.117.0/24 maxlen: 24
186.251.118.0/24 maxlen: 24
186.251.119.0/24 maxlen: 24
187.49.192.0/20 maxlen: 20
187.60.64.0/19 maxlen: 19
187.61.128.0/17 maxlen: 17
187.61.128.0/18 maxlen: 18
187.61.180.0/22 maxlen: 22
187.61.191.0/24 maxlen: 24
187.61.192.0/18 maxlen: 18
187.61.224.0/21 maxlen: 21
187.86.96.0/20 maxlen: 20
187.86.96.0/21 maxlen: 21
187.86.96.0/24 maxlen: 24
187.86.97.0/24 maxlen: 24
187.86.98.0/23 maxlen: 23
187.86.98.0/24 maxlen: 24
187.86.99.0/24 maxlen: 24
187.86.100.0/22 maxlen: 22
187.86.100.0/24 maxlen: 24
187.86.101.0/24 maxlen: 24
187.86.104.0/21 maxlen: 21
187.86.110.0/24 maxlen: 24
187.87.112.0/20 maxlen: 20
187.108.64.0/20 maxlen: 20
187.109.176.0/20 maxlen: 20
187.111.224.0/19 maxlen: 19
189.45.16.0/20 maxlen: 20
189.45.16.0/21 maxlen: 21
189.45.17.0/24 maxlen: 24
189.45.18.0/23 maxlen: 23
189.45.20.0/23 maxlen: 23
189.45.22.0/24 maxlen: 24
189.45.24.0/21 maxlen: 21
189.45.27.0/24 maxlen: 24
189.45.28.0/24 maxlen: 24
189.45.30.0/24 maxlen: 24
189.124.128.0/17 maxlen: 17
189.124.137.0/24 maxlen: 24
189.124.140.0/24 maxlen: 24
189.124.142.0/24 maxlen: 24
189.124.143.0/24 maxlen: 24
189.124.156.0/22 maxlen: 22
189.124.200.0/21 maxlen: 21
189.124.240.0/21 maxlen: 21
191.241.40.0/21 maxlen: 21
191.241.40.0/22 maxlen: 22
191.241.40.0/23 maxlen: 23
191.241.40.0/24 maxlen: 24
191.241.41.0/24 maxlen: 24
191.241.42.0/23 maxlen: 23
191.241.42.0/24 maxlen: 24
191.241.43.0/24 maxlen: 24
191.241.44.0/22 maxlen: 22
191.241.44.0/23 maxlen: 23
191.241.44.0/24 maxlen: 24
191.241.45.0/24 maxlen: 24
191.241.46.0/23 maxlen: 23
191.241.46.0/24 maxlen: 24
200.233.80.0/20 maxlen: 20
200.233.80.0/21 maxlen: 21
200.233.84.0/24 maxlen: 24
200.233.88.0/21 maxlen: 21
201.148.188.0/22 maxlen: 22
2804:54::/32 maxlen: 32
2804:54:c::/48 maxlen: 48
2804:54:1001::/48 maxlen: 48
2804:54:1002::/48 maxlen: 48
2804:54:1b00::/40 maxlen: 40
2804:54:1c00::/40 maxlen: 40
2804:54:1d00::/40 maxlen: 40
2804:54:1e00::/40 maxlen: 40
2804:54:1f00::/40 maxlen: 40
2804:54:6007::/48 maxlen: 48
2804:2140::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:c1:7c:4c:74:ea:19:7d:a0:fb:16:aa:7d:7e:af:92:51:9d:c0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 10 02:34:41 2024 GMT
Not After : Apr 9 02:39:41 2025 GMT
Subject: CN=428C466A600FA826B8C7086F0665460ECE89FA8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:25:10:da:7a:e1:83:f1:46:6e:a8:73:cf:21:
97:73:b5:30:3e:bd:13:b4:78:fa:7a:69:f6:ac:df:
39:cc:ed:2d:cf:91:6c:22:f0:8c:c3:d1:f9:a3:1a:
09:94:24:d3:ad:a8:ad:7a:d7:79:ba:64:c2:39:45:
a7:26:b3:59:6d:ff:f0:08:29:05:b2:22:d2:0c:4a:
c6:95:b0:a1:e2:2d:08:0b:7c:f8:d5:69:bd:09:44:
e3:78:fb:53:3b:61:e2:90:d8:9d:11:66:6e:74:ae:
9f:ec:67:92:de:80:c2:85:7d:01:fa:32:e8:42:ea:
9a:18:46:f6:7f:7b:7b:1a:8c:d9:5b:47:12:28:85:
b0:03:86:32:f2:ad:b4:54:06:ae:8a:f1:68:14:4e:
7f:47:9f:fc:54:c5:d0:87:72:18:e4:09:74:c0:70:
f4:29:72:06:e3:a0:0f:a4:1a:65:42:43:9b:54:13:
a9:39:0a:ed:68:eb:24:2f:e4:ab:a3:45:55:09:bc:
6c:62:c8:eb:48:a3:ca:e1:3c:d9:f3:10:f7:82:bf:
37:d0:34:1e:fd:d1:2a:96:4c:8d:da:63:e0:09:7b:
99:ec:80:cc:08:42:7a:cf:66:33:f1:e4:57:9c:87:
ef:88:e8:74:d1:e3:4a:49:34:20:d1:01:4e:3a:8c:
dd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8C:46:6A:60:0F:A8:26:B8:C7:08:6F:06:65:46:0E:CE:89:FA:8C
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/AS28220.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.64.0/22
138.0.100.0/22
168.227.108.0/22
168.228.68.0/22
170.82.92.0/22
177.89.0.0/16
177.137.192.0/20
179.96.192.0/21
179.96.240.0/20
179.190.128.0/17
186.192.16.0/20
186.193.96.0/20
186.208.208.0/21
186.235.0.0/20
186.236.192.0/19
186.251.112.0/21
187.49.192.0/20
187.60.64.0/19
187.61.128.0/17
187.86.96.0/20
187.87.112.0/20
187.108.64.0/20
187.109.176.0/20
187.111.224.0/19
189.45.16.0/20
189.124.128.0/17
191.241.40.0/21
200.233.80.0/20
201.148.188.0/22
IPv6:
2804:54::/32
2804:2140::/32
Signature Algorithm: sha256WithRSAEncryption
51:5d:a9:51:60:fc:71:43:45:01:1b:9e:a1:25:2d:c7:34:49:
be:b2:ef:74:17:7e:a8:bb:30:57:f4:b1:a0:62:0b:d7:8a:94:
d0:21:5e:02:c0:db:69:4d:80:72:1a:0c:2d:85:9f:18:87:f5:
70:cf:f4:6a:94:7d:ae:64:8f:d0:c8:62:79:69:bc:31:07:fb:
09:63:53:fa:94:18:e7:36:f1:ab:dc:40:b7:80:7b:d4:02:81:
dc:33:1e:60:bc:cb:17:19:83:e0:58:5c:8e:b6:d0:93:06:8f:
26:ca:aa:2f:c4:8b:6d:13:75:ff:6c:3f:84:4d:6d:21:65:b6:
a9:d4:cb:71:3d:f8:30:0a:e1:c5:55:31:08:94:ed:b6:c8:5f:
5f:5b:2d:7b:ba:51:c9:87:10:de:d2:cb:b3:23:d8:4d:8b:76:
51:f6:ec:b5:7b:94:bc:15:6a:61:56:cd:1a:bb:e4:65:6c:cd:
8d:00:72:ef:90:c2:2d:6f:9f:42:1b:21:85:a1:49:8a:e8:8d:
ec:26:c7:7e:d4:f8:a7:b2:25:8f:1a:5a:38:0d:06:20:f6:1c:
1e:eb:d7:48:48:a1:ab:00:5a:e9:47:cc:7e:33:d3:ce:34:69:
5a:32:3f:4b:02:3e:e6:22:3a:f5:16:93:df:fe:ad:74:d0:db:
20:38:ca:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:14 2025 by rpki-client