Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS28258.roa
File: AS28258.roa (raw, json)
Hash identifier: Xtpl+jx9qsE1GJqSRE6d/rkFh3B9VbbWJrzomKgNGp4=
Subject key identifier: 8F:A0:5A:19:2D:DB:62:9D:9B:B7:F5:72:BE:65:C7:27:38:EA:89:94
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 429149CB856764067A7B8A185F24FABC96DEA8D1
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS28258.roa
Signing time: Fri 03 May 2024 22:02:13 +0000
ROA not before: Fri 03 May 2024 21:57:13 +0000
ROA not after: Fri 02 May 2025 22:02:13 +0000
asID: 28258
IP address blocks: 138.117.72.0/22 maxlen: 24
168.227.196.0/22 maxlen: 24
170.246.208.0/22 maxlen: 24
177.104.64.0/19 maxlen: 24
177.126.224.0/20 maxlen: 24
186.235.96.0/20 maxlen: 24
187.16.176.0/20 maxlen: 24
187.85.80.0/20 maxlen: 24
190.108.96.0/19 maxlen: 24
2804:2484::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:91:49:cb:85:67:64:06:7a:7b:8a:18:5f:24:fa:bc:96:de:a8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:57:13 2024 GMT
Not After : May 2 22:02:13 2025 GMT
Subject: CN=8FA05A192DDB629D9BB7F572BE65C72738EA8994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:1d:00:f3:74:61:3a:88:a0:ce:4a:b3:6b:
2c:e1:18:b9:17:05:88:98:21:f6:13:93:4f:f7:31:
f6:bc:24:a8:c4:ce:19:46:49:1e:61:ff:66:8f:60:
10:02:ac:e9:e1:33:56:76:dc:4b:a3:04:9f:50:c4:
f6:4f:31:e1:6f:7e:ff:7e:06:55:bb:f5:f7:de:5f:
c8:f3:b1:b1:0b:20:b0:2c:d8:fe:ae:80:e6:83:a8:
64:19:45:bc:b5:f9:73:4d:29:94:37:ae:ca:b0:cb:
e8:ab:67:6f:c7:ff:91:ef:46:d4:f0:dd:dd:72:55:
75:26:fc:d3:96:0e:be:d9:77:f9:da:20:93:15:22:
8e:17:0e:c6:05:d8:ca:b4:a1:65:6f:a9:b6:b9:4d:
63:cc:25:ab:00:08:cf:3f:4d:7d:0d:51:54:bb:62:
2e:62:fb:84:6d:58:46:e0:8c:fc:61:39:32:55:b0:
d5:57:ca:8a:f4:86:fa:b8:69:2c:9a:68:f4:81:9c:
28:ef:c6:aa:78:a3:e9:88:e2:20:6f:20:03:69:4b:
bc:6c:9b:93:08:95:3a:05:87:6c:2e:8b:87:8b:ec:
d6:62:f3:92:ab:78:2e:43:50:f3:17:81:3b:d0:d3:
a8:47:d9:fb:fc:44:1d:e1:9c:de:90:c6:70:73:7f:
0a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A0:5A:19:2D:DB:62:9D:9B:B7:F5:72:BE:65:C7:27:38:EA:89:94
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS28258.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.72.0/22
168.227.196.0/22
170.246.208.0/22
177.104.64.0/19
177.126.224.0/20
186.235.96.0/20
187.16.176.0/20
187.85.80.0/20
190.108.96.0/19
IPv6:
2804:2484::/32
Signature Algorithm: sha256WithRSAEncryption
31:19:9e:5f:f3:80:4a:60:eb:5e:87:34:6c:ea:ea:ef:02:49:
a8:7c:f4:dd:27:0a:8a:12:ae:65:92:a0:59:14:e8:fc:4f:3c:
cd:17:7d:91:27:c3:0a:6e:07:62:3a:d3:06:b8:9a:d8:98:43:
59:e5:23:63:08:4a:75:af:fa:11:7e:ca:d0:f8:79:6f:6e:53:
15:04:24:1b:95:cc:36:d2:af:51:01:32:98:28:28:8a:02:f6:
84:2d:a9:62:89:b1:98:67:1f:a6:81:e9:56:8b:6b:ce:10:bb:
76:21:f8:b7:c9:e1:45:87:64:55:1e:bb:c3:37:87:0c:4f:b5:
08:88:e4:73:39:bb:04:59:3b:75:84:0f:16:e3:18:98:ef:94:
0a:84:1a:6d:43:86:3b:2b:81:e7:f2:f9:f4:d9:2c:ed:36:68:
91:3d:2e:54:d6:c5:de:1c:3a:ab:93:b3:a7:7f:ad:90:87:b8:
fd:5a:83:14:e0:9a:64:2f:88:1c:7d:d3:da:82:34:77:30:76:
93:b5:7e:a5:fd:55:f6:97:2c:88:f3:0d:f4:bd:1a:81:72:e9:
b8:58:be:3f:aa:6c:3e:b3:f7:81:b9:1b:e5:7a:27:27:97:37:
aa:ca:e3:9e:77:d6:01:9a:84:3a:85:35:20:94:1c:14:af:3c:
2f:4f:e5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org