Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/AS28360.roa
File: AS28360.roa (raw, json)
Hash identifier: KpxZRmO8FOrAgZj+R0nWkP7XJU7lvep5B+znPGRMSWE=
Subject key identifier: EC:FF:A5:ED:C7:C6:54:9B:48:56:6C:61:F4:3A:80:DD:41:52:6E:22
Certificate issuer: /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial: 5B63FB44553944EAB342119CC2D28CD8964E3B3B
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/AS28360.roa
Signing time: Sat 06 Apr 2024 02:43:13 +0000
ROA not before: Sat 06 Apr 2024 02:38:13 +0000
ROA not after: Sat 05 Apr 2025 02:43:13 +0000
asID: 28360
IP address blocks: 138.94.8.0/22 maxlen: 24
138.94.8.0/23 maxlen: 23
138.94.8.0/24 maxlen: 24
138.94.9.0/24 maxlen: 24
138.94.10.0/23 maxlen: 23
138.94.10.0/24 maxlen: 24
138.94.11.0/24 maxlen: 24
177.8.0.0/20 maxlen: 24
177.8.0.0/21 maxlen: 21
177.8.0.0/22 maxlen: 22
177.8.0.0/23 maxlen: 23
177.8.16.0/20 maxlen: 20
177.8.16.0/21 maxlen: 21
177.8.16.0/22 maxlen: 22
177.8.16.0/23 maxlen: 23
177.8.16.0/24 maxlen: 24
177.8.17.0/24 maxlen: 24
177.8.18.0/23 maxlen: 23
177.8.18.0/24 maxlen: 24
177.8.19.0/24 maxlen: 24
177.8.20.0/22 maxlen: 22
177.8.20.0/23 maxlen: 23
177.8.20.0/24 maxlen: 24
177.8.21.0/24 maxlen: 24
177.8.22.0/23 maxlen: 23
177.8.22.0/24 maxlen: 24
177.8.23.0/24 maxlen: 24
177.8.24.0/21 maxlen: 21
177.8.24.0/22 maxlen: 22
177.8.24.0/23 maxlen: 23
177.8.24.0/24 maxlen: 24
177.8.25.0/24 maxlen: 24
177.8.26.0/23 maxlen: 23
177.8.26.0/24 maxlen: 24
177.8.27.0/24 maxlen: 24
177.8.28.0/22 maxlen: 22
177.8.28.0/23 maxlen: 23
177.8.28.0/24 maxlen: 24
177.8.29.0/24 maxlen: 24
177.8.30.0/23 maxlen: 23
177.8.30.0/24 maxlen: 24
177.8.31.0/24 maxlen: 24
179.124.224.0/20 maxlen: 20
179.124.224.0/21 maxlen: 21
179.124.224.0/22 maxlen: 22
179.124.224.0/23 maxlen: 23
179.124.226.0/23 maxlen: 23
179.124.228.0/22 maxlen: 22
179.124.228.0/23 maxlen: 23
179.124.230.0/23 maxlen: 23
179.124.232.0/21 maxlen: 21
179.124.232.0/22 maxlen: 22
179.124.232.0/23 maxlen: 23
179.124.232.0/24 maxlen: 24
179.124.233.0/24 maxlen: 24
179.124.234.0/23 maxlen: 23
179.124.234.0/24 maxlen: 24
179.124.235.0/24 maxlen: 24
179.124.236.0/22 maxlen: 22
179.124.236.0/23 maxlen: 23
179.124.236.0/24 maxlen: 24
179.124.237.0/24 maxlen: 24
179.124.238.0/23 maxlen: 23
179.124.238.0/24 maxlen: 24
179.124.239.0/24 maxlen: 24
189.76.208.0/20 maxlen: 20
189.76.208.0/21 maxlen: 21
189.76.208.0/22 maxlen: 22
189.76.208.0/23 maxlen: 23
189.76.210.0/23 maxlen: 23
189.76.212.0/22 maxlen: 22
189.76.212.0/23 maxlen: 23
189.76.214.0/23 maxlen: 23
189.76.216.0/21 maxlen: 21
189.76.216.0/22 maxlen: 22
189.76.216.0/23 maxlen: 23
189.76.218.0/23 maxlen: 23
189.76.220.0/22 maxlen: 22
189.76.220.0/23 maxlen: 23
189.76.222.0/23 maxlen: 23
189.76.224.0/20 maxlen: 20
189.76.224.0/21 maxlen: 21
189.76.224.0/22 maxlen: 22
189.76.224.0/23 maxlen: 23
189.76.226.0/23 maxlen: 23
189.76.228.0/22 maxlen: 22
189.76.228.0/23 maxlen: 23
189.76.230.0/23 maxlen: 23
189.76.232.0/21 maxlen: 21
189.76.232.0/22 maxlen: 22
189.76.232.0/23 maxlen: 23
189.76.234.0/23 maxlen: 23
189.76.236.0/22 maxlen: 22
189.76.236.0/23 maxlen: 23
189.76.238.0/23 maxlen: 23
2804:14::/32 maxlen: 32
2804:14::/33 maxlen: 33
2804:14:8000::/33 maxlen: 33
2804:14:8000::/34 maxlen: 34
2804:14:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:63:fb:44:55:39:44:ea:b3:42:11:9c:c2:d2:8c:d8:96:4e:3b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Validity
Not Before: Apr 6 02:38:13 2024 GMT
Not After : Apr 5 02:43:13 2025 GMT
Subject: CN=ECFFA5EDC7C6549B48566C61F43A80DD41526E22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:9c:94:88:57:63:ca:c3:49:0d:43:20:0b:
95:2e:e4:b6:a6:54:54:69:c1:10:ab:22:70:df:25:
32:cd:7d:11:11:88:be:e0:e4:01:c3:54:c5:18:fd:
3d:ea:69:14:fd:4e:fa:86:9a:6b:01:c7:70:84:67:
22:19:b5:49:01:3d:09:9c:9a:8d:74:3a:36:aa:db:
e3:1f:28:71:b2:cb:d3:73:d5:8f:e4:c4:ed:81:38:
80:44:fc:7b:c2:43:69:cc:b9:d0:c7:b0:17:f9:ae:
d5:eb:34:34:a4:8a:bc:d8:a8:73:48:d5:4f:e9:65:
04:ae:15:9a:05:48:b1:de:cc:b9:89:4d:52:8d:6a:
f9:9b:6e:70:d1:68:82:a2:94:b8:71:59:66:ca:65:
64:b0:0c:ba:c2:a4:f8:fa:ed:28:7a:00:50:8e:48:
e6:9b:9d:8b:d3:af:ea:9b:9d:84:2b:54:e5:64:52:
be:5d:3e:eb:45:86:54:80:aa:4d:4c:b1:2c:95:b1:
86:b7:d9:6a:54:6e:23:1a:c8:4c:69:f7:37:1c:32:
bc:e4:07:51:56:6c:4a:ee:ae:08:39:eb:c1:b0:40:
c9:3e:d0:7d:c0:4d:5c:4e:be:c5:de:42:a4:57:5b:
d3:d5:70:b6:51:40:a6:86:dd:f7:79:45:9f:16:fc:
cc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FF:A5:ED:C7:C6:54:9B:48:56:6C:61:F4:3A:80:DD:41:52:6E:22
X509v3 Authority Key Identifier:
keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/AS28360.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.8.0/22
177.8.0.0/19
179.124.224.0/20
189.76.208.0-189.76.239.255
IPv6:
2804:14::/32
Signature Algorithm: sha256WithRSAEncryption
29:a6:58:12:76:05:2f:c9:6b:cc:9e:28:7f:f2:9f:3d:7e:a1:
8d:94:52:1a:88:cc:6d:4b:db:18:68:84:2d:73:59:77:34:33:
1c:d7:4f:f4:5b:46:b6:5d:55:e9:63:9e:b3:3f:a2:9d:da:11:
ae:d9:97:3b:b9:27:7f:f6:21:27:98:6f:81:9f:c1:3d:b9:9e:
97:0b:f4:7a:26:62:33:a6:2c:92:7e:38:14:37:53:b3:2e:3b:
e9:f4:34:fc:4a:31:22:84:cb:13:9d:7c:ec:92:70:b6:7f:e8:
ae:39:2a:60:13:9a:1a:44:86:c6:d4:74:6c:12:f3:7a:ee:91:
8c:21:d7:6f:f2:2a:50:a1:c5:92:c9:15:85:da:d2:0f:b7:b2:
39:f4:71:fd:f5:90:af:e2:4b:78:4b:62:80:5c:98:6d:4a:a8:
4f:8e:d8:8d:78:ba:7f:e5:f6:c7:a0:30:2c:cc:ae:f6:a9:33:
c6:9b:63:ef:39:73:75:a3:69:0b:26:d1:f8:f8:51:69:30:eb:
d5:85:12:74:d6:24:65:ed:4e:6e:54:9e:9a:a6:e2:89:26:f8:
c7:4a:79:fd:d6:72:60:c8:8f:e1:4f:42:89:da:ea:be:de:1a:
55:4e:73:cf:89:b7:b0:f0:bb:48:1a:86:3c:7e:ac:9c:df:35:
52:d9:4b:54
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUW2P7RFU5ROqzQhGcwtKM2JZOOzswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI1QkMwRjE4RjY4NkQ3NDkxMEMwQ0JEMEREMThBQzJD
RTgyQ0JGNzAeFw0yNDA0MDYwMjM4MTNaFw0yNTA0MDUwMjQzMTNaMDMxMTAvBgNV
BAMTKEVDRkZBNUVEQzdDNjU0OUI0ODU2NkM2MUY0M0E4MERENDE1MjZFMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp6JyUiFdjysNJDUMgC5Uu5Lam
VFRpwRCrInDfJTLNfRERiL7g5AHDVMUY/T3qaRT9TvqGmmsBx3CEZyIZtUkBPQmc
mo10Ojaq2+MfKHGyy9Nz1Y/kxO2BOIBE/HvCQ2nMudDHsBf5rtXrNDSkirzYqHNI
1U/pZQSuFZoFSLHezLmJTVKNavmbbnDRaIKilLhxWWbKZWSwDLrCpPj67Sh6AFCO
SOabnYvTr+qbnYQrVOVkUr5dPutFhlSAqk1MsSyVsYa32WpUbiMayExp9zccMrzk
B1FWbErurgg568GwQMk+0H3ATVxOvsXeQqRXW9PVcLZRQKaG3fd5RZ8W/MxTAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQU7P+l7cfGVJtIVmxh9DqA3UFSbiIwHwYDVR0j
BBgwFoAUW1vA8Y9obXSRDAy9DdGKws6Cy/cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC81QjVCQzBGMThGNjg2RDc0OTEwQzBDQkQwREQxOEFDMkNFODJDQkY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVCNUJDMEYxOEY2ODZENzQ5
MTBDMENCRDBERDE4QUMyQ0U4MkNCRjcuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr
BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80Qmhh
emo4YkZ4dnA3UDZQY1pnWUZxbTNiUHhFcnlheDNROVJhRFFOSjNQMi8wL0FTMjgz
NjAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSAYIKwYBBQUHAQcBAf8E
OTA3MCYEAgABMCADBAKKXggDBAWxCAADBASzfOAwDAMEBL1M0AMEBL1M4DANBAIA
AjAHAwUAKAQAFDANBgkqhkiG9w0BAQsFAAOCAQEAKaZYEnYFL8lrzJ4of/KfPX6h
jZRSGojMbUvbGGiELXNZdzQzHNdP9FtGtl1V6WOesz+indoRrtmXO7knf/YhJ5hv
gZ/BPbmelwv0eiZiM6Yskn44FDdTsy476fQ0/EoxIoTLE5187JJwtn/orjkqYBOa
GkSGxtR0bBLzeu6RjCHXb/IqUKHFkskVhdrSD7eyOfRx/fWQr+JLeEtigFyYbUqo
T47YjXi6f+X2x6AwLMyu9qkzxptj7zlzdaNpCybR+PhRaTDr1YUSdNYkZe1OblSe
mqbiiSb4x0p5/dZyYMiP4U9Cidrqvt4aVU5zz4m3sPC7SBqGPH6snN81UtlLVA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:35:45 2025 by rpki-client