Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/AS28343.roa
File: AS28343.roa (raw, json)
Hash identifier: N7HhFyZp5HGZrHhNdMEjoOtt8EKr7XwV2LkuRGrPZzQ=
Subject key identifier: 27:4F:B2:15:C3:A0:8A:09:4A:3B:3F:61:C2:73:F2:28:6B:12:9C:C2
Certificate issuer: /CN=7BC10D9F0E4532BAA06757A35D9446ED8B31CE82
Certificate serial: 78CFC1A7BD70C9657C714B8DC560E317AB9C4ABE
Authority key identifier: 7B:C1:0D:9F:0E:45:32:BA:A0:67:57:A3:5D:94:46:ED:8B:31:CE:82
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BC10D9F0E4532BAA06757A35D9446ED8B31CE82.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/AS28343.roa
Signing time: Tue 12 Mar 2024 11:44:37 +0000
ROA not before: Tue 12 Mar 2024 11:39:37 +0000
ROA not after: Tue 11 Mar 2025 11:44:37 +0000
asID: 28343
IP address blocks: 45.65.196.0/22 maxlen: 24
45.234.184.0/22 maxlen: 24
131.72.108.0/22 maxlen: 24
131.72.148.0/22 maxlen: 24
131.161.16.0/22 maxlen: 24
131.161.144.0/22 maxlen: 24
131.221.88.0/22 maxlen: 24
131.221.176.0/22 maxlen: 24
132.255.12.0/22 maxlen: 24
138.0.200.0/22 maxlen: 24
138.36.204.0/22 maxlen: 24
138.94.72.0/22 maxlen: 24
138.94.188.0/22 maxlen: 24
138.97.136.0/22 maxlen: 24
138.118.28.0/22 maxlen: 24
138.118.148.0/22 maxlen: 24
138.118.196.0/22 maxlen: 24
138.121.188.0/22 maxlen: 24
138.122.208.0/22 maxlen: 24
138.204.60.0/22 maxlen: 24
143.0.212.0/22 maxlen: 24
143.208.96.0/22 maxlen: 24
143.208.196.0/22 maxlen: 24
143.208.212.0/22 maxlen: 24
143.255.220.0/22 maxlen: 24
167.249.224.0/22 maxlen: 24
167.250.176.0/22 maxlen: 24
168.0.120.0/22 maxlen: 24
168.194.36.0/22 maxlen: 24
168.196.132.0/22 maxlen: 24
168.232.24.0/22 maxlen: 24
168.232.232.0/22 maxlen: 24
170.78.198.0/23 maxlen: 24
170.78.212.0/22 maxlen: 24
170.81.216.0/22 maxlen: 24
170.81.220.0/22 maxlen: 24
170.82.176.0/22 maxlen: 24
170.82.240.0/22 maxlen: 24
170.84.120.0/22 maxlen: 24
170.231.24.0/22 maxlen: 24
170.238.216.0/22 maxlen: 24
170.246.200.0/22 maxlen: 24
170.254.220.0/22 maxlen: 24
177.8.240.0/21 maxlen: 24
177.10.96.0/21 maxlen: 24
177.10.104.0/21 maxlen: 24
177.53.124.0/22 maxlen: 24
177.54.0.0/20 maxlen: 24
177.67.200.0/21 maxlen: 24
177.72.40.0/21 maxlen: 24
177.73.136.0/22 maxlen: 24
177.73.140.0/22 maxlen: 24
177.73.184.0/22 maxlen: 24
177.74.208.0/20 maxlen: 24
177.74.240.0/20 maxlen: 24
177.101.96.0/19 maxlen: 24
177.104.0.0/20 maxlen: 24
177.107.160.0/20 maxlen: 24
177.125.104.0/22 maxlen: 24
177.125.232.0/21 maxlen: 24
177.129.104.0/22 maxlen: 24
177.130.224.0/20 maxlen: 24
177.130.248.0/21 maxlen: 24
177.136.160.0/21 maxlen: 24
177.184.144.0/21 maxlen: 24
177.200.192.0/19 maxlen: 24
177.221.160.0/21 maxlen: 24
177.221.168.0/21 maxlen: 24
179.127.160.0/19 maxlen: 24
179.190.96.0/19 maxlen: 24
186.193.160.0/20 maxlen: 24
186.208.16.0/20 maxlen: 24
186.209.16.0/21 maxlen: 24
186.209.24.0/21 maxlen: 24
186.209.192.0/20 maxlen: 24
186.216.240.0/20 maxlen: 24
186.225.0.0/20 maxlen: 24
186.226.144.0/21 maxlen: 24
186.226.152.0/21 maxlen: 24
186.227.136.0/21 maxlen: 24
186.237.144.0/21 maxlen: 24
186.249.192.0/20 maxlen: 24
186.251.108.0/22 maxlen: 24
187.45.64.0/20 maxlen: 24
187.85.160.0/20 maxlen: 24
187.85.176.0/20 maxlen: 24
187.87.96.0/20 maxlen: 24
187.94.96.0/20 maxlen: 24
187.102.0.0/20 maxlen: 24
187.108.208.0/20 maxlen: 24
189.28.192.0/19 maxlen: 24
189.45.192.0/20 maxlen: 24
189.90.48.0/20 maxlen: 24
189.113.224.0/19 maxlen: 24
189.127.16.0/20 maxlen: 24
191.6.88.0/21 maxlen: 24
191.37.172.0/22 maxlen: 24
191.52.240.0/21 maxlen: 24
191.240.216.0/21 maxlen: 24
191.253.96.0/19 maxlen: 24
200.10.4.0/22 maxlen: 24
200.34.224.0/19 maxlen: 24
201.49.244.0/22 maxlen: 24
201.131.80.0/21 maxlen: 24
201.131.136.0/21 maxlen: 24
201.131.156.0/22 maxlen: 24
201.159.248.0/22 maxlen: 24
2804:c::/32 maxlen: 48
2804:30c::/32 maxlen: 48
2804:ed8::/32 maxlen: 48
2804:f58::/32 maxlen: 48
2804:fe4::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:cf:c1:a7:bd:70:c9:65:7c:71:4b:8d:c5:60:e3:17:ab:9c:4a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7BC10D9F0E4532BAA06757A35D9446ED8B31CE82
Validity
Not Before: Mar 12 11:39:37 2024 GMT
Not After : Mar 11 11:44:37 2025 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d7:77:d5:d9:9f:10:82:6d:09:fb:27:2b:47:
f7:f9:e1:e0:f2:1c:85:5b:41:a0:df:b4:f5:f9:ef:
0d:a3:a1:9d:9d:36:0a:c3:f8:5c:44:a1:e6:1e:ad:
84:d4:a5:10:38:ec:a8:20:05:5d:10:4a:ad:4d:a7:
1b:f3:8e:93:bd:d8:11:ab:9d:fe:b7:88:0b:4a:c3:
14:6d:2d:7c:17:06:03:d8:f4:d8:7d:f8:e7:b7:d1:
f0:6a:86:90:b7:24:ee:16:25:5f:80:0a:b6:b6:bc:
90:5f:de:25:48:38:41:63:b7:05:d7:61:09:d7:a8:
4d:4c:6a:6e:42:b9:96:3c:3a:e8:f7:be:76:14:e7:
38:11:03:c7:fa:58:93:02:88:36:78:41:b2:4e:c8:
dd:de:70:4c:fd:e7:39:2d:7d:11:15:1a:90:1c:1b:
5a:e1:62:1c:25:09:3d:88:78:8d:0b:86:34:9a:fc:
7e:e7:d7:09:e7:a0:e3:b4:06:bb:d1:6c:89:fa:ad:
b3:5e:1e:9d:ca:1a:1e:57:62:56:48:5b:5b:01:53:
d5:e7:94:a8:42:65:40:f2:c0:ed:9e:ce:0e:8f:48:
8f:a8:68:02:cd:a1:4f:3e:8a:76:42:fb:df:bc:dc:
b7:c3:2e:ce:30:f8:57:5f:99:73:06:31:f3:74:a4:
d9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4F:B2:15:C3:A0:8A:09:4A:3B:3F:61:C2:73:F2:28:6B:12:9C:C2
X509v3 Authority Key Identifier:
keyid:7B:C1:0D:9F:0E:45:32:BA:A0:67:57:A3:5D:94:46:ED:8B:31:CE:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/7BC10D9F0E4532BAA06757A35D9446ED8B31CE82.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BC10D9F0E4532BAA06757A35D9446ED8B31CE82.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/AS28343.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.196.0/22
45.234.184.0/22
131.72.108.0/22
131.72.148.0/22
131.161.16.0/22
131.161.144.0/22
131.221.88.0/22
131.221.176.0/22
132.255.12.0/22
138.0.200.0/22
138.36.204.0/22
138.94.72.0/22
138.94.188.0/22
138.97.136.0/22
138.118.28.0/22
138.118.148.0/22
138.118.196.0/22
138.121.188.0/22
138.122.208.0/22
138.204.60.0/22
143.0.212.0/22
143.208.96.0/22
143.208.196.0/22
143.208.212.0/22
143.255.220.0/22
167.249.224.0/22
167.250.176.0/22
168.0.120.0/22
168.194.36.0/22
168.196.132.0/22
168.232.24.0/22
168.232.232.0/22
170.78.198.0/23
170.78.212.0/22
170.81.216.0/21
170.82.176.0/22
170.82.240.0/22
170.84.120.0/22
170.231.24.0/22
170.238.216.0/22
170.246.200.0/22
170.254.220.0/22
177.8.240.0/21
177.10.96.0/20
177.53.124.0/22
177.54.0.0/20
177.67.200.0/21
177.72.40.0/21
177.73.136.0/21
177.73.184.0/22
177.74.208.0/20
177.74.240.0/20
177.101.96.0/19
177.104.0.0/20
177.107.160.0/20
177.125.104.0/22
177.125.232.0/21
177.129.104.0/22
177.130.224.0/20
177.130.248.0/21
177.136.160.0/21
177.184.144.0/21
177.200.192.0/19
177.221.160.0/20
179.127.160.0/19
179.190.96.0/19
186.193.160.0/20
186.208.16.0/20
186.209.16.0/20
186.209.192.0/20
186.216.240.0/20
186.225.0.0/20
186.226.144.0/20
186.227.136.0/21
186.237.144.0/21
186.249.192.0/20
186.251.108.0/22
187.45.64.0/20
187.85.160.0/19
187.87.96.0/20
187.94.96.0/20
187.102.0.0/20
187.108.208.0/20
189.28.192.0/19
189.45.192.0/20
189.90.48.0/20
189.113.224.0/19
189.127.16.0/20
191.6.88.0/21
191.37.172.0/22
191.52.240.0/21
191.240.216.0/21
191.253.96.0/19
200.10.4.0/22
200.34.224.0/19
201.49.244.0/22
201.131.80.0/21
201.131.136.0/21
201.131.156.0/22
201.159.248.0/22
IPv6:
2804:c::/32
2804:30c::/32
2804:ed8::/32
2804:f58::/32
2804:fe4::/32
Signature Algorithm: sha256WithRSAEncryption
60:4f:35:e1:dd:e7:80:09:d5:49:2a:c2:68:fc:b0:3a:94:75:
6d:8b:9a:cd:6f:01:98:43:d7:80:62:30:62:73:35:1f:8a:d8:
5a:ca:34:16:07:13:67:fd:48:fd:c3:47:60:f0:c9:20:95:e4:
20:46:3a:75:94:a2:f7:1b:ef:bb:b5:c3:91:ef:7c:e2:a7:3b:
0c:1c:44:a0:73:25:84:90:a2:f2:a7:03:2b:15:00:c6:27:f9:
ca:f3:56:21:d1:27:69:78:c8:84:7a:2e:15:0a:2f:cf:de:92:
ca:78:ff:5b:b7:6e:b0:21:e0:a0:ca:5d:33:75:21:de:c2:6f:
3d:73:7b:b8:d7:6a:9b:3c:91:da:61:7c:cd:fc:34:e7:a5:71:
ba:6f:0e:d0:c8:40:40:bb:ad:de:96:db:c5:84:2f:78:c9:d2:
f6:16:1c:be:71:ea:29:be:a7:e3:17:45:af:8e:b1:fc:f2:7c:
07:26:ba:c4:a2:a2:dc:c0:47:76:6a:5d:51:e8:3a:89:6c:25:
51:e1:bd:72:9d:c3:7b:bf:eb:f8:82:f7:93:cd:fb:51:11:52:
1e:5e:28:6a:65:d3:bc:1d:bb:cf:a0:da:86:53:d3:b5:da:60:
e4:e0:47:ca:de:f6:05:75:62:45:9b:02:a6:81:b0:aa:15:39:
50:64:9e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org