Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/AS28343.roa
File: AS28343.roa (raw, json)
Hash identifier: jbPLOcUfkkMoouI/h6tgbdnaxrC5j0hQhRAEEbMSsoM=
Subject key identifier: E3:89:CE:5E:DF:E2:1B:18:DE:41:DF:F2:A2:26:BA:B7:7B:12:5D:03
Certificate issuer: /CN=3BCE948E59955EF881BD1ECD2DE385FE7959F195
Certificate serial: 15B9F79712169A36C174BAEF5F993DBC8D23E611
Authority key identifier: 3B:CE:94:8E:59:95:5E:F8:81:BD:1E:CD:2D:E3:85:FE:79:59:F1:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BCE948E59955EF881BD1ECD2DE385FE7959F195.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/AS28343.roa
Signing time: Thu 27 Mar 2025 11:45:53 +0000
ROA not before: Thu 27 Mar 2025 11:40:53 +0000
ROA not after: Thu 26 Mar 2026 11:45:53 +0000
asID: 28343
IP address blocks: 45.65.196.0/22 maxlen: 24
45.234.184.0/22 maxlen: 24
131.72.108.0/22 maxlen: 24
131.72.148.0/22 maxlen: 24
131.100.92.0/22 maxlen: 24
131.108.12.0/22 maxlen: 24
131.161.16.0/22 maxlen: 24
131.161.144.0/22 maxlen: 24
131.221.88.0/22 maxlen: 24
131.221.176.0/22 maxlen: 24
132.255.12.0/22 maxlen: 24
138.0.200.0/22 maxlen: 24
138.36.204.0/22 maxlen: 24
138.94.72.0/22 maxlen: 24
138.94.188.0/22 maxlen: 24
138.97.136.0/22 maxlen: 24
138.99.20.0/22 maxlen: 24
138.118.28.0/22 maxlen: 24
138.118.148.0/22 maxlen: 24
138.118.196.0/22 maxlen: 24
138.121.188.0/22 maxlen: 24
138.122.208.0/22 maxlen: 24
138.204.60.0/22 maxlen: 24
138.204.144.0/22 maxlen: 24
143.0.212.0/22 maxlen: 24
143.208.96.0/22 maxlen: 24
143.208.196.0/22 maxlen: 24
143.208.212.0/22 maxlen: 24
143.255.220.0/22 maxlen: 24
167.249.224.0/22 maxlen: 24
167.250.176.0/22 maxlen: 24
168.0.120.0/22 maxlen: 24
168.194.36.0/22 maxlen: 24
168.196.132.0/22 maxlen: 24
168.232.24.0/22 maxlen: 24
168.232.232.0/22 maxlen: 24
170.78.198.0/23 maxlen: 24
170.78.212.0/22 maxlen: 24
170.81.216.0/22 maxlen: 24
170.81.220.0/22 maxlen: 24
170.82.176.0/22 maxlen: 24
170.82.240.0/22 maxlen: 24
170.84.120.0/22 maxlen: 24
170.150.0.0/22 maxlen: 24
170.231.24.0/22 maxlen: 24
170.238.216.0/22 maxlen: 24
170.246.72.0/22 maxlen: 24
170.246.200.0/22 maxlen: 24
170.254.220.0/22 maxlen: 24
177.8.240.0/21 maxlen: 24
177.10.96.0/21 maxlen: 24
177.10.104.0/21 maxlen: 24
177.22.0.0/20 maxlen: 24
177.53.124.0/22 maxlen: 24
177.54.0.0/20 maxlen: 24
177.66.144.0/22 maxlen: 24
177.67.200.0/21 maxlen: 24
177.72.40.0/21 maxlen: 24
177.73.136.0/22 maxlen: 24
177.73.140.0/22 maxlen: 24
177.73.184.0/22 maxlen: 24
177.74.208.0/20 maxlen: 24
177.74.240.0/20 maxlen: 24
177.85.112.0/21 maxlen: 24
177.101.96.0/19 maxlen: 24
177.104.0.0/20 maxlen: 24
177.107.160.0/20 maxlen: 24
177.125.104.0/22 maxlen: 24
177.125.232.0/21 maxlen: 24
177.129.104.0/22 maxlen: 24
177.130.224.0/20 maxlen: 24
177.130.248.0/21 maxlen: 24
177.136.160.0/21 maxlen: 24
177.184.144.0/21 maxlen: 24
177.200.192.0/19 maxlen: 24
177.221.160.0/21 maxlen: 24
177.221.168.0/21 maxlen: 24
177.222.144.0/20 maxlen: 24
179.127.160.0/19 maxlen: 24
179.190.96.0/19 maxlen: 24
186.193.160.0/20 maxlen: 24
186.208.16.0/20 maxlen: 24
186.209.16.0/21 maxlen: 24
186.209.24.0/21 maxlen: 24
186.209.192.0/20 maxlen: 24
186.216.240.0/20 maxlen: 24
186.225.0.0/20 maxlen: 24
186.226.32.0/20 maxlen: 24
186.226.144.0/21 maxlen: 24
186.226.152.0/21 maxlen: 24
186.227.136.0/21 maxlen: 24
186.235.56.0/22 maxlen: 24
186.237.144.0/21 maxlen: 24
186.249.192.0/20 maxlen: 24
186.251.108.0/22 maxlen: 24
187.45.64.0/20 maxlen: 24
187.85.160.0/20 maxlen: 24
187.85.176.0/20 maxlen: 24
187.87.96.0/20 maxlen: 24
187.94.96.0/20 maxlen: 24
187.102.0.0/20 maxlen: 24
187.108.208.0/20 maxlen: 24
189.28.192.0/19 maxlen: 24
189.45.192.0/20 maxlen: 24
189.90.48.0/20 maxlen: 24
189.91.192.0/20 maxlen: 24
189.113.224.0/19 maxlen: 24
189.127.16.0/20 maxlen: 24
191.6.88.0/21 maxlen: 24
191.37.172.0/22 maxlen: 24
191.52.240.0/21 maxlen: 24
191.240.216.0/21 maxlen: 24
191.253.96.0/19 maxlen: 24
200.10.4.0/22 maxlen: 24
200.34.224.0/19 maxlen: 24
200.50.216.0/22 maxlen: 24
201.49.244.0/22 maxlen: 24
201.131.80.0/21 maxlen: 24
201.131.136.0/21 maxlen: 24
201.131.156.0/22 maxlen: 24
201.159.248.0/22 maxlen: 24
2804:c::/32 maxlen: 48
2804:30c::/32 maxlen: 48
2804:ed8::/32 maxlen: 48
2804:f58::/32 maxlen: 48
2804:fe4::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:b9:f7:97:12:16:9a:36:c1:74:ba:ef:5f:99:3d:bc:8d:23:e6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BCE948E59955EF881BD1ECD2DE385FE7959F195
Validity
Not Before: Mar 27 11:40:53 2025 GMT
Not After : Mar 26 11:45:53 2026 GMT
Subject: CN=3082010A02820101009F2168F2B12CE008FD85342809312CD93E0AA0ABB732AA3D4A6018A2B30AB3E5902BF2E57C28B93DA8ED36207FBC147B454136829299FBA844F986EE0F6CBF444223227755636E5AC0CA65CCD413603994F8C8AEFC890734E89CEC5A28C06FCEBDFC8479B65D3903D8B3EA4EE43437A78EF0F68F7013581D22347DDD551CEA34F53E5918589DACCD2228BEF7620E49DEEAA260B2C5F8D2B30412FD2D1B6DBDA4915EA247A2E56234AB948A26CF75696F53BE93AF1745436E33724F3BE0FAD938BD40F16802EB328C6198352A315F9DA6C1671077394A7D9AEC59EB33DDA3CF8C13F56B90098C297882C50F4D15FC9FF15F205B9E2DBC5AE6AEBB1D9750D9D0B30203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:21:68:f2:b1:2c:e0:08:fd:85:34:28:09:31:
2c:d9:3e:0a:a0:ab:b7:32:aa:3d:4a:60:18:a2:b3:
0a:b3:e5:90:2b:f2:e5:7c:28:b9:3d:a8:ed:36:20:
7f:bc:14:7b:45:41:36:82:92:99:fb:a8:44:f9:86:
ee:0f:6c:bf:44:42:23:22:77:55:63:6e:5a:c0:ca:
65:cc:d4:13:60:39:94:f8:c8:ae:fc:89:07:34:e8:
9c:ec:5a:28:c0:6f:ce:bd:fc:84:79:b6:5d:39:03:
d8:b3:ea:4e:e4:34:37:a7:8e:f0:f6:8f:70:13:58:
1d:22:34:7d:dd:55:1c:ea:34:f5:3e:59:18:58:9d:
ac:cd:22:28:be:f7:62:0e:49:de:ea:a2:60:b2:c5:
f8:d2:b3:04:12:fd:2d:1b:6d:bd:a4:91:5e:a2:47:
a2:e5:62:34:ab:94:8a:26:cf:75:69:6f:53:be:93:
af:17:45:43:6e:33:72:4f:3b:e0:fa:d9:38:bd:40:
f1:68:02:eb:32:8c:61:98:35:2a:31:5f:9d:a6:c1:
67:10:77:39:4a:7d:9a:ec:59:eb:33:dd:a3:cf:8c:
13:f5:6b:90:09:8c:29:78:82:c5:0f:4d:15:fc:9f:
f1:5f:20:5b:9e:2d:bc:5a:e6:ae:bb:1d:97:50:d9:
d0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:89:CE:5E:DF:E2:1B:18:DE:41:DF:F2:A2:26:BA:B7:7B:12:5D:03
X509v3 Authority Key Identifier:
keyid:3B:CE:94:8E:59:95:5E:F8:81:BD:1E:CD:2D:E3:85:FE:79:59:F1:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/3BCE948E59955EF881BD1ECD2DE385FE7959F195.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BCE948E59955EF881BD1ECD2DE385FE7959F195.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/AS28343.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.196.0/22
45.234.184.0/22
131.72.108.0/22
131.72.148.0/22
131.100.92.0/22
131.108.12.0/22
131.161.16.0/22
131.161.144.0/22
131.221.88.0/22
131.221.176.0/22
132.255.12.0/22
138.0.200.0/22
138.36.204.0/22
138.94.72.0/22
138.94.188.0/22
138.97.136.0/22
138.99.20.0/22
138.118.28.0/22
138.118.148.0/22
138.118.196.0/22
138.121.188.0/22
138.122.208.0/22
138.204.60.0/22
138.204.144.0/22
143.0.212.0/22
143.208.96.0/22
143.208.196.0/22
143.208.212.0/22
143.255.220.0/22
167.249.224.0/22
167.250.176.0/22
168.0.120.0/22
168.194.36.0/22
168.196.132.0/22
168.232.24.0/22
168.232.232.0/22
170.78.198.0/23
170.78.212.0/22
170.81.216.0/21
170.82.176.0/22
170.82.240.0/22
170.84.120.0/22
170.150.0.0/22
170.231.24.0/22
170.238.216.0/22
170.246.72.0/22
170.246.200.0/22
170.254.220.0/22
177.8.240.0/21
177.10.96.0/20
177.22.0.0/20
177.53.124.0/22
177.54.0.0/20
177.66.144.0/22
177.67.200.0/21
177.72.40.0/21
177.73.136.0/21
177.73.184.0/22
177.74.208.0/20
177.74.240.0/20
177.85.112.0/21
177.101.96.0/19
177.104.0.0/20
177.107.160.0/20
177.125.104.0/22
177.125.232.0/21
177.129.104.0/22
177.130.224.0/20
177.130.248.0/21
177.136.160.0/21
177.184.144.0/21
177.200.192.0/19
177.221.160.0/20
177.222.144.0/20
179.127.160.0/19
179.190.96.0/19
186.193.160.0/20
186.208.16.0/20
186.209.16.0/20
186.209.192.0/20
186.216.240.0/20
186.225.0.0/20
186.226.32.0/20
186.226.144.0/20
186.227.136.0/21
186.235.56.0/22
186.237.144.0/21
186.249.192.0/20
186.251.108.0/22
187.45.64.0/20
187.85.160.0/19
187.87.96.0/20
187.94.96.0/20
187.102.0.0/20
187.108.208.0/20
189.28.192.0/19
189.45.192.0/20
189.90.48.0/20
189.91.192.0/20
189.113.224.0/19
189.127.16.0/20
191.6.88.0/21
191.37.172.0/22
191.52.240.0/21
191.240.216.0/21
191.253.96.0/19
200.10.4.0/22
200.34.224.0/19
200.50.216.0/22
201.49.244.0/22
201.131.80.0/21
201.131.136.0/21
201.131.156.0/22
201.159.248.0/22
IPv6:
2804:c::/32
2804:30c::/32
2804:ed8::/32
2804:f58::/32
2804:fe4::/32
Signature Algorithm: sha256WithRSAEncryption
0a:ca:19:d1:b6:d5:36:45:4e:d5:68:fc:85:36:26:92:57:27:
b1:83:2a:a3:fa:87:4d:50:83:f0:6c:a8:f5:6e:17:23:3f:95:
a2:79:ef:98:1a:18:39:c5:1f:95:00:35:90:0f:ad:34:30:ff:
ba:d9:75:61:7b:82:33:a5:a5:6c:a2:4d:5e:77:7c:ad:f0:24:
fb:a9:b5:d7:0c:60:ff:05:61:d0:52:60:06:38:f3:4b:ec:f5:
28:76:a0:5d:3f:27:d8:80:f1:0a:b9:b2:ba:a5:a3:a8:c2:5b:
c6:3c:bd:5e:58:93:c2:d3:62:b4:f9:2f:cc:96:eb:3a:bd:39:
9e:d0:7d:78:70:fb:76:8c:07:11:5d:ce:95:de:19:cd:fd:15:
91:03:56:23:8a:c9:04:02:ea:75:ee:ba:77:66:8b:93:0e:20:
f9:dd:2d:23:e2:04:43:5f:47:a2:0e:ba:fe:20:63:42:ee:3f:
fe:1b:d2:af:0d:47:ec:a9:c4:4e:06:c6:5f:0b:7f:a4:95:72:
36:37:20:2c:ba:4c:00:70:2c:1c:32:23:e9:2d:df:58:48:74:
3e:80:11:c6:e8:71:b7:c6:5a:47:b7:2a:16:33:c1:d3:fb:e7:
87:eb:b8:77:52:5a:9b:37:f8:4e:65:bd:11:49:ff:ac:da:d7:
61:20:27:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:44 2025 by rpki-client