Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/AS268218.roa
File: AS268218.roa (raw, json)
Hash identifier: pRdUMrsJOyGVlvTqInKvOFnRkcDP2nt88WmcQlm81BE=
Subject key identifier: 9E:78:C4:22:1C:83:59:DC:2B:97:55:26:41:94:41:8C:A4:02:82:5F
Certificate issuer: /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial: 2C30DDB5C4576A7261133DD8E572096C0ABC5507
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/AS268218.roa
Signing time: Mon 20 Jan 2025 16:28:47 +0000
ROA not before: Mon 20 Jan 2025 16:23:47 +0000
ROA not after: Mon 19 Jan 2026 16:28:47 +0000
asID: 268218
IP address blocks: 45.235.236.0/22 maxlen: 22
45.235.236.0/23 maxlen: 23
45.235.236.0/24 maxlen: 24
45.235.237.0/24 maxlen: 24
45.235.238.0/23 maxlen: 23
45.235.238.0/24 maxlen: 24
45.235.239.0/24 maxlen: 24
2804:4dc4::/32 maxlen: 32
2804:4dc4::/33 maxlen: 33
2804:4dc4::/34 maxlen: 34
2804:4dc4::/35 maxlen: 35
2804:4dc4::/36 maxlen: 36
2804:4dc4::/48 maxlen: 48
2804:4dc4:1000::/36 maxlen: 36
2804:4dc4:2000::/35 maxlen: 35
2804:4dc4:2000::/36 maxlen: 36
2804:4dc4:3000::/36 maxlen: 36
2804:4dc4:4000::/34 maxlen: 34
2804:4dc4:4000::/35 maxlen: 35
2804:4dc4:4000::/36 maxlen: 36
2804:4dc4:5000::/36 maxlen: 36
2804:4dc4:6000::/35 maxlen: 35
2804:4dc4:6000::/36 maxlen: 36
2804:4dc4:7000::/36 maxlen: 36
2804:4dc4:8000::/33 maxlen: 33
2804:4dc4:8000::/34 maxlen: 34
2804:4dc4:8000::/35 maxlen: 35
2804:4dc4:8000::/36 maxlen: 36
2804:4dc4:8400::/40 maxlen: 40
2804:4dc4:9000::/36 maxlen: 36
2804:4dc4:a000::/35 maxlen: 35
2804:4dc4:a000::/36 maxlen: 36
2804:4dc4:b000::/36 maxlen: 36
2804:4dc4:c000::/35 maxlen: 35
2804:4dc4:c000::/36 maxlen: 36
2804:4dc4:d000::/36 maxlen: 36
2804:4dc4:e000::/35 maxlen: 35
2804:4dc4:e000::/36 maxlen: 36
2804:4dc4:f000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:30:dd:b5:c4:57:6a:72:61:13:3d:d8:e5:72:09:6c:0a:bc:55:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Validity
Not Before: Jan 20 16:23:47 2025 GMT
Not After : Jan 19 16:28:47 2026 GMT
Subject: CN=9E78C4221C8359DC2B9755264194418CA402825F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ca:f1:04:c7:77:f8:74:03:67:49:17:74:a0:
d7:c2:fd:62:12:d2:69:09:13:6a:34:57:2c:c2:02:
86:71:d2:34:bc:5e:78:40:45:c2:cc:b1:7d:86:48:
1a:82:14:53:6d:40:05:4c:d9:b2:6c:3f:2c:a3:a7:
c6:4c:ed:c9:33:06:68:e0:6a:39:f7:25:b0:a9:60:
27:74:9a:74:f0:b8:14:04:8e:62:76:98:cb:c4:8f:
4d:91:fa:be:22:5a:c4:a5:42:eb:01:9b:c4:4a:32:
72:dc:a2:72:39:bf:3a:d6:3e:a7:72:d2:7b:8a:6f:
8a:2e:39:f6:b1:ff:c4:26:e5:95:35:4b:fe:c4:e3:
62:2a:23:0f:8f:13:f3:5d:07:94:d9:83:43:e3:22:
25:29:24:4d:e4:65:cf:b7:c0:5a:a9:ec:cb:92:50:
03:e0:df:8f:73:89:b9:b1:b8:bf:3f:f1:c1:c0:83:
1c:c9:ed:c8:de:15:bb:92:58:63:11:69:33:a4:d0:
e0:52:1a:2d:68:8a:29:13:21:bb:00:67:f7:f3:b5:
7d:e4:01:a0:17:41:d4:6e:b2:fe:ff:7e:69:6e:12:
d7:84:fa:40:cf:b9:08:f7:10:d5:96:2f:58:7c:d1:
a4:71:3b:27:91:9e:73:1e:b7:af:df:e8:38:96:01:
fd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:78:C4:22:1C:83:59:DC:2B:97:55:26:41:94:41:8C:A4:02:82:5F
X509v3 Authority Key Identifier:
keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/AS268218.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.236.0/22
IPv6:
2804:4dc4::/32
Signature Algorithm: sha256WithRSAEncryption
09:f8:31:7d:cd:5c:9e:a4:0d:68:a7:94:6f:db:9e:01:80:f9:
3a:ec:80:12:2e:d7:d1:b7:1d:55:66:84:00:aa:45:f8:50:05:
dc:60:a0:00:55:86:a7:36:73:50:d2:7e:a5:5a:a4:2d:c4:f4:
31:30:95:64:83:ab:b5:45:61:e0:d3:d9:f4:d4:6b:89:55:cb:
ea:50:64:67:94:a2:1a:13:02:d7:ef:e4:94:e2:89:95:9b:b3:
70:3a:30:e9:cb:1b:c2:58:64:49:3d:c8:9b:e6:18:08:e1:4c:
f8:6b:b3:51:43:f5:d8:8e:5a:02:dd:15:f2:ab:6d:d1:99:82:
5b:28:07:2c:de:fc:e0:cc:ac:18:a4:aa:f7:13:31:59:8b:ea:
ea:cb:41:e2:d8:5d:3a:a7:df:f8:4f:19:03:5b:6f:ac:56:77:
00:dd:58:47:d4:b5:77:44:26:b5:61:59:14:86:c5:1d:7d:a1:
3a:7d:f5:3d:a7:9d:3e:d2:ff:a1:94:d4:a6:6b:d2:5d:4c:10:
c3:48:05:c9:07:ab:21:ea:15:80:bf:cb:03:3c:5e:e0:87:f3:
c2:fe:c8:9b:99:a5:00:a0:d9:d3:dc:88:1d:ca:bb:07:ca:1c:
f8:b9:b6:f7:16:83:57:64:8b:3b:6e:14:e5:3c:8c:bf:98:4f:
b9:ea:c2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:18:37 2025 by rpki-client