Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/AS28598.roa
File: AS28598.roa (raw, json)
Hash identifier: SGty3yjsOeJVntGDTU2e+qlQtFCAw6x/iRj5G6cCTaU=
Subject key identifier: B6:D2:36:7D:24:09:19:9C:1B:94:77:0D:D0:94:58:88:BE:50:04:B6
Certificate issuer: /CN=3D5D40CF30F71728D13ED1EDA1B87700FA2696DD
Certificate serial: 06705E2DD8FE8D06802EFF2BE9825CFCC80E6797
Authority key identifier: 3D:5D:40:CF:30:F7:17:28:D1:3E:D1:ED:A1:B8:77:00:FA:26:96:DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D5D40CF30F71728D13ED1EDA1B87700FA2696DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/AS28598.roa
Signing time: Tue 02 Apr 2024 23:18:43 +0000
ROA not before: Tue 02 Apr 2024 23:13:43 +0000
ROA not after: Tue 01 Apr 2025 23:18:43 +0000
asID: 28598
IP address blocks: 45.7.104.0/22 maxlen: 22
45.7.104.0/23 maxlen: 23
45.165.228.0/22 maxlen: 24
45.172.124.0/22 maxlen: 22
45.172.124.0/23 maxlen: 23
45.172.124.0/24 maxlen: 24
45.172.125.0/24 maxlen: 24
45.172.126.0/23 maxlen: 23
45.172.126.0/24 maxlen: 24
45.179.224.0/22 maxlen: 22
45.179.224.0/23 maxlen: 23
45.179.226.0/23 maxlen: 23
45.229.212.0/22 maxlen: 22
45.229.212.0/23 maxlen: 23
45.229.214.0/23 maxlen: 23
138.59.228.0/22 maxlen: 22
138.59.228.0/23 maxlen: 23
138.59.230.0/23 maxlen: 23
138.122.80.0/22 maxlen: 22
138.122.80.0/23 maxlen: 23
138.122.82.0/23 maxlen: 23
167.250.136.0/22 maxlen: 22
167.250.136.0/23 maxlen: 23
167.250.138.0/23 maxlen: 23
167.250.139.0/24 maxlen: 24
170.78.4.0/22 maxlen: 22
170.78.4.0/23 maxlen: 23
170.78.6.0/23 maxlen: 23
170.81.4.0/22 maxlen: 22
170.81.4.0/23 maxlen: 23
170.81.6.0/23 maxlen: 23
177.104.112.0/20 maxlen: 20
177.104.112.0/21 maxlen: 21
177.104.120.0/21 maxlen: 21
177.104.124.0/24 maxlen: 24
177.190.208.0/22 maxlen: 22
177.190.208.0/23 maxlen: 23
177.190.210.0/23 maxlen: 23
187.94.8.0/22 maxlen: 22
187.94.8.0/23 maxlen: 23
187.94.10.0/23 maxlen: 23
187.110.224.0/20 maxlen: 20
187.110.224.0/21 maxlen: 21
187.110.224.0/23 maxlen: 23
187.110.226.0/23 maxlen: 23
187.110.228.0/23 maxlen: 23
187.110.230.0/23 maxlen: 23
187.110.232.0/21 maxlen: 21
187.110.232.0/22 maxlen: 22
187.110.232.0/23 maxlen: 23
187.110.236.0/22 maxlen: 22
187.110.238.0/23 maxlen: 23
187.120.48.0/20 maxlen: 20
187.120.48.0/21 maxlen: 21
191.52.224.0/20 maxlen: 20
201.20.64.0/18 maxlen: 18
201.20.64.0/19 maxlen: 19
201.20.64.0/20 maxlen: 20
201.20.64.0/21 maxlen: 21
201.20.64.0/23 maxlen: 23
201.20.71.0/24 maxlen: 24
201.20.72.0/21 maxlen: 21
201.20.80.0/20 maxlen: 20
201.20.80.0/21 maxlen: 21
201.20.87.0/24 maxlen: 24
201.20.94.0/24 maxlen: 24
201.20.96.0/19 maxlen: 19
201.20.96.0/20 maxlen: 20
201.20.96.0/21 maxlen: 21
201.20.96.0/23 maxlen: 23
201.20.104.0/23 maxlen: 23
201.20.112.0/20 maxlen: 20
201.20.116.0/23 maxlen: 23
201.20.117.0/24 maxlen: 24
201.20.119.0/24 maxlen: 24
201.20.120.0/21 maxlen: 21
201.20.126.0/24 maxlen: 24
201.148.120.0/22 maxlen: 22
201.148.120.0/23 maxlen: 23
201.148.122.0/23 maxlen: 23
2804:248::/32 maxlen: 32
2804:248::/34 maxlen: 34
2804:248::/48 maxlen: 48
2804:248:2::/48 maxlen: 48
2804:248:4::/48 maxlen: 48
2804:248:8::/48 maxlen: 48
2804:248:100::/40 maxlen: 40
2804:248:800::/39 maxlen: 39
2804:248:3000::/40 maxlen: 40
2804:248:4000::/34 maxlen: 34
2804:248:4002::/48 maxlen: 48
2804:248:4004::/48 maxlen: 48
2804:248:4007::/48 maxlen: 48
2804:248:8000::/34 maxlen: 34
2804:248:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:70:5e:2d:d8:fe:8d:06:80:2e:ff:2b:e9:82:5c:fc:c8:0e:67:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D5D40CF30F71728D13ED1EDA1B87700FA2696DD
Validity
Not Before: Apr 2 23:13:43 2024 GMT
Not After : Apr 1 23:18:43 2025 GMT
Subject: CN=B6D2367D2409199C1B94770DD0945888BE5004B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a2:cf:61:0e:19:6e:8a:b2:58:3a:71:f9:57:
e7:82:f6:27:05:a8:cb:03:6c:dc:1e:3b:ea:85:29:
f4:eb:9c:c9:6d:8c:ec:d4:91:d7:50:77:d9:8a:8f:
13:df:4f:33:67:f1:1f:4d:4c:87:7b:a5:76:be:20:
3b:ab:6c:79:c7:f2:83:93:dd:b8:be:54:6d:7d:a1:
f8:ed:61:f8:44:b4:8b:94:a2:05:96:5d:b1:6c:0e:
4a:80:d8:15:4d:f9:9c:81:b8:62:7a:c6:4a:1e:c5:
ed:6d:82:49:2d:a8:a0:a8:9c:46:30:57:37:7e:99:
f1:b2:e9:77:80:85:d6:f9:0c:f8:4c:d4:b1:03:e7:
ba:d2:17:9e:1e:8b:50:1d:31:4b:fd:48:56:72:25:
1b:55:1d:11:28:67:ba:e8:9a:bc:26:09:b8:73:0a:
bb:4c:55:80:30:18:62:e0:e6:53:33:5d:2b:35:11:
5f:07:aa:65:94:e4:a9:80:4a:b6:87:cc:35:57:02:
96:23:bd:07:9a:ac:52:92:d9:90:fc:06:fe:90:3a:
e2:e3:5c:0d:a9:60:0e:5e:99:f2:1d:8d:1b:a8:b1:
ff:ce:43:69:44:5a:70:4e:2a:42:e9:d2:5a:db:64:
5d:c2:cc:f0:23:1f:bd:c2:1f:4c:a9:b5:2f:c2:a8:
ff:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D2:36:7D:24:09:19:9C:1B:94:77:0D:D0:94:58:88:BE:50:04:B6
X509v3 Authority Key Identifier:
keyid:3D:5D:40:CF:30:F7:17:28:D1:3E:D1:ED:A1:B8:77:00:FA:26:96:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3D5D40CF30F71728D13ED1EDA1B87700FA2696DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D5D40CF30F71728D13ED1EDA1B87700FA2696DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/AS28598.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.104.0/22
45.165.228.0/22
45.172.124.0/22
45.179.224.0/22
45.229.212.0/22
138.59.228.0/22
138.122.80.0/22
167.250.136.0/22
170.78.4.0/22
170.81.4.0/22
177.104.112.0/20
177.190.208.0/22
187.94.8.0/22
187.110.224.0/20
187.120.48.0/20
191.52.224.0/20
201.20.64.0/18
201.148.120.0/22
IPv6:
2804:248::/32
Signature Algorithm: sha256WithRSAEncryption
52:a8:b7:88:f4:dd:a3:da:49:fe:28:5e:be:75:48:b9:1d:7a:
13:82:6c:34:10:6d:53:16:41:bb:f8:10:08:9b:c7:10:da:ce:
e2:c7:c7:c6:7c:4b:4c:67:f4:87:27:50:f4:c9:d5:5b:95:5e:
bd:20:e4:17:c9:1b:4d:8c:0d:08:55:a7:4d:3a:90:7b:84:06:
db:52:45:a4:9b:c6:28:13:25:d3:d2:ed:9a:a8:74:c4:ee:98:
fe:b3:b2:2d:a4:54:73:c1:ab:61:41:c9:66:d4:38:16:78:2e:
56:a7:ac:9f:c7:ac:c0:61:e5:5c:fb:5d:d1:cc:59:12:42:ec:
d5:da:a0:1e:fa:7a:fc:bb:37:2f:0e:f4:a8:99:09:92:53:26:
95:23:f2:76:58:fe:bb:c7:7d:89:a0:5f:e6:91:bb:12:26:76:
33:eb:80:59:95:02:0f:f9:c2:cd:6e:7b:ce:1e:64:cd:8e:7b:
0e:97:ba:3e:0e:7b:e8:d0:35:f5:31:f2:27:a5:54:13:11:9d:
ff:f9:69:25:dd:e5:79:2d:9b:d0:7e:04:31:3d:78:a7:0c:a8:
c0:82:61:73:c4:a4:13:89:9f:d2:d5:75:19:31:0a:d0:ae:8f:
e1:31:af:7b:fb:72:72:02:12:43:76:8b:4a:19:cf:0d:eb:0c:
4a:27:01:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org