Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/AS61832.roa
File: AS61832.roa (raw, json)
Hash identifier: UtzBhnBGxkhO4+Apu2YRS3sgs5a+Mwkxkun6cEVMT5w=
Subject key identifier: 65:6C:A5:5C:E7:2B:8F:10:B8:9E:EC:32:81:4E:EB:F5:0E:88:FA:E6
Certificate issuer: /CN=988E922E2EBFFBA80468C170F0B053C90FD160E4
Certificate serial: 23B6B3D25DDA0450FC8DAA3614E98EB9B46BE71A
Authority key identifier: 98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/AS61832.roa
Signing time: Fri 13 Dec 2024 20:45:51 +0000
ROA not before: Fri 13 Dec 2024 20:40:51 +0000
ROA not after: Fri 12 Dec 2025 20:45:51 +0000
asID: 61832
IP address blocks: 45.236.68.0/22 maxlen: 24
170.81.192.0/22 maxlen: 22
170.81.192.0/23 maxlen: 23
170.81.192.0/24 maxlen: 24
170.81.193.0/24 maxlen: 24
170.81.194.0/24 maxlen: 24
170.81.195.0/24 maxlen: 24
177.66.120.0/22 maxlen: 22
177.66.120.0/23 maxlen: 23
177.66.122.0/23 maxlen: 23
177.72.0.0/21 maxlen: 21
177.72.0.0/22 maxlen: 22
177.72.4.0/22 maxlen: 22
187.60.240.0/20 maxlen: 20
187.60.240.0/21 maxlen: 21
187.60.248.0/21 maxlen: 21
187.84.64.0/20 maxlen: 24
191.6.8.0/21 maxlen: 21
191.6.8.0/22 maxlen: 22
191.6.12.0/22 maxlen: 22
201.148.100.0/22 maxlen: 24
2804:1a04::/32 maxlen: 32
2804:1a04:9::/48 maxlen: 48
2804:1a04:a::/48 maxlen: 48
2804:1a04:1b::/48 maxlen: 48
2804:1a04:1c::/48 maxlen: 48
2804:1a04:1d::/48 maxlen: 48
2804:1a04:1e::/48 maxlen: 48
2804:1a04:1f::/48 maxlen: 48
2804:1a04:20::/48 maxlen: 48
2804:1a04:21::/48 maxlen: 48
2804:1a04:22::/48 maxlen: 48
2804:1a04:24::/48 maxlen: 48
2804:1a04:2c::/48 maxlen: 48
2804:1a04:2d::/48 maxlen: 48
2804:1a04:2e::/48 maxlen: 48
2804:1a04:80::/48 maxlen: 48
2804:1a04:81::/48 maxlen: 48
2804:1a04:85::/48 maxlen: 48
2804:1a04:87::/48 maxlen: 48
2804:1a04:88::/48 maxlen: 48
2804:1a04:89::/48 maxlen: 48
2804:1a04:8a::/48 maxlen: 48
2804:1a04:8b::/48 maxlen: 48
2804:1a04:180::/48 maxlen: 48
2804:1a04:181::/48 maxlen: 48
2804:1a04:400::/48 maxlen: 48
2804:1a04:4000::/34 maxlen: 34
2804:1a04:8800::/39 maxlen: 39
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:b6:b3:d2:5d:da:04:50:fc:8d:aa:36:14:e9:8e:b9:b4:6b:e7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988E922E2EBFFBA80468C170F0B053C90FD160E4
Validity
Not Before: Dec 13 20:40:51 2024 GMT
Not After : Dec 12 20:45:51 2025 GMT
Subject: CN=656CA55CE72B8F10B89EEC32814EEBF50E88FAE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:50:ab:5c:b7:c9:a1:8c:af:ba:02:83:ae:
0a:db:a1:55:ca:21:de:43:2c:43:14:14:b3:a1:a5:
05:89:72:c0:90:1c:08:1a:ba:c2:25:a0:9a:f4:54:
59:1a:76:f2:aa:30:79:c0:e0:04:c1:5a:15:b4:6a:
f6:f1:28:b0:0c:68:d3:97:e4:04:1d:f8:3f:af:a0:
30:f1:65:98:22:73:8d:86:93:f1:b6:47:34:cc:a8:
f2:4a:51:e6:01:5c:55:d7:c9:e3:9d:27:a8:bc:62:
53:87:44:91:4c:06:4c:fb:5f:70:56:72:61:f7:7c:
a1:20:9f:df:07:04:82:f9:76:b1:f1:d8:f3:77:ce:
44:6a:98:11:44:f5:1f:23:7f:e0:fb:98:91:f8:1c:
13:ce:cf:41:90:8c:c1:75:50:2f:de:67:37:50:42:
1a:bf:ba:ed:38:20:42:e7:0d:6d:10:89:a4:65:ec:
16:d9:80:41:dc:8c:00:d8:34:b9:22:c5:17:bf:ac:
e9:18:fa:7d:12:9a:63:17:e5:cc:72:87:e2:69:a3:
7d:24:b9:45:e7:20:f5:d6:d9:95:2d:d2:eb:0c:4b:
00:be:a2:61:b4:a5:7e:25:89:43:61:c4:3a:e6:a9:
4a:6a:56:f4:35:87:c6:32:12:a2:db:78:73:dd:2c:
75:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6C:A5:5C:E7:2B:8F:10:B8:9E:EC:32:81:4E:EB:F5:0E:88:FA:E6
X509v3 Authority Key Identifier:
keyid:98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/AS61832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.68.0/22
170.81.192.0/22
177.66.120.0/22
177.72.0.0/21
187.60.240.0/20
187.84.64.0/20
191.6.8.0/21
201.148.100.0/22
IPv6:
2804:1a04::/32
Signature Algorithm: sha256WithRSAEncryption
65:df:75:32:ed:1b:06:dc:30:36:ac:8e:c5:a3:3f:d4:5e:83:
2a:31:e2:84:1a:b7:b6:9f:93:a5:a0:ec:69:2d:e6:a1:47:53:
98:e0:a2:07:70:79:c2:25:81:26:0a:93:24:23:b7:b2:83:a0:
bc:e9:62:6c:75:50:b4:df:8f:49:2c:dd:70:bf:f1:ad:8c:e7:
3c:45:90:b4:d0:21:b9:f8:70:3f:78:c5:13:7b:cb:e1:da:1d:
11:86:41:35:7e:a3:49:6f:ce:03:ce:60:ab:86:7e:b7:28:97:
0b:97:9a:5c:56:bc:14:2c:2d:50:2b:ef:38:e0:80:ca:03:d0:
49:32:45:63:76:1c:f0:f4:e2:35:b4:72:e0:04:39:45:31:26:
85:da:1d:48:c8:bd:96:cc:f0:bf:05:48:bf:b8:4a:f2:32:87:
1d:9b:53:ab:80:17:44:49:54:89:6b:ab:dc:c2:f9:d7:c1:e8:
f6:aa:83:09:a8:dd:2c:df:3d:5d:68:b6:4b:9b:93:63:c1:f2:
4f:ba:ef:55:2f:af:7b:8f:34:ed:1a:79:0a:f1:31:fc:1b:8d:
c3:e6:72:59:b1:ea:7b:d3:ae:b3:8a:c4:ba:79:41:8e:c6:5e:
e7:77:98:f5:20:d2:8c:e9:ed:4b:60:8e:d2:f7:9f:79:e2:20:
f9:3c:6b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:27:05 2025 by rpki-client