Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/AS28165.roa
File: AS28165.roa (raw, json)
Hash identifier: J0yrQ2+BqV82KrTwgJdLcBgspuzsFPkH0ssSaEgAohU=
Subject key identifier: 11:54:77:4C:C8:4A:F3:10:4A:91:88:8C:3C:80:1E:E1:A2:BD:98:F5
Certificate issuer: /CN=56F7259416542F6921B4D928E40B36515D6CF377
Certificate serial: 39B7EC047839A1BB2EC4C91E86ED3611CF0FA2EF
Authority key identifier: 56:F7:25:94:16:54:2F:69:21:B4:D9:28:E4:0B:36:51:5D:6C:F3:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56F7259416542F6921B4D928E40B36515D6CF377.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/AS28165.roa
Signing time: Thu 14 Sep 2023 23:00:00 +0000
ROA not before: Thu 14 Sep 2023 22:55:00 +0000
ROA not after: Thu 12 Sep 2024 23:00:00 +0000
asID: 28165
IP address blocks: 131.255.100.0/22 maxlen: 22
131.255.100.0/23 maxlen: 23
131.255.100.0/24 maxlen: 24
131.255.101.0/24 maxlen: 24
131.255.102.0/23 maxlen: 23
131.255.102.0/24 maxlen: 24
131.255.103.0/24 maxlen: 24
138.59.148.0/22 maxlen: 22
138.59.148.0/23 maxlen: 23
138.59.148.0/24 maxlen: 24
138.59.149.0/24 maxlen: 24
138.59.150.0/24 maxlen: 24
138.59.151.0/24 maxlen: 24
138.204.92.0/22 maxlen: 22
138.204.92.0/23 maxlen: 23
138.204.92.0/24 maxlen: 24
138.204.93.0/24 maxlen: 24
138.204.94.0/23 maxlen: 23
138.204.94.0/24 maxlen: 24
138.204.95.0/24 maxlen: 24
170.81.168.0/22 maxlen: 22
170.81.168.0/23 maxlen: 24
170.81.170.0/23 maxlen: 23
170.81.170.0/24 maxlen: 24
170.81.171.0/24 maxlen: 24
177.184.192.0/20 maxlen: 20
177.184.192.0/23 maxlen: 24
177.184.194.0/23 maxlen: 24
177.184.196.0/22 maxlen: 22
177.184.196.0/24 maxlen: 24
177.184.197.0/24 maxlen: 24
177.184.198.0/24 maxlen: 24
177.184.199.0/24 maxlen: 24
177.184.200.0/22 maxlen: 22
177.184.200.0/24 maxlen: 24
177.184.201.0/24 maxlen: 24
177.184.202.0/24 maxlen: 24
177.184.203.0/24 maxlen: 24
177.184.204.0/23 maxlen: 24
177.184.206.0/23 maxlen: 24
177.222.16.0/20 maxlen: 20
177.222.16.0/21 maxlen: 21
177.222.16.0/24 maxlen: 24
177.222.17.0/24 maxlen: 24
177.222.18.0/24 maxlen: 24
177.222.19.0/24 maxlen: 24
177.222.20.0/24 maxlen: 24
177.222.21.0/24 maxlen: 24
177.222.22.0/24 maxlen: 24
177.222.23.0/24 maxlen: 24
177.222.24.0/22 maxlen: 23
177.222.28.0/22 maxlen: 22
177.222.28.0/24 maxlen: 24
177.222.29.0/24 maxlen: 24
177.222.30.0/24 maxlen: 24
177.222.31.0/24 maxlen: 24
187.62.208.0/20 maxlen: 20
187.62.208.0/21 maxlen: 21
187.62.208.0/24 maxlen: 24
187.62.209.0/24 maxlen: 24
187.62.210.0/24 maxlen: 24
187.62.211.0/24 maxlen: 24
187.62.212.0/24 maxlen: 24
187.62.213.0/24 maxlen: 24
187.62.214.0/24 maxlen: 24
187.62.215.0/24 maxlen: 24
187.62.216.0/21 maxlen: 21
187.62.216.0/24 maxlen: 24
187.62.217.0/24 maxlen: 24
187.62.218.0/24 maxlen: 24
187.62.219.0/24 maxlen: 24
187.62.220.0/24 maxlen: 24
187.62.221.0/24 maxlen: 24
187.62.222.0/24 maxlen: 24
187.62.223.0/24 maxlen: 24
191.240.144.0/20 maxlen: 20
191.240.144.0/21 maxlen: 21
191.240.144.0/24 maxlen: 24
191.240.145.0/24 maxlen: 24
191.240.146.0/24 maxlen: 24
191.240.147.0/24 maxlen: 24
191.240.148.0/24 maxlen: 24
191.240.149.0/24 maxlen: 24
191.240.150.0/24 maxlen: 24
191.240.151.0/24 maxlen: 24
191.240.152.0/22 maxlen: 22
191.240.152.0/24 maxlen: 24
191.240.153.0/24 maxlen: 24
191.240.154.0/24 maxlen: 24
191.240.155.0/24 maxlen: 24
191.240.156.0/23 maxlen: 23
191.240.156.0/24 maxlen: 24
191.240.157.0/24 maxlen: 24
191.240.158.0/23 maxlen: 24
200.229.224.0/20 maxlen: 20
200.229.224.0/22 maxlen: 23
200.229.228.0/22 maxlen: 22
200.229.228.0/24 maxlen: 24
200.229.229.0/24 maxlen: 24
200.229.230.0/24 maxlen: 24
200.229.231.0/24 maxlen: 24
200.229.232.0/21 maxlen: 21
200.229.232.0/24 maxlen: 24
200.229.233.0/24 maxlen: 24
200.229.234.0/24 maxlen: 24
200.229.235.0/24 maxlen: 24
200.229.236.0/24 maxlen: 24
200.229.237.0/24 maxlen: 24
200.229.238.0/24 maxlen: 24
200.229.239.0/24 maxlen: 24
2804:340::/32 maxlen: 32
2804:340:2000::/36 maxlen: 36
2804:340:3000::/36 maxlen: 36
2804:340:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:b7:ec:04:78:39:a1:bb:2e:c4:c9:1e:86:ed:36:11:cf:0f:a2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56F7259416542F6921B4D928E40B36515D6CF377
Validity
Not Before: Sep 14 22:55:00 2023 GMT
Not After : Sep 12 23:00:00 2024 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:17:ef:ed:ac:66:c7:66:e2:7d:b8:f9:01:a8:
6f:03:5d:6c:39:26:b9:86:56:0a:74:c1:a3:5d:f6:
3b:2e:4a:58:ac:0c:fd:df:5c:51:81:6d:95:bd:8f:
f7:9f:3f:d5:2c:d5:82:9c:a7:b0:11:dd:9b:6f:44:
d2:b9:99:02:48:81:40:49:2a:cb:ae:3f:c5:1c:89:
d6:05:51:1c:d2:25:15:26:86:f2:5c:c7:f3:e2:6a:
06:38:00:d4:a3:33:7d:6b:72:7d:b8:f5:e6:b3:87:
6f:3c:9a:c7:86:47:7f:12:08:0d:56:a7:86:cb:74:
a0:73:a3:52:5b:07:82:8a:42:cd:94:b6:18:62:eb:
3e:e1:db:80:a6:1d:b9:45:40:9f:ef:d5:c8:86:10:
f5:7d:22:c8:28:d0:f4:b0:92:f8:8d:71:15:13:89:
c5:1b:cb:80:9d:fc:4c:c3:63:57:84:f0:81:20:ee:
e9:e5:37:38:5e:47:c4:72:1b:0c:36:28:3d:c7:6f:
db:1d:0d:32:2d:f7:94:4d:ae:ed:25:61:99:2c:39:
61:84:4e:a0:74:f1:0e:a2:69:c0:36:af:ab:48:21:
f5:e2:a0:4d:44:26:49:e2:df:2b:a5:0f:ce:b6:77:
19:5f:b6:51:09:08:7a:59:55:f4:d6:80:e1:09:d9:
0c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:54:77:4C:C8:4A:F3:10:4A:91:88:8C:3C:80:1E:E1:A2:BD:98:F5
X509v3 Authority Key Identifier:
keyid:56:F7:25:94:16:54:2F:69:21:B4:D9:28:E4:0B:36:51:5D:6C:F3:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/56F7259416542F6921B4D928E40B36515D6CF377.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56F7259416542F6921B4D928E40B36515D6CF377.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/AS28165.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.100.0/22
138.59.148.0/22
138.204.92.0/22
170.81.168.0/22
177.184.192.0/20
177.222.16.0/20
187.62.208.0/20
191.240.144.0/20
200.229.224.0/20
IPv6:
2804:340::/32
Signature Algorithm: sha256WithRSAEncryption
30:cf:db:c1:2a:81:49:1d:5a:2f:b9:76:68:fc:2b:72:13:9c:
d9:be:20:81:69:71:c4:8a:7d:9c:88:b5:9a:7b:da:5d:fa:8f:
d9:38:2f:df:82:4b:54:c0:e4:60:65:cf:f9:25:8e:12:b4:6d:
e1:97:f7:42:4f:df:0f:3e:26:a6:db:b1:6b:aa:17:a5:ae:92:
be:95:fb:b1:ef:9e:98:20:e0:ed:98:08:73:30:8a:d2:0d:0b:
88:4f:ef:30:88:11:d8:70:6d:2b:99:83:25:4e:c2:67:da:f1:
9b:a5:94:1f:67:36:52:3d:33:f7:48:10:4f:38:28:91:39:52:
9a:95:b1:ac:7d:3d:8f:82:07:42:39:34:46:e0:51:f2:ab:f8:
ae:ea:82:69:95:9c:1d:ba:7b:fa:45:dc:ae:14:dd:77:98:2a:
81:7a:85:29:ca:81:9d:a0:b4:b5:c1:a7:d1:7a:45:83:bf:72:
8c:46:d3:32:a9:46:67:7c:f3:a9:0a:33:5f:58:e9:b9:c6:7c:
3d:97:88:cc:1e:a1:0c:ce:89:4b:2d:2f:b7:61:5c:9c:cb:8d:
24:dc:8d:5e:8c:bf:c1:18:c1:e3:b5:06:46:89:ca:38:42:13:
a6:a5:dd:b0:69:36:22:c7:df:af:a5:eb:e8:26:42:71:0a:ba:
e9:d7:a9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:36:22 2025 by rpki-client