Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/AS53059.roa
File: AS53059.roa (raw, json)
Hash identifier: /3kiw5brzMCZ7N/vCACkSqStb+PLaSmHkQ2xrm+RfQ4=
Subject key identifier: 4A:18:DD:B1:09:85:55:0E:58:F1:29:75:95:1B:3D:7B:B1:A3:66:02
Certificate issuer: /CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
Certificate serial: 7549F5EB27E1B12F4F0ABD12BDFF8285055498C2
Authority key identifier: F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/AS53059.roa
Signing time: Mon 07 Nov 2022 18:15:40 +0000
ROA not before: Mon 07 Nov 2022 18:10:40 +0000
ROA not after: Mon 06 Nov 2023 18:15:40 +0000
asID: 53059
IP address blocks: 45.4.64.0/22 maxlen: 22
45.4.64.0/24 maxlen: 24
45.4.65.0/24 maxlen: 24
45.4.66.0/24 maxlen: 24
45.4.67.0/24 maxlen: 24
138.0.100.0/22 maxlen: 22
168.228.68.0/22 maxlen: 22
177.137.192.0/20 maxlen: 20
177.137.192.0/24 maxlen: 24
177.137.193.0/24 maxlen: 24
177.137.194.0/24 maxlen: 24
177.137.195.0/24 maxlen: 24
177.137.196.0/24 maxlen: 24
177.137.197.0/24 maxlen: 24
177.137.198.0/24 maxlen: 24
177.137.199.0/24 maxlen: 24
177.137.200.0/24 maxlen: 24
177.137.201.0/24 maxlen: 24
177.137.202.0/24 maxlen: 24
177.137.203.0/24 maxlen: 24
177.137.204.0/24 maxlen: 24
177.137.205.0/24 maxlen: 24
177.137.206.0/24 maxlen: 24
177.137.207.0/24 maxlen: 24
179.96.192.0/21 maxlen: 21
179.96.240.0/20 maxlen: 20
186.193.96.0/20 maxlen: 20
186.208.208.0/21 maxlen: 24
186.235.0.0/20 maxlen: 20
186.251.112.0/22 maxlen: 22
186.251.116.0/22 maxlen: 22
187.49.192.0/20 maxlen: 20
187.86.96.0/20 maxlen: 24
187.87.112.0/20 maxlen: 20
187.108.64.0/20 maxlen: 20
187.109.176.0/20 maxlen: 20
189.45.16.0/20 maxlen: 24
200.233.80.0/20 maxlen: 24
201.148.188.0/22 maxlen: 22
2804:2140::/32 maxlen: 32
2804:2140:100c::/48 maxlen: 48
2804:2140:1016::/48 maxlen: 48
2804:2140:1020::/46 maxlen: 46
2804:2140:1801::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:49:f5:eb:27:e1:b1:2f:4f:0a:bd:12:bd:ff:82:85:05:54:98:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
Validity
Not Before: Nov 7 18:10:40 2022 GMT
Not After : Nov 6 18:15:40 2023 GMT
Subject: CN=4A18DDB10985550E58F12975951B3D7BB1A36602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d5:32:96:b3:68:2c:54:69:aa:ce:78:9d:17:
ee:97:6b:78:49:4f:f0:aa:7d:5d:91:7d:e3:39:db:
f5:36:6c:e4:f5:2b:45:a7:c7:b6:a0:6c:f0:fc:84:
c8:55:62:71:b1:55:1f:ae:09:36:aa:96:fc:ee:96:
fc:04:44:45:8e:1f:78:cf:1f:9b:25:81:b0:c0:59:
55:96:c9:a3:94:7b:e2:e8:bb:86:bc:7d:bf:fd:61:
a0:fc:c0:be:7e:ac:6f:88:b3:0e:94:ae:c8:74:2c:
eb:e2:38:6c:47:52:6d:48:19:c0:ec:b0:86:3e:f5:
2f:1b:a8:d5:b1:06:9b:30:54:4a:3a:80:d4:c2:66:
e1:98:1f:27:7f:06:29:83:fd:e6:44:bb:60:aa:77:
c1:df:e4:22:0e:63:1e:c4:b1:24:7c:20:49:49:a6:
0a:55:71:85:b1:ea:1a:e7:6b:bd:dc:4e:73:b1:bc:
4b:3e:5f:bc:be:49:34:77:82:13:8f:e7:a7:f3:36:
ba:8a:32:96:ad:d3:56:2e:69:49:75:68:0a:d5:d8:
54:75:60:11:52:b6:f9:fe:b8:0f:aa:78:de:19:35:
79:ec:02:48:d9:64:77:21:a5:3a:d6:69:74:4c:c8:
e3:7b:d7:6d:3b:bf:85:b0:29:64:4c:45:0e:93:6f:
be:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:18:DD:B1:09:85:55:0E:58:F1:29:75:95:1B:3D:7B:B1:A3:66:02
X509v3 Authority Key Identifier:
keyid:F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/AS53059.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.64.0/22
138.0.100.0/22
168.228.68.0/22
177.137.192.0/20
179.96.192.0/21
179.96.240.0/20
186.193.96.0/20
186.208.208.0/21
186.235.0.0/20
186.251.112.0/21
187.49.192.0/20
187.86.96.0/20
187.87.112.0/20
187.108.64.0/20
187.109.176.0/20
189.45.16.0/20
200.233.80.0/20
201.148.188.0/22
IPv6:
2804:2140::/32
Signature Algorithm: sha256WithRSAEncryption
3c:87:80:06:f5:36:15:42:4f:9a:ac:86:44:06:d4:2d:63:a9:
69:d1:f7:79:26:71:60:35:30:a5:b1:2b:9c:d9:fd:6e:00:45:
3a:af:dc:06:42:6a:cf:a3:2c:18:ed:8b:31:64:ad:83:c0:1a:
25:c7:91:dc:73:a0:bd:3c:f3:1e:26:7c:39:0b:57:48:9f:46:
33:13:f7:32:cf:5b:6d:97:73:06:d6:c8:6f:19:b3:4f:fd:69:
93:58:02:34:03:b3:c7:06:dc:f1:70:18:5d:3d:af:c1:0e:c7:
14:08:ae:94:24:70:b7:e2:72:f6:a0:a2:7f:cb:b5:b3:83:38:
a2:c4:a4:13:7a:a7:6d:5d:ba:76:aa:45:ba:42:6c:39:39:01:
e7:12:1a:25:b6:01:15:7c:5b:81:f0:6d:ee:f4:61:bd:70:f0:
0f:3e:ac:48:94:26:b9:e2:a9:1b:33:a8:30:16:96:46:15:96:
cf:fe:07:5a:d2:37:d5:1d:55:d1:3a:22:2e:7b:54:6e:af:92:
d3:6b:30:b1:4e:a5:5a:d3:15:32:20:05:da:e7:09:6f:9c:1a:
c9:23:dc:34:3a:f3:4e:b5:48:e7:91:3b:b2:bf:e6:ce:70:65:
13:35:e5:4c:ed:58:21:0c:09:64:20:7a:fa:a3:27:16:20:1a:
b9:65:40:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:24:56 2025 by rpki-client