Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/AS28220.roa
File: AS28220.roa (raw, json)
Hash identifier: W9YJxAHBavK8QhEv0HZAQy8rnkkrssFEG4Vn3hKZ6U4=
Subject key identifier: 2E:4D:29:05:BA:12:CA:88:7B:D5:79:D0:99:5F:87:22:D2:14:54:DF
Certificate issuer: /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial: 5D94F4699B91816C428F87CA0B26DF464599ADFC
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/AS28220.roa
Signing time: Fri 09 May 2025 13:41:18 +0000
ROA not before: Fri 09 May 2025 13:36:18 +0000
ROA not after: Fri 08 May 2026 13:41:18 +0000
asID: 28220
IP address blocks: 138.255.216.0/22 maxlen: 24
168.121.148.0/22 maxlen: 24
170.82.132.0/22 maxlen: 24
177.8.48.0/21 maxlen: 24
177.55.48.0/20 maxlen: 24
2804:fec::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:94:f4:69:9b:91:81:6c:42:8f:87:ca:0b:26:df:46:45:99:ad:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Validity
Not Before: May 9 13:36:18 2025 GMT
Not After : May 8 13:41:18 2026 GMT
Subject: CN=2E4D2905BA12CA887BD579D0995F8722D21454DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e6:e5:83:30:93:0f:1a:96:98:56:db:04:b9:
78:35:01:fd:8b:06:10:35:77:5e:9e:b1:c2:67:22:
c5:20:4e:78:36:dc:cb:0b:4d:22:85:08:05:44:a7:
47:85:d9:be:c3:5c:00:d0:ba:d0:a5:25:1b:57:76:
0a:1a:8c:cd:ae:b0:21:b9:dc:3a:18:e3:8d:27:83:
68:76:38:95:22:a7:c9:4b:af:9b:2a:3b:75:b8:fe:
3f:92:0c:96:68:91:20:3f:be:97:73:04:4c:7c:47:
a2:6d:e3:c6:30:c2:37:77:83:77:eb:29:c7:c9:da:
1c:02:a7:4b:8e:b4:73:07:09:0f:1b:4e:b7:75:b3:
ba:da:3e:8c:66:55:12:03:67:db:a9:18:ef:b0:e8:
9d:dd:25:83:88:e2:2f:8b:3c:ee:05:f7:0b:34:5a:
0e:aa:4d:ab:ed:94:97:d7:52:f6:6a:2a:df:be:75:
6c:12:57:79:ca:4a:fd:fd:62:01:eb:7a:46:93:48:
2c:84:be:b0:e1:2d:89:b4:d6:11:53:f4:7d:df:d9:
93:54:65:5f:27:2b:35:18:e6:b1:44:87:36:9f:f9:
35:a4:89:81:3b:a6:ef:a7:88:14:42:8d:0f:dd:52:
51:bc:45:a3:e2:a1:47:f7:e8:c7:f3:af:2e:fe:d8:
88:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4D:29:05:BA:12:CA:88:7B:D5:79:D0:99:5F:87:22:D2:14:54:DF
X509v3 Authority Key Identifier:
keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/AS28220.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.216.0/22
168.121.148.0/22
170.82.132.0/22
177.8.48.0/21
177.55.48.0/20
IPv6:
2804:fec::/32
Signature Algorithm: sha256WithRSAEncryption
91:94:15:1a:1d:d5:5f:7a:e4:b3:75:61:b8:d5:81:3c:9a:b1:
7a:3d:c2:f4:2f:17:2c:15:cb:2c:fb:15:df:90:2c:9c:9d:c8:
62:ae:c2:4a:32:0a:a2:3a:d3:ed:37:98:1b:32:c7:e8:02:f5:
63:50:cf:fc:af:e1:68:5c:7c:7f:73:a6:9d:8f:f0:77:23:02:
23:9f:cf:ed:c3:ce:0c:fd:9c:bc:a9:dd:32:e4:a7:5c:61:44:
75:4b:2a:54:99:21:29:7d:ce:01:97:49:aa:fb:4c:64:9d:9a:
34:07:d5:a8:c0:6d:37:ed:d8:42:b0:2b:09:91:e2:c2:a8:36:
5d:5a:70:1c:72:e8:9a:c0:19:cf:ec:dc:b0:1e:4d:9e:cf:f0:
58:30:24:5b:71:86:d9:44:a1:5a:89:11:12:c0:74:07:56:c1:
88:f5:2f:64:4b:28:14:9d:5f:05:64:d0:35:6f:dd:43:d5:9a:
d9:89:0c:8b:87:3a:7d:57:26:83:16:d9:3e:04:73:4a:6d:cc:
b7:16:62:bd:66:f9:4f:06:60:fc:49:39:41:69:7f:db:3d:7a:
88:59:77:da:05:6b:6b:83:08:24:22:38:7f:a6:f8:54:cb:00:
ff:ae:a8:64:8e:a1:e6:b4:86:2b:ed:79:12:22:19:2e:71:13:
99:f4:bc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:43:40 2025 by rpki-client