Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/1/AS262468.roa
File: AS262468.roa (raw, json)
Hash identifier: IcDavUXnu0mdSqLyEM4ajDX9CAW5JYW76Ish8+g8Px4=
Subject key identifier: 1B:B8:21:FF:90:AD:C6:F8:AB:2F:6B:DA:F0:66:97:6C:CC:89:BD:00
Certificate issuer: /CN=43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF
Certificate serial: 69DA9A157D5682D611F27DBECB4BB6D9124D148B
Authority key identifier: 43:55:8B:0E:62:F3:AB:F2:4D:E8:8B:7F:8C:4B:D4:7D:CE:78:4B:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/1/AS262468.roa
Signing time: Mon 08 Apr 2024 15:13:30 +0000
ROA not before: Mon 08 Apr 2024 15:08:30 +0000
ROA not after: Mon 07 Apr 2025 15:13:30 +0000
asID: 262468
IP address blocks: 138.122.28.0/24 maxlen: 24
138.122.29.0/24 maxlen: 24
138.122.30.0/24 maxlen: 24
138.122.31.0/24 maxlen: 24
168.121.100.0/24 maxlen: 24
168.121.101.0/24 maxlen: 24
168.121.102.0/24 maxlen: 24
168.121.103.0/24 maxlen: 24
168.196.52.0/24 maxlen: 24
168.196.53.0/24 maxlen: 24
168.196.54.0/24 maxlen: 24
168.196.55.0/24 maxlen: 24
177.53.144.0/24 maxlen: 24
177.53.145.0/24 maxlen: 24
177.53.146.0/24 maxlen: 24
177.53.147.0/24 maxlen: 24
179.108.48.0/23 maxlen: 23
179.108.48.0/24 maxlen: 24
179.108.49.0/24 maxlen: 24
179.108.50.0/24 maxlen: 24
179.108.51.0/24 maxlen: 24
179.108.52.0/24 maxlen: 24
179.108.53.0/24 maxlen: 24
179.108.54.0/24 maxlen: 24
179.108.55.0/24 maxlen: 24
179.108.56.0/23 maxlen: 23
179.108.56.0/24 maxlen: 24
179.108.57.0/24 maxlen: 24
179.108.58.0/24 maxlen: 24
179.108.59.0/24 maxlen: 24
179.108.60.0/24 maxlen: 24
179.108.61.0/24 maxlen: 24
179.108.62.0/24 maxlen: 24
179.108.63.0/24 maxlen: 24
191.5.192.0/24 maxlen: 24
191.5.193.0/24 maxlen: 24
191.5.194.0/24 maxlen: 24
191.5.195.0/24 maxlen: 24
191.5.196.0/24 maxlen: 24
191.5.197.0/24 maxlen: 24
191.5.198.0/24 maxlen: 24
191.5.199.0/24 maxlen: 24
191.5.200.0/24 maxlen: 24
191.5.201.0/24 maxlen: 24
191.5.202.0/24 maxlen: 24
191.5.203.0/24 maxlen: 24
191.5.204.0/24 maxlen: 24
191.5.206.0/24 maxlen: 24
191.5.207.0/24 maxlen: 24
2804:e94::/44 maxlen: 44
2804:e94:10::/44 maxlen: 44
2804:e94:20::/44 maxlen: 44
2804:e94:30::/44 maxlen: 44
2804:e94:40::/44 maxlen: 44
2804:e94:50::/44 maxlen: 44
2804:e94:60::/44 maxlen: 44
2804:e94:70::/44 maxlen: 44
2804:e94:80::/44 maxlen: 44
2804:e94:a0::/44 maxlen: 44
2804:e94:b0::/44 maxlen: 44
2804:e94:c0::/44 maxlen: 44
2804:e94:d0::/44 maxlen: 44
2804:e94:e0::/44 maxlen: 44
2804:e94:f0::/44 maxlen: 44
2804:e94:120::/44 maxlen: 44
2804:e94:130::/44 maxlen: 44
2804:e94:160::/44 maxlen: 44
2804:e94:170::/44 maxlen: 44
2804:e94:180::/44 maxlen: 44
2804:e94:190::/44 maxlen: 44
2804:e94:1a0::/44 maxlen: 44
2804:e94:1b0::/44 maxlen: 44
2804:e94:1c0::/44 maxlen: 44
2804:e94:1d0::/44 maxlen: 44
2804:e94:1e0::/44 maxlen: 44
2804:e94:1f0::/44 maxlen: 44
2804:e94:210::/44 maxlen: 44
2804:e94:4c0::/42 maxlen: 42
2804:e94:500::/44 maxlen: 44
2804:e94:510::/44 maxlen: 44
2804:e94:540::/42 maxlen: 42
2804:e94:580::/42 maxlen: 42
2804:e94:640::/42 maxlen: 42
2804:e94:650::/44 maxlen: 44
2804:e94:660::/44 maxlen: 44
2804:e94:670::/44 maxlen: 44
2804:e94:680::/44 maxlen: 44
2804:e94:690::/44 maxlen: 44
2804:e94:6a0::/44 maxlen: 44
2804:e94:6b0::/44 maxlen: 44
2804:e94:6f0::/44 maxlen: 44
2804:e94:700::/44 maxlen: 44
2804:e94:710::/44 maxlen: 44
2804:e94:740::/42 maxlen: 42
2804:e94:780::/44 maxlen: 44
2804:e94:800::/40 maxlen: 40
2804:e94:900::/40 maxlen: 40
2804:e94:a00::/40 maxlen: 40
2804:e94:b00::/40 maxlen: 40
2804:e94:c00::/40 maxlen: 40
2804:e94:f10::/44 maxlen: 44
2804:e94:1000::/40 maxlen: 40
2804:e94:1000::/41 maxlen: 41
2804:e94:1410::/44 maxlen: 44
2804:e94:8000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:da:9a:15:7d:56:82:d6:11:f2:7d:be:cb:4b:b6:d9:12:4d:14:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF
Validity
Not Before: Apr 8 15:08:30 2024 GMT
Not After : Apr 7 15:13:30 2025 GMT
Subject: CN=1BB821FF90ADC6F8AB2F6BDAF066976CCC89BD00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b1:dc:03:60:2a:d4:06:ad:66:dc:3f:ee:88:
83:3e:66:3e:1c:22:f4:4f:1f:31:29:3a:c7:f6:bd:
c1:18:61:a4:f9:37:e2:b8:34:11:3c:dc:a3:51:9e:
e2:d1:07:24:48:2d:55:48:f5:6a:dd:8e:01:1f:64:
e3:9a:24:2f:18:9c:c3:bc:a8:32:4a:b3:05:2b:b8:
bc:a4:59:a4:f1:80:5f:35:29:5c:ec:13:80:90:57:
79:0c:98:38:0a:8b:a5:c4:4b:56:b6:e3:d4:e5:20:
cd:22:71:44:3e:e5:92:27:4a:b4:3b:51:c5:06:1e:
c3:de:13:d5:50:d0:2b:7d:c8:f5:e2:4f:77:48:cb:
42:68:e9:f1:0f:21:c7:48:2b:54:96:20:a0:9d:91:
5b:f8:bd:ee:24:9f:4d:a5:bd:9b:2e:67:5e:95:be:
ed:6e:e7:c3:c7:e0:55:65:22:e9:c4:e3:b9:a8:54:
e9:19:c2:a1:2d:30:bb:7e:af:df:ce:6e:db:6d:ee:
cb:ba:0f:f9:57:93:e6:0e:9b:71:e9:33:85:86:ab:
bc:d5:a3:ec:f4:c0:d5:2d:ec:8e:6d:eb:91:45:f9:
89:f4:3e:16:b2:39:63:67:5d:4b:dc:db:56:97:40:
4c:d2:16:db:94:b2:e3:89:eb:a0:1e:81:50:9e:54:
35:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B8:21:FF:90:AD:C6:F8:AB:2F:6B:DA:F0:66:97:6C:CC:89:BD:00
X509v3 Authority Key Identifier:
keyid:43:55:8B:0E:62:F3:AB:F2:4D:E8:8B:7F:8C:4B:D4:7D:CE:78:4B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/1/43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/1/AS262468.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.28.0/22
168.121.100.0/22
168.196.52.0/22
177.53.144.0/22
179.108.48.0/20
191.5.192.0-191.5.204.255
191.5.206.0/23
IPv6:
2804:e94::-2804:e94:8f:ffff:ffff:ffff:ffff:ffff
2804:e94:a0::-2804:e94:ff:ffff:ffff:ffff:ffff:ffff
2804:e94:120::/43
2804:e94:160::-2804:e94:1ff:ffff:ffff:ffff:ffff:ffff
2804:e94:210::/44
2804:e94:4c0::-2804:e94:51f:ffff:ffff:ffff:ffff:ffff
2804:e94:540::-2804:e94:5bf:ffff:ffff:ffff:ffff:ffff
2804:e94:640::-2804:e94:6bf:ffff:ffff:ffff:ffff:ffff
2804:e94:6f0::-2804:e94:71f:ffff:ffff:ffff:ffff:ffff
2804:e94:740::-2804:e94:78f:ffff:ffff:ffff:ffff:ffff
2804:e94:800::-2804:e94:cff:ffff:ffff:ffff:ffff:ffff
2804:e94:f10::/44
2804:e94:1000::/40
2804:e94:1410::/44
2804:e94:8000::/44
Signature Algorithm: sha256WithRSAEncryption
3e:6a:06:ce:d1:38:49:86:db:73:d5:cb:48:d2:7a:bc:ae:d2:
9b:f1:9e:65:f9:1c:88:78:38:e8:94:60:07:bb:69:c1:b9:da:
99:4a:1d:ec:5a:69:1e:50:5f:c2:15:b3:30:7e:84:b6:96:50:
ac:1a:14:c2:db:2c:a4:ef:d7:fb:5c:91:d2:8d:15:0b:5a:92:
12:33:ad:e5:8e:91:68:94:58:de:0f:25:a5:ae:ec:27:8a:48:
6e:81:7f:2b:aa:ee:d3:4e:cd:a3:8d:7f:4c:ee:01:de:c5:d7:
c1:11:0a:b5:89:4a:7f:8c:34:91:0f:40:58:b1:a9:61:83:8c:
92:4e:21:d5:52:85:83:4c:51:01:69:74:2c:6a:69:17:22:7d:
48:7e:04:7c:1a:d6:fd:af:b2:ce:52:a0:ab:db:5e:89:0a:e7:
1f:fa:2e:d2:0a:45:e3:8b:35:22:5a:2d:04:bd:1e:f3:63:a7:
1c:79:57:b2:b0:e8:a7:e9:0a:85:38:86:17:18:30:ea:af:02:
8b:f3:00:ad:09:e6:c5:d6:d4:cd:3b:66:43:f3:02:50:ba:75:
60:5c:eb:1d:ff:8a:dc:66:ee:2e:f6:54:58:fe:cc:ae:f3:77:
24:b8:78:4a:43:76:8f:ca:69:68:f7:49:d4:50:28:e4:07:7b:
1c:84:28:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org