Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS28220.roa
File: AS28220.roa (raw, json)
Hash identifier: ujhpb24lf9+lAf2QnaZoKY7Ldv3xtXq79Xqej7Dt5B4=
Subject key identifier: EB:0A:8F:54:A5:7E:F7:8F:50:8D:1C:A7:10:AF:B4:16:A9:A7:76:BB
Certificate issuer: /CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
Certificate serial: 2C94C784E3017A3107CCD667F46FD48EEB0D6978
Authority key identifier: BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS28220.roa
Signing time: Tue 15 Sep 2026 19:57:16 +0000
ROA not before: Tue 15 Sep 2026 19:52:16 +0000
ROA not after: Tue 14 Sep 2027 19:57:16 +0000
asID: 28220
IP address blocks: 45.4.64.0/22 maxlen: 24
45.165.20.0/22 maxlen: 24
45.175.188.0/22 maxlen: 24
45.227.188.0/22 maxlen: 24
45.232.88.0/22 maxlen: 24
45.238.116.0/22 maxlen: 24
131.108.228.0/22 maxlen: 24
131.161.108.0/22 maxlen: 24
131.196.76.0/22 maxlen: 24
131.221.68.0/22 maxlen: 24
131.255.156.0/22 maxlen: 24
138.0.100.0/22 maxlen: 24
138.117.124.0/22 maxlen: 24
138.121.220.0/22 maxlen: 24
138.122.236.0/22 maxlen: 24
138.255.172.0/22 maxlen: 24
138.255.216.0/22 maxlen: 24
143.255.112.0/22 maxlen: 24
160.238.220.0/22 maxlen: 24
168.121.52.0/22 maxlen: 24
168.121.148.0/22 maxlen: 24
168.196.20.0/22 maxlen: 24
168.227.44.0/22 maxlen: 24
168.227.108.0/22 maxlen: 24
168.228.68.0/22 maxlen: 24
168.228.128.0/22 maxlen: 24
168.232.116.0/22 maxlen: 24
170.0.204.0/22 maxlen: 24
170.82.92.0/22 maxlen: 24
170.82.132.0/22 maxlen: 24
170.150.112.0/22 maxlen: 24
170.150.204.0/22 maxlen: 24
170.245.100.0/22 maxlen: 24
170.246.68.0/22 maxlen: 24
170.247.52.0/22 maxlen: 24
170.247.236.0/22 maxlen: 24
177.8.48.0/21 maxlen: 24
177.53.128.0/21 maxlen: 24
177.55.48.0/20 maxlen: 24
177.66.64.0/21 maxlen: 24
177.67.0.0/21 maxlen: 24
177.70.128.0/20 maxlen: 24
177.75.192.0/19 maxlen: 24
177.87.144.0/21 maxlen: 24
177.89.0.0/16 maxlen: 24
177.125.184.0/21 maxlen: 24
177.130.192.0/19 maxlen: 24
177.137.192.0/20 maxlen: 24
179.96.192.0/21 maxlen: 24
179.96.240.0/20 maxlen: 24
179.190.128.0/17 maxlen: 24
179.191.128.0/19 maxlen: 24
186.192.16.0/20 maxlen: 24
186.193.96.0/20 maxlen: 24
186.208.208.0/21 maxlen: 24
186.219.144.0/20 maxlen: 24
186.233.72.0/21 maxlen: 24
186.235.0.0/20 maxlen: 24
186.236.192.0/19 maxlen: 24
186.251.112.0/21 maxlen: 24
187.18.128.0/17 maxlen: 24
187.45.48.0/20 maxlen: 24
187.49.192.0/20 maxlen: 24
187.60.64.0/19 maxlen: 24
187.61.128.0/17 maxlen: 24
187.73.192.0/19 maxlen: 24
187.86.96.0/20 maxlen: 24
187.87.112.0/20 maxlen: 24
187.95.48.0/20 maxlen: 24
187.95.176.0/20 maxlen: 24
187.108.64.0/20 maxlen: 24
187.108.96.0/20 maxlen: 24
187.109.176.0/20 maxlen: 24
187.110.208.0/20 maxlen: 24
187.111.224.0/19 maxlen: 24
189.45.16.0/20 maxlen: 24
189.45.64.0/18 maxlen: 24
189.50.144.0/20 maxlen: 24
189.124.128.0/17 maxlen: 24
191.6.80.0/21 maxlen: 24
191.37.144.0/21 maxlen: 24
191.241.32.0/21 maxlen: 24
191.241.40.0/21 maxlen: 24
192.141.196.0/22 maxlen: 24
200.9.160.0/22 maxlen: 24
200.94.240.0/22 maxlen: 24
200.233.80.0/20 maxlen: 24
201.55.196.0/22 maxlen: 24
201.148.188.0/22 maxlen: 24
201.149.120.0/22 maxlen: 24
201.158.40.0/21 maxlen: 24
2804:54::/32 maxlen: 48
2804:880::/32 maxlen: 48
2804:a3c::/32 maxlen: 48
2804:fec::/32 maxlen: 48
2804:1134::/32 maxlen: 48
2804:1d2c::/32 maxlen: 48
2804:2140::/32 maxlen: 48
2804:343c::/32 maxlen: 48
2804:47c0::/32 maxlen: 48
2804:4f60::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl
rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 11 Oct 2026 10:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:94:c7:84:e3:01:7a:31:07:cc:d6:67:f4:6f:d4:8e:eb:0d:69:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
Validity
Not Before: Sep 15 19:52:16 2026 GMT
Not After : Sep 14 19:57:16 2027 GMT
Subject: CN=EB0A8F54A57EF78F508D1CA710AFB416A9A776BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:5f:18:d6:72:cc:4e:78:4c:71:3c:67:3d:
71:3a:58:dd:99:fb:ad:c8:38:2e:d0:fe:8a:9f:9a:
36:51:35:68:17:7f:7e:ef:24:c4:ea:31:b9:e5:1f:
6e:3e:75:4d:d6:5d:c4:93:eb:32:c8:c9:5e:91:ca:
49:46:94:d9:7e:59:87:87:d1:0f:30:a0:99:f0:d0:
a9:00:e5:d6:28:96:6c:23:b2:9a:54:42:71:2b:c2:
3c:62:c2:b7:b9:ac:8d:47:78:5b:e6:a6:50:d2:74:
db:44:ae:c3:4b:0a:33:b8:35:4a:74:5f:f7:e8:ca:
20:14:5c:3e:b6:6a:03:cd:1c:b3:e3:68:31:f9:13:
48:63:46:2a:b9:8a:c2:35:61:e9:ec:3e:f5:e9:68:
3d:87:2d:ba:55:9c:ab:f6:7c:a3:60:18:9f:10:e0:
1d:bc:42:6b:50:2e:75:45:c5:ed:5d:06:cc:29:87:
32:d0:c1:73:0b:64:28:a0:e0:3d:45:7a:55:8f:fc:
00:ff:89:e2:4b:de:6d:37:d3:d4:3b:d5:c7:70:5f:
1d:da:80:87:0e:61:a1:74:2e:86:c7:9d:90:cb:88:
29:d9:2b:ba:ff:6c:39:60:94:3f:1b:a0:00:c1:26:
5a:95:1c:01:9c:d9:13:fa:7e:49:1f:86:b7:44:87:
e1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0A:8F:54:A5:7E:F7:8F:50:8D:1C:A7:10:AF:B4:16:A9:A7:76:BB
X509v3 Authority Key Identifier:
keyid:BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS28220.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.64.0/22
45.165.20.0/22
45.175.188.0/22
45.227.188.0/22
45.232.88.0/22
45.238.116.0/22
131.108.228.0/22
131.161.108.0/22
131.196.76.0/22
131.221.68.0/22
131.255.156.0/22
138.0.100.0/22
138.117.124.0/22
138.121.220.0/22
138.122.236.0/22
138.255.172.0/22
138.255.216.0/22
143.255.112.0/22
160.238.220.0/22
168.121.52.0/22
168.121.148.0/22
168.196.20.0/22
168.227.44.0/22
168.227.108.0/22
168.228.68.0/22
168.228.128.0/22
168.232.116.0/22
170.0.204.0/22
170.82.92.0/22
170.82.132.0/22
170.150.112.0/22
170.150.204.0/22
170.245.100.0/22
170.246.68.0/22
170.247.52.0/22
170.247.236.0/22
177.8.48.0/21
177.53.128.0/21
177.55.48.0/20
177.66.64.0/21
177.67.0.0/21
177.70.128.0/20
177.75.192.0/19
177.87.144.0/21
177.89.0.0/16
177.125.184.0/21
177.130.192.0/19
177.137.192.0/20
179.96.192.0/21
179.96.240.0/20
179.190.128.0/17
179.191.128.0/19
186.192.16.0/20
186.193.96.0/20
186.208.208.0/21
186.219.144.0/20
186.233.72.0/21
186.235.0.0/20
186.236.192.0/19
186.251.112.0/21
187.18.128.0/17
187.45.48.0/20
187.49.192.0/20
187.60.64.0/19
187.61.128.0/17
187.73.192.0/19
187.86.96.0/20
187.87.112.0/20
187.95.48.0/20
187.95.176.0/20
187.108.64.0/20
187.108.96.0/20
187.109.176.0/20
187.110.208.0/20
187.111.224.0/19
189.45.16.0/20
189.45.64.0/18
189.50.144.0/20
189.124.128.0/17
191.6.80.0/21
191.37.144.0/21
191.241.32.0/20
192.141.196.0/22
200.9.160.0/22
200.94.240.0/22
200.233.80.0/20
201.55.196.0/22
201.148.188.0/22
201.149.120.0/22
201.158.40.0/21
IPv6:
2804:54::/32
2804:880::/32
2804:a3c::/32
2804:fec::/32
2804:1134::/32
2804:1d2c::/32
2804:2140::/32
2804:343c::/32
2804:47c0::/32
2804:4f60::/32
Signature Algorithm: sha256WithRSAEncryption
8f:38:13:62:e6:44:06:fc:0e:59:04:50:94:0b:a5:38:2e:70:
ed:7f:e4:97:0e:b3:4a:53:e0:62:28:2a:e5:b4:04:cf:75:2b:
18:5f:6d:54:3b:89:13:06:9a:74:13:ed:d9:36:e1:96:f6:62:
a6:7e:e5:54:38:7d:eb:de:9c:3f:a3:b2:12:c5:83:f4:bb:e3:
69:e4:30:96:65:f4:93:6d:28:e5:75:3b:91:6c:fb:ec:4f:35:
91:c5:38:d2:5d:b4:ee:96:99:7f:f2:34:a8:9b:f0:e9:af:79:
ba:80:f0:b4:f7:ce:f4:6b:47:8f:42:84:af:f0:09:62:cd:03:
ee:73:17:8f:42:8f:67:b1:54:5d:ae:c6:0d:a8:82:c9:be:2d:
52:0d:c4:35:e3:76:b7:2f:27:ae:dc:c5:37:86:7e:70:7a:58:
f2:55:f0:58:bb:ac:8f:da:5b:27:c0:41:bd:b8:b6:1c:3f:dc:
29:ac:e8:7c:d6:83:6e:d8:54:35:f2:5e:8a:17:a3:7a:74:8d:
46:d8:a0:45:9c:2d:6b:59:db:a4:c6:c2:c0:a6:fb:c1:5c:2e:
94:f4:00:ef:f3:71:8a:8d:8e:1f:1a:61:c2:ed:fa:7f:8a:c3:
c3:38:6d:6d:44:e1:fb:37:43:99:2b:f9:10:92:e6:5e:0e:55:
c7:c1:f5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:45:42 2026 by rpki-client