Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/AS273683.roa
File: AS273683.roa (raw, json)
Hash identifier: c5Xu9chdmrxbYrOtr8ooe62hm2wYdh6zXXctd4NdxlI=
Subject key identifier: E9:E5:FA:59:1C:54:69:E5:89:E8:6C:4D:BF:D9:87:F1:C0:44:6F:6D
Certificate issuer: /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial: 49A52D5E2C1F59C4AF868FB19898EDDDA85C61BA
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/AS273683.roa
Signing time: Sat 07 Jun 2025 04:13:17 +0000
ROA not before: Sat 07 Jun 2025 04:08:17 +0000
ROA not after: Sat 06 Jun 2026 04:13:17 +0000
asID: 273683
IP address blocks: 45.4.40.0/22 maxlen: 22
45.4.40.0/23 maxlen: 23
45.4.40.0/24 maxlen: 24
45.4.41.0/24 maxlen: 24
45.4.42.0/23 maxlen: 23
45.4.42.0/24 maxlen: 24
45.4.43.0/24 maxlen: 24
45.224.196.0/22 maxlen: 24
45.232.56.0/22 maxlen: 22
45.232.56.0/23 maxlen: 23
45.232.56.0/24 maxlen: 24
45.232.57.0/24 maxlen: 24
45.232.58.0/23 maxlen: 23
45.232.58.0/24 maxlen: 24
45.232.59.0/24 maxlen: 24
45.233.196.0/22 maxlen: 24
45.235.56.0/22 maxlen: 22
45.235.56.0/24 maxlen: 24
45.235.57.0/24 maxlen: 24
45.235.58.0/24 maxlen: 24
45.235.59.0/24 maxlen: 24
45.238.48.0/22 maxlen: 24
131.100.148.0/22 maxlen: 22
131.100.148.0/23 maxlen: 23
131.100.150.0/23 maxlen: 23
138.36.28.0/22 maxlen: 22
138.36.28.0/24 maxlen: 24
138.36.29.0/24 maxlen: 24
138.36.30.0/24 maxlen: 24
138.36.31.0/24 maxlen: 24
138.94.176.0/22 maxlen: 22
138.94.176.0/24 maxlen: 24
138.94.177.0/24 maxlen: 24
138.94.178.0/24 maxlen: 24
138.94.179.0/24 maxlen: 24
167.250.12.0/22 maxlen: 22
167.250.12.0/24 maxlen: 24
167.250.13.0/24 maxlen: 24
167.250.14.0/24 maxlen: 24
167.250.15.0/24 maxlen: 24
170.79.24.0/22 maxlen: 22
170.79.24.0/24 maxlen: 24
170.79.25.0/24 maxlen: 24
170.79.26.0/24 maxlen: 24
170.79.27.0/24 maxlen: 24
170.238.52.0/22 maxlen: 24
177.53.40.0/21 maxlen: 21
177.53.160.0/22 maxlen: 22
177.53.160.0/24 maxlen: 24
177.53.161.0/24 maxlen: 24
177.53.162.0/24 maxlen: 24
177.53.163.0/24 maxlen: 24
177.66.164.0/22 maxlen: 22
177.66.164.0/24 maxlen: 24
177.66.165.0/24 maxlen: 24
177.66.166.0/24 maxlen: 24
177.66.167.0/24 maxlen: 24
187.84.176.0/20 maxlen: 20
187.84.176.0/21 maxlen: 21
187.84.184.0/21 maxlen: 21
187.121.144.0/21 maxlen: 21
187.121.144.0/22 maxlen: 22
187.121.144.0/23 maxlen: 24
187.121.146.0/23 maxlen: 24
187.121.148.0/22 maxlen: 22
187.121.148.0/23 maxlen: 24
187.121.150.0/23 maxlen: 24
189.8.120.0/22 maxlen: 22
189.8.121.0/24 maxlen: 24
190.112.148.0/22 maxlen: 22
190.112.148.0/24 maxlen: 24
190.112.149.0/24 maxlen: 24
190.112.150.0/24 maxlen: 24
201.87.240.0/20 maxlen: 20
201.87.240.0/21 maxlen: 21
201.87.240.0/22 maxlen: 22
201.87.240.0/23 maxlen: 24
201.87.242.0/23 maxlen: 24
201.87.244.0/22 maxlen: 24
201.87.248.0/21 maxlen: 21
201.87.248.0/22 maxlen: 24
201.87.252.0/22 maxlen: 24
2804:8aa4::/32 maxlen: 32
2804:8aa4::/37 maxlen: 37
2804:8aa4:800::/37 maxlen: 37
2804:8aa4:1000::/37 maxlen: 37
2804:8aa4:1800::/37 maxlen: 37
2804:8aa4:2000::/37 maxlen: 37
2804:8aa4:2800::/37 maxlen: 37
2804:8aa4:3000::/37 maxlen: 37
2804:8aa4:3800::/37 maxlen: 37
2804:8aa4:4000::/37 maxlen: 37
2804:8aa4:4800::/37 maxlen: 37
2804:8aa4:5000::/37 maxlen: 37
2804:8aa4:7800::/37 maxlen: 37
2804:8aa4:a000::/37 maxlen: 37
2804:8aa4:e000::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 09 Jun 2025 14:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:a5:2d:5e:2c:1f:59:c4:af:86:8f:b1:98:98:ed:dd:a8:5c:61:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Validity
Not Before: Jun 7 04:08:17 2025 GMT
Not After : Jun 6 04:13:17 2026 GMT
Subject: CN=E9E5FA591C5469E589E86C4DBFD987F1C0446F6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:90:22:34:9b:05:c6:03:27:fe:1f:71:47:
8b:24:9e:f7:ad:6d:c8:42:db:78:db:63:7e:9e:1c:
4d:15:46:7d:c5:71:8a:9b:81:3a:54:2c:b7:d7:cf:
d1:5b:ff:38:2f:59:d7:70:3d:c0:8a:7f:ec:be:e2:
a6:17:26:45:1c:35:39:91:23:37:a3:17:ba:0f:ea:
99:99:d4:ba:e6:94:b0:a5:c3:1c:40:0f:57:61:b7:
53:20:ef:5e:08:b0:b0:bb:78:1f:68:92:21:58:12:
ad:1e:df:3e:6a:9d:92:2c:48:05:d7:6d:82:c3:12:
8e:ea:c7:5b:9f:14:ae:7f:2b:b4:ac:1c:78:1a:1d:
ac:47:3c:f7:39:63:00:61:48:fe:13:5e:af:9b:ad:
b8:13:4c:75:0d:a6:d1:0a:67:22:65:9a:2b:a4:0d:
38:6a:92:3b:ba:5d:5a:76:ed:f1:10:0b:b5:18:60:
a2:69:27:b3:00:23:4f:1e:a4:b7:ef:aa:62:ec:ab:
b7:42:f3:3e:db:91:a4:39:f2:b3:57:9f:4e:fa:a5:
d0:92:83:e1:dc:5e:c0:e5:19:8a:e6:7f:e1:9e:ae:
a0:7f:94:8c:ad:03:14:9e:4a:e4:25:ec:72:12:2b:
09:cd:31:cf:e3:15:cf:66:20:e3:40:69:81:82:d0:
70:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E5:FA:59:1C:54:69:E5:89:E8:6C:4D:BF:D9:87:F1:C0:44:6F:6D
X509v3 Authority Key Identifier:
keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/AS273683.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.40.0/22
45.224.196.0/22
45.232.56.0/22
45.233.196.0/22
45.235.56.0/22
45.238.48.0/22
131.100.148.0/22
138.36.28.0/22
138.94.176.0/22
167.250.12.0/22
170.79.24.0/22
170.238.52.0/22
177.53.40.0/21
177.53.160.0/22
177.66.164.0/22
187.84.176.0/20
187.121.144.0/21
189.8.120.0/22
190.112.148.0/22
201.87.240.0/20
IPv6:
2804:8aa4::/32
Signature Algorithm: sha256WithRSAEncryption
7a:8e:04:ac:d5:d2:9c:5c:f2:da:cc:21:a6:72:0d:7c:ab:c4:
5b:68:e9:12:d8:10:83:24:13:cb:92:35:e4:da:ac:c4:04:71:
e8:44:9b:17:2d:70:39:33:d1:e3:aa:8a:99:4a:81:42:46:fd:
22:3a:a9:72:e1:72:7c:83:9d:87:b3:60:4b:e2:0d:b9:02:26:
39:3d:18:14:32:1c:bd:1e:87:7b:3b:d0:0e:8d:ca:d7:04:a3:
fb:11:69:0c:a5:9a:01:07:ec:bd:3e:f8:6f:1a:85:22:e4:53:
03:61:23:8e:0e:15:de:c9:4c:b8:10:f6:e1:a2:eb:bf:2c:e8:
dd:cc:e4:c1:6c:16:b3:53:05:47:3d:bc:2d:c5:af:7c:bf:21:
9a:e5:2c:65:11:15:1b:4a:ec:9e:ba:e2:7a:8d:52:ef:8e:5f:
6b:ba:6e:e0:81:d0:8b:26:e1:01:2e:c5:87:61:a7:da:f9:9c:
fd:0a:e2:eb:93:bd:0a:a8:15:a6:d1:d3:42:85:54:ab:83:d7:
a6:11:d9:9b:7b:3d:14:aa:14:77:78:95:ae:1f:d9:c8:b8:15:
d2:79:6d:0c:9f:d0:5a:b8:ae:94:4d:f3:ab:30:f7:e4:43:e9:
0c:30:75:71:26:70:93:11:e2:32:dc:51:d7:71:9d:b2:96:ce:
4f:94:e8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:11:56 2025 by rpki-client