Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3133312e37322e3231382e302f32342d3234203d3e20323632333532.roa
File: 3133312e37322e3231382e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier: 9RcG9pB7978IR87J3lLvLYocVf4PI+IimDHIXPhFy/g=
Subject key identifier: F0:EA:5E:04:8F:28:F2:CA:3B:F8:2F:9B:FC:F5:B2:0E:A5:10:24:CF
Certificate issuer: /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial: 301DB6F821D28764454F2DB25B4EDB133EB6054A
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access: rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3133312e37322e3231382e302f32342d3234203d3e20323632333532.roa
Signing time: Thu 06 Mar 2025 15:41:20 +0000
ROA not before: Thu 06 Mar 2025 15:36:20 +0000
ROA not after: Thu 05 Mar 2026 15:41:20 +0000
asID: 262352
IP address blocks: 131.72.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 04:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:1d:b6:f8:21:d2:87:64:45:4f:2d:b2:5b:4e:db:13:3e:b6:05:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Validity
Not Before: Mar 6 15:36:20 2025 GMT
Not After : Mar 5 15:41:20 2026 GMT
Subject: CN=F0EA5E048F28F2CA3BF82F9BFCF5B20EA51024CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:25:1f:9a:be:4d:cc:b7:b4:de:1b:b4:51:
53:cf:91:89:37:40:3b:fe:aa:f0:13:f3:7e:e1:dc:
ff:2e:c8:1f:25:f6:ac:c4:77:ea:34:0c:4f:ad:82:
61:58:6f:05:14:a6:c5:af:2f:8a:4a:88:11:93:f5:
85:1e:b6:38:82:a7:3d:1b:bb:1e:eb:55:e2:8c:1a:
c9:27:ae:3b:f2:d3:83:aa:37:71:7a:39:e9:5a:a8:
9d:ab:35:24:a5:0e:28:16:b8:bd:a2:13:e1:35:4f:
1b:8a:57:74:eb:7e:d6:6c:e4:e7:07:5a:08:09:5e:
a5:14:7b:67:88:41:11:97:c3:c1:45:45:a5:8e:96:
5d:78:fd:47:67:43:71:39:3d:e8:03:f3:7f:ca:ee:
25:8e:8a:27:69:2e:fa:b8:46:e5:60:12:97:cd:b7:
2e:d8:89:5a:4c:39:90:02:15:c7:63:51:53:87:72:
f7:44:2f:40:01:70:3c:78:da:d2:2d:9e:8b:ce:bd:
31:f3:13:63:60:93:de:1f:1c:99:a6:36:6b:e9:a5:
47:4b:f6:7f:99:4a:72:ee:dd:a6:64:16:b1:54:a0:
c4:9e:e8:f8:f0:91:b2:94:4f:51:0a:c7:b4:b0:d9:
44:44:72:2c:1c:e8:9c:83:fe:c1:6f:80:35:cf:60:
6b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EA:5E:04:8F:28:F2:CA:3B:F8:2F:9B:FC:F5:B2:0E:A5:10:24:CF
X509v3 Authority Key Identifier:
keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3133312e37322e3231382e302f32342d3234203d3e20323632333532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.218.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ee:c4:2b:61:fd:6f:6d:d8:c0:c0:86:3e:a7:fd:de:91:f8:
d9:10:fb:b3:6c:ea:70:8b:9c:ab:19:cb:b9:7b:b8:75:e3:7c:
04:2f:20:06:ab:71:8e:47:02:4d:c5:75:1c:2d:df:7f:3e:49:
15:0f:c2:27:1f:d2:ae:9e:75:87:24:b1:e3:00:bc:16:ca:fa:
ff:68:c5:c4:30:ed:29:21:67:26:5a:91:c4:f8:e7:1a:17:91:
77:cc:3e:86:fe:72:93:cd:06:ff:12:56:22:36:00:ba:15:11:
ed:28:ee:c3:73:b6:50:1f:f8:97:c6:3e:5c:cb:03:3f:19:30:
1c:a0:9f:b5:69:c5:a3:75:91:fb:87:fc:e3:90:71:a0:14:d3:
07:ab:cc:0f:86:02:66:6d:28:fe:90:6f:20:ab:c1:14:9b:e7:
28:28:c5:7b:18:50:3b:a9:8a:10:9d:ad:fe:41:d7:2c:d0:66:
84:3d:ad:2e:90:c9:4a:a3:75:09:3a:20:b1:a4:a5:d1:9e:f5:
40:d0:07:97:e1:d3:b4:6f:e2:67:6e:7f:c2:b1:3c:93:22:a1:
b9:c4:ad:e7:23:a9:1e:26:86:a1:44:7e:f4:a3:cf:e0:14:d5:
38:a4:af:93:98:a3:f7:0a:16:1f:64:64:86:46:bf:6c:2f:40:
37:e4:ab:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 17:50:22 2025 by rpki-client