Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130362e302f32332d3233203d3e20323632333532.roa
File: 3137302e3234362e3130362e302f32332d3233203d3e20323632333532.roa (raw, json)
Hash identifier: 3u3f16Gln4KfJc3x6IkQfIFrPD4r7haJIM3HKih/o10=
Subject key identifier: 70:FC:22:9D:CA:5F:4B:38:C3:9A:D5:30:F1:3F:79:B7:23:67:CB:29
Certificate issuer: /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial: 72DF676009CA14449E94E0BC7FC04A1E7930EB01
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access: rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130362e302f32332d3233203d3e20323632333532.roa
Signing time: Thu 06 Mar 2025 15:41:20 +0000
ROA not before: Thu 06 Mar 2025 15:36:20 +0000
ROA not after: Thu 05 Mar 2026 15:41:20 +0000
asID: 262352
IP address blocks: 170.246.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 04:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:df:67:60:09:ca:14:44:9e:94:e0:bc:7f:c0:4a:1e:79:30:eb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Validity
Not Before: Mar 6 15:36:20 2025 GMT
Not After : Mar 5 15:41:20 2026 GMT
Subject: CN=70FC229DCA5F4B38C39AD530F13F79B72367CB29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6a:1a:4b:e3:24:b8:c5:7d:1e:7a:35:c9:b2:
32:aa:b9:18:0e:83:c5:c5:66:1b:8d:f7:e5:93:03:
54:12:83:5b:f8:0f:21:59:14:a2:50:6f:4a:e4:81:
95:c6:ab:66:5e:50:eb:ee:37:eb:ce:c1:99:2d:7a:
69:53:19:11:fd:ed:f2:64:5a:d6:95:2c:a4:cd:df:
ba:0b:b5:c9:4b:5b:ec:2c:25:ba:41:90:70:5d:02:
61:29:66:f9:13:dc:b5:57:fd:62:fa:e1:78:98:76:
f2:cb:42:27:95:79:23:e4:7b:78:28:5e:cb:f4:cf:
e4:e3:42:0d:6d:ce:ac:51:c7:01:cb:bb:eb:9f:4b:
fe:59:88:c8:de:37:7e:a9:f8:4f:bc:ac:db:d5:c3:
c7:02:28:c1:68:2e:a6:8c:e3:cf:9b:bd:a7:cc:af:
1b:a5:87:9a:85:53:80:e6:60:b7:01:9a:3f:3e:80:
d5:fa:d2:03:26:8a:c0:83:19:95:2a:fb:a1:5f:90:
7b:cd:8d:3d:e3:5c:67:e6:b1:ec:3a:4e:4a:23:30:
9e:cb:12:72:e2:ca:4f:9b:1f:9a:ae:71:44:bf:54:
d0:93:2c:60:d2:90:f8:17:12:36:0b:73:46:86:e2:
79:a9:55:27:38:03:9a:69:e2:0a:df:75:5d:f2:8e:
40:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FC:22:9D:CA:5F:4B:38:C3:9A:D5:30:F1:3F:79:B7:23:67:CB:29
X509v3 Authority Key Identifier:
keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130362e302f32332d3233203d3e20323632333532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.106.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:a8:bc:ce:6a:ce:be:99:94:dc:c1:0a:28:18:5c:c5:34:c5:
80:f3:37:6c:57:89:01:c9:58:c8:48:f3:b9:d8:8e:80:87:00:
c4:4f:9c:f5:c2:90:2a:c0:31:1c:99:55:b0:c9:cc:2b:de:f4:
8e:ce:d8:bf:3d:34:2b:ae:b0:19:cc:04:c6:0d:b7:69:77:06:
17:49:20:a8:7d:44:d1:1b:6e:98:a3:47:b1:0d:60:e4:d2:b2:
00:62:88:95:82:0a:0e:a3:ba:6b:4c:e8:a4:04:28:47:bb:8f:
31:66:5c:84:de:a6:ae:62:dd:37:de:b1:ad:76:54:f6:41:e3:
d8:5b:02:0e:fa:00:b6:b6:1c:f2:93:9c:b2:2c:31:3b:b6:14:
91:fd:39:8d:8c:e3:14:1b:88:02:fb:1a:04:37:f9:0b:b6:52:
a9:a8:99:ba:34:0b:bd:1e:a0:de:a2:cb:17:c7:a9:af:77:2d:
0b:be:c2:e0:ba:e4:5a:ae:5b:e4:8f:e4:75:89:53:74:34:a1:
bb:01:34:21:d6:7f:9b:6a:e8:fa:26:e6:72:40:e3:e2:52:ed:
30:c5:c0:91:29:98:95:66:55:61:60:b8:c3:d2:b3:dd:a9:d0:
e5:7e:9e:63:e6:2f:7d:af:e9:af:fa:8c:d9:ed:fa:0c:16:bd:
42:be:c7:42
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUct9nYAnKFESelOC8f8BKHnkw6wEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkND
REJBM0U5NzAeFw0yNTAzMDYxNTM2MjBaFw0yNjAzMDUxNTQxMjBaMDMxMTAvBgNV
BAMTKDcwRkMyMjlEQ0E1RjRCMzhDMzlBRDUzMEYxM0Y3OUI3MjM2N0NCMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZahpL4yS4xX0eejXJsjKquRgO
g8XFZhuN9+WTA1QSg1v4DyFZFKJQb0rkgZXGq2ZeUOvuN+vOwZktemlTGRH97fJk
WtaVLKTN37oLtclLW+wsJbpBkHBdAmEpZvkT3LVX/WL64XiYdvLLQieVeSPke3go
Xsv0z+TjQg1tzqxRxwHLu+ufS/5ZiMjeN36p+E+8rNvVw8cCKMFoLqaM48+bvafM
rxulh5qFU4DmYLcBmj8+gNX60gMmisCDGZUq+6FfkHvNjT3jXGfmsew6TkojMJ7L
EnLiyk+bH5qucUS/VNCTLGDSkPgXEjYLc0aG4nmpVSc4A5pp4grfdV3yjkALAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUcPwincpfSzjDmtUw8T95tyNnyykwHwYDVR0j
BBgwFoAUgXDECFogzWqkUfvKwsuPLM26PpcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xbjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1
LzUvODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkNDREJBM0U5Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MTcwQzQwODVBMjBDRDZBQTQ1
MUZCQ0FDMkNCOEYyQ0NEQkEzRTk3LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
bjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1LzUvMzEz
NzMwMmUzMjM0MzYyZTMxMzAzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYz
MjMzMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAar2ajANBgkqhkiG9w0BAQsFAAOCAQEALqi8zmrO
vpmU3MEKKBhcxTTFgPM3bFeJAclYyEjzudiOgIcAxE+c9cKQKsAxHJlVsMnMK970
js7Yvz00K66wGcwExg23aXcGF0kgqH1E0RtumKNHsQ1g5NKyAGKIlYIKDqO6a0zo
pAQoR7uPMWZchN6mrmLdN96xrXZU9kHj2FsCDvoAtrYc8pOcsiwxO7YUkf05jYzj
FBuIAvsaBDf5C7ZSqaiZujQLvR6g3qLLF8epr3ctC77C4LrkWq5b5I/kdYlTdDSh
uwE0IdZ/m2ro+ibmckDj4lLtMMXAkSmYlWZVYWC4w9Kz3anQ5X6eY+Yvfa/pr/qM
2e36DBa9Qr7HQg==
-----END CERTIFICATE-----
Generated at Sun Apr 13 16:43:02 2025 by rpki-client