Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/3133312e37322e34362e302f32342d3332203d3e203631373132.roa
File: 3133312e37322e34362e302f32342d3332203d3e203631373132.roa (raw, json)
Hash identifier: cF1rdr6X0W+lI2dtsKymAnxP/qSz39xyEAdndAJIuB0=
Subject key identifier: ED:BA:98:8E:EB:6D:5D:39:B3:B7:CE:DF:AF:39:B5:B2:DC:C9:BF:FE
Certificate issuer: /CN=1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4
Certificate serial: 07041F712483EC80C3CC92A25AA1EC3EC9F29FEE
Authority key identifier: 1B:4F:7D:2D:BF:96:AE:DC:02:CE:1B:01:93:F9:64:E6:26:C1:8D:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/3133312e37322e34362e302f32342d3332203d3e203631373132.roa
Signing time: Sat 01 Mar 2025 12:41:30 +0000
ROA not before: Sat 01 Mar 2025 12:36:30 +0000
ROA not after: Sat 28 Feb 2026 12:41:30 +0000
asID: 61712
IP address blocks: 131.72.46.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.crl
rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 11 Apr 2025 09:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:04:1f:71:24:83:ec:80:c3:cc:92:a2:5a:a1:ec:3e:c9:f2:9f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4
Validity
Not Before: Mar 1 12:36:30 2025 GMT
Not After : Feb 28 12:41:30 2026 GMT
Subject: CN=EDBA988EEB6D5D39B3B7CEDFAF39B5B2DCC9BFFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1e:0c:10:bf:c8:d8:b6:5a:14:ef:d1:a4:76:
1b:56:e4:63:e1:5a:48:8c:64:ed:2b:81:38:82:25:
7a:44:65:16:8a:d1:75:58:08:4e:bb:e1:81:d6:88:
8e:99:b1:dc:9e:9e:1f:ac:11:9f:b9:a3:40:f9:14:
86:f4:28:82:22:bd:2e:87:d8:9c:73:e4:61:0a:b5:
d5:7e:96:cb:8d:36:7b:ba:38:d8:9d:be:a9:f4:09:
0c:1a:ae:46:53:93:88:fb:61:f1:c6:e1:39:5e:20:
f4:ee:86:9b:74:75:bd:4f:05:51:58:25:64:26:c3:
70:af:27:54:5a:29:ab:d7:b4:a8:6f:2d:e9:3a:91:
72:dc:05:e3:ab:00:61:cd:e0:6b:ad:b2:6e:26:dd:
09:d6:d9:22:61:93:88:0f:5c:f0:a3:83:44:47:eb:
01:be:c0:2f:22:09:30:20:26:0a:81:3d:be:c6:12:
5b:c4:5b:5f:5e:0b:b9:e9:25:f6:6f:04:ad:26:e5:
40:c2:01:7b:a2:ea:b3:a0:78:fc:77:37:dd:2b:00:
f4:cf:6d:d0:2f:ca:d0:db:3f:d6:45:24:48:9f:eb:
7a:de:e0:18:c7:65:1a:22:77:6a:d9:f5:ab:12:fe:
fc:09:b3:95:e6:53:28:09:a9:02:cb:52:25:74:d9:
db:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BA:98:8E:EB:6D:5D:39:B3:B7:CE:DF:AF:39:B5:B2:DC:C9:BF:FE
X509v3 Authority Key Identifier:
keyid:1B:4F:7D:2D:BF:96:AE:DC:02:CE:1B:01:93:F9:64:E6:26:C1:8D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/3133312e37322e34362e302f32342d3332203d3e203631373132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.46.0/24
Signature Algorithm: sha256WithRSAEncryption
38:e8:68:1b:4f:9a:40:58:33:2b:87:18:1d:37:83:07:40:ff:
af:9e:ca:e2:e0:10:5d:84:a9:ef:6d:97:77:92:20:3c:bb:20:
8d:c8:a7:f3:42:21:d4:81:d3:32:aa:96:e6:a6:97:6c:47:09:
cc:ba:e9:2a:8c:4a:32:b0:ce:79:0b:80:79:cc:14:50:20:45:
78:bb:c9:55:8e:12:9f:47:a2:03:e4:dc:2e:38:63:15:c1:c5:
fa:53:ff:31:c3:30:34:3e:1a:71:d4:75:02:50:fe:12:cd:d6:
72:df:6b:f8:4e:3f:38:51:54:db:a2:24:d4:93:ec:af:6c:c7:
eb:a3:64:b3:26:bd:42:bf:02:13:0a:2f:47:1e:b2:e6:27:b9:
99:ae:29:06:22:4e:e5:9a:59:56:da:c2:89:12:8c:bb:13:6d:
50:10:18:cf:d3:04:a9:99:04:68:df:a6:35:d4:81:da:45:a8:
76:c4:23:c4:6e:a5:94:bd:40:87:d5:83:5e:fa:67:79:c6:1d:
b6:2c:70:fb:82:77:e9:a6:2d:14:ed:81:ca:50:ab:2f:f1:6e:
67:5c:a3:4e:2f:3d:e7:45:c6:98:e5:65:52:d1:54:59:51:58:
76:07:66:9c:55:a2:85:cd:d2:92:6b:ff:da:6c:72:71:79:d3:
0f:1c:c1:1f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUBwQfcSSD7IDDzJKiWqHsPsnyn+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI0RjdEMkRCRjk2QUVEQzAyQ0UxQjAxOTNGOTY0RTYy
NkMxOERDNDAeFw0yNTAzMDExMjM2MzBaFw0yNjAyMjgxMjQxMzBaMDMxMTAvBgNV
BAMTKEVEQkE5ODhFRUI2RDVEMzlCM0I3Q0VERkFGMzlCNUIyRENDOUJGRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/HgwQv8jYtloU79GkdhtW5GPh
WkiMZO0rgTiCJXpEZRaK0XVYCE674YHWiI6Zsdyenh+sEZ+5o0D5FIb0KIIivS6H
2Jxz5GEKtdV+lsuNNnu6ONidvqn0CQwarkZTk4j7YfHG4TleIPTuhpt0db1PBVFY
JWQmw3CvJ1RaKavXtKhvLek6kXLcBeOrAGHN4Gutsm4m3QnW2SJhk4gPXPCjg0RH
6wG+wC8iCTAgJgqBPb7GElvEW19eC7npJfZvBK0m5UDCAXui6rOgePx3N90rAPTP
bdAvytDbP9ZFJEif63re4BjHZRoid2rZ9asS/vwJs5XmUygJqQLLUiV02dtHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU7bqYjuttXTmzt87frzm1stzJv/4wHwYDVR0j
BBgwFoAUG099Lb+WrtwCzhsBk/lk5ibBjcQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjV4djVmOHZzdWhvV1l0c3NxcW9lS1M3ODV2WW9Fa2Y0eWZEam5HN2ZM
eGIvMC8xQjRGN0QyREJGOTZBRURDMDJDRTFCMDE5M0Y5NjRFNjI2QzE4REM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCNEY3RDJEQkY5NkFFREMw
MkNFMUIwMTkzRjk2NEU2MjZDMThEQzQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1eHY1Zjh2c3Vob1dZdHNzcXFvZUtTNzg1dllvRWtmNHlmRGpuRzdmTHhiLzAv
MzEzMzMxMmUzNzMyMmUzNDM2MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzYzMTM3
MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAINILjANBgkqhkiG9w0BAQsFAAOCAQEAOOhoG0+aQFgz
K4cYHTeDB0D/r57K4uAQXYSp722Xd5IgPLsgjcin80Ih1IHTMqqW5qaXbEcJzLrp
KoxKMrDOeQuAecwUUCBFeLvJVY4Sn0eiA+TcLjhjFcHF+lP/McMwND4acdR1AlD+
Es3Wct9r+E4/OFFU26Ik1JPsr2zH66Nksya9Qr8CEwovRx6y5ie5ma4pBiJO5ZpZ
VtrCiRKMuxNtUBAYz9MEqZkEaN+mNdSB2kWodsQjxG6llL1Ah9WDXvpnecYdtixw
+4J36aYtFO2BylCrL/FuZ1yjTi8950XGmOVlUtFUWVFYdgdmnFWihc3Skmv/2mxy
cXnTDxzBHw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 13:32:21 2025 by rpki-client