Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130302e302f32342d3234203d3e203533313533.roa
File: 3138362e3230392e3130302e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier: dXKzvPyad3GdgzIhGE+mUtVBOpC1j0QjBljV2n5pDco=
Subject key identifier: 84:B6:B4:D1:E6:18:AA:BF:A1:D5:AE:88:2F:21:13:92:C5:6F:55:59
Certificate issuer: /CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Certificate serial: 533684F9F5339385C0AFE657FC1991CEB29FD993
Authority key identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130302e302f32342d3234203d3e203533313533.roa
Signing time: Wed 04 Dec 2024 15:40:58 +0000
ROA not before: Wed 04 Dec 2024 15:35:58 +0000
ROA not after: Wed 03 Dec 2025 15:40:58 +0000
asID: 53153
IP address blocks: 186.209.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl
rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 06:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:36:84:f9:f5:33:93:85:c0:af:e6:57:fc:19:91:ce:b2:9f:d9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Validity
Not Before: Dec 4 15:35:58 2024 GMT
Not After : Dec 3 15:40:58 2025 GMT
Subject: CN=84B6B4D1E618AABFA1D5AE882F211392C56F5559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cb:91:46:77:29:fd:6d:60:2a:f4:aa:46:9f:
15:cd:08:10:21:09:69:02:45:3a:ce:08:e4:29:0b:
78:60:fd:da:0a:42:e2:3e:6b:53:43:1c:d9:cd:1a:
ba:24:2d:9b:73:cf:06:b8:78:08:28:5b:7e:f4:5c:
56:1e:e6:43:82:a0:73:2e:2c:46:31:df:5b:99:45:
97:84:3c:a5:bb:35:87:53:d1:fe:cc:58:9c:1c:e0:
7d:c1:84:27:76:b7:db:76:b9:14:ea:4a:5a:5b:69:
96:97:b3:6d:d9:05:63:f9:b0:fc:bf:2f:eb:2c:50:
9a:6e:8d:a7:6d:3d:4c:0a:17:2d:fe:e5:40:4e:12:
d7:7e:16:6b:cf:bf:3a:42:3e:12:34:73:73:74:c5:
e3:40:42:e8:ed:9a:27:6a:fe:96:d0:4b:bb:0c:09:
f8:89:c3:78:98:1e:62:93:82:38:49:36:bb:f1:d6:
32:e9:c5:62:f7:96:7c:10:e1:d8:51:7e:28:c9:f6:
c6:ce:4a:8a:2a:b3:26:47:77:2e:46:49:06:45:43:
0e:70:0f:2f:07:4f:c0:ad:a1:da:4d:fe:17:29:26:
b7:b9:aa:9c:97:63:7a:2f:d6:65:e5:ba:12:59:77:
39:92:b3:b6:2b:e1:b7:c9:a5:09:76:89:9b:8f:67:
ec:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B6:B4:D1:E6:18:AA:BF:A1:D5:AE:88:2F:21:13:92:C5:6F:55:59
X509v3 Authority Key Identifier:
keyid:85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130302e302f32342d3234203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.209.100.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ed:7a:ec:1e:e2:5f:3e:ba:02:73:4b:8d:78:8d:c0:44:39:
f4:ff:04:2e:8d:4f:5e:01:8f:20:c8:a1:1d:f1:a8:81:99:92:
45:af:c1:8d:67:fa:b6:90:9c:18:ba:63:75:fe:53:01:44:95:
fe:2d:d3:e6:7e:1e:db:61:1b:7d:b0:03:60:d7:fa:8c:c0:ef:
83:60:7f:26:c5:c7:4b:03:c3:b2:c7:12:f5:27:2f:a4:0e:6a:
5c:d9:de:19:fc:c8:e7:e3:0a:f1:5c:4a:ba:b3:1b:07:02:cd:
d6:07:5a:a8:ba:59:25:74:32:3d:88:25:1a:c1:51:a1:eb:68:
f8:64:2d:45:21:0d:66:13:58:f7:af:14:1f:f0:11:db:ce:72:
c6:53:84:16:2d:db:a6:8b:f5:82:53:0a:95:a0:ae:74:9e:d6:
41:ba:b2:3a:e5:70:83:90:b0:d4:ac:c3:b8:d1:49:9c:af:b0:
71:40:92:ca:be:58:2b:ba:ee:bd:39:fd:0b:82:77:9a:bb:d1:
2d:a6:39:be:7b:78:7e:9b:53:e4:b6:f7:33:da:d9:e7:a4:b1:
c3:65:80:44:06:8a:15:1c:4f:25:7d:a9:d8:fb:04:6b:ea:06:
97:cf:89:5d:06:3e:d9:c2:33:d2:28:2e:de:89:c2:36:5f:1e:
99:0c:7c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 23:33:34 2025 by rpki-client