Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/3139302e38392e3135312e302f32342d3234203d3e20323730333730.roa
File: 3139302e38392e3135312e302f32342d3234203d3e20323730333730.roa (raw, json)
Hash identifier: wJQaneXZS/6Zie6oSb3HaDESCv5U+oUcaO+avfMOr/U=
Subject key identifier: 95:D3:73:28:09:48:8F:16:4D:24:6B:C5:A8:B4:5B:B3:0D:E6:F0:D8
Certificate issuer: /CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
Certificate serial: 1FE4F9BDD69C8ED3B062BBCCF3BEC28F979BFD8C
Authority key identifier: C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/3139302e38392e3135312e302f32342d3234203d3e20323730333730.roa
Signing time: Thu 06 Mar 2025 10:07:42 +0000
ROA not before: Thu 06 Mar 2025 10:02:42 +0000
ROA not after: Thu 05 Mar 2026 10:07:42 +0000
asID: 270370
IP address blocks: 190.89.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl
rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 11 Apr 2025 22:15:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:e4:f9:bd:d6:9c:8e:d3:b0:62:bb:cc:f3:be:c2:8f:97:9b:fd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
Validity
Not Before: Mar 6 10:02:42 2025 GMT
Not After : Mar 5 10:07:42 2026 GMT
Subject: CN=95D3732809488F164D246BC5A8B45BB30DE6F0D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:91:75:c3:5d:3f:21:56:5e:99:9f:c2:59:ad:
1d:39:26:21:88:21:5f:c0:1f:d2:6c:5f:ec:12:18:
9c:b7:53:35:88:51:ee:ac:b0:ca:e2:d4:6d:1f:3e:
0b:91:1c:48:50:00:63:4c:1a:22:00:89:dc:2b:de:
ae:55:8c:6b:f0:98:b6:9a:95:55:e5:7f:9d:cb:05:
1e:a0:d0:2a:d2:c0:e0:1e:86:be:f5:cd:83:20:1b:
66:60:51:ae:5a:5c:ef:30:81:46:6d:81:2e:ba:f0:
68:ed:4e:9d:ee:15:28:49:b1:ea:11:ae:6d:80:a3:
13:0c:4d:de:14:73:47:69:ce:b0:59:a3:8c:7f:ae:
0c:00:8e:48:1b:7f:e3:2a:96:dc:91:77:c0:7d:50:
1d:82:37:f7:6f:58:5b:0c:6a:c7:71:6e:b2:96:33:
67:41:5a:1e:fc:da:b0:8f:23:c6:6d:7a:ce:31:d9:
29:ab:2c:fc:ec:d2:d4:91:b6:18:1c:c1:a6:e3:f4:
d4:1a:0b:80:d4:d6:bc:f7:f3:24:9f:9e:6c:70:54:
82:79:73:27:1f:bd:04:94:01:c4:86:1b:c7:d8:be:
67:55:5a:55:7a:38:b2:89:91:8a:94:bf:8c:d3:9a:
4e:19:c4:5a:8d:14:4e:0a:1e:cf:93:a4:8f:7a:eb:
c5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D3:73:28:09:48:8F:16:4D:24:6B:C5:A8:B4:5B:B3:0D:E6:F0:D8
X509v3 Authority Key Identifier:
keyid:C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/3139302e38392e3135312e302f32342d3234203d3e20323730333730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.89.151.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:45:d4:1e:33:91:d6:91:be:20:c7:28:a2:43:2a:8b:65:30:
d7:c5:dc:be:68:bc:ad:e0:b3:75:52:cd:fd:94:e9:4d:91:87:
b0:d0:d0:4e:cc:90:2c:fe:55:da:7c:22:77:f0:d8:6f:2c:37:
1f:63:42:8f:a1:20:ee:6e:af:ff:62:51:a5:08:c6:0b:d1:cb:
15:1c:49:e4:f6:c6:52:fd:8d:75:46:43:02:38:aa:03:4f:f5:
49:3d:8a:eb:1b:4c:78:76:1f:e6:e7:5c:93:4a:a9:a0:2f:33:
97:65:03:40:c8:69:b2:0c:69:a1:7a:af:06:80:b5:bc:b9:ee:
b9:ee:9f:82:00:71:54:f0:1a:1b:8c:00:6a:df:09:a2:6d:e4:
34:6a:bc:be:56:f3:91:7f:78:8c:63:ad:e8:f3:33:e6:7e:a2:
ba:03:60:b1:12:7b:05:78:5f:7a:1d:82:00:3c:09:d2:9a:e4:
7a:c4:20:05:87:b8:f9:cb:a8:e9:b4:ce:40:af:54:36:52:bc:
3d:5d:f7:da:c5:d2:5c:90:5d:cf:0c:16:3d:a4:22:87:b8:a1:
ab:f0:91:72:44:12:49:48:fe:36:05:6f:6c:69:38:7b:bb:d8:
cd:e3:a6:51:25:90:b9:13:ef:1b:5a:75:ef:ef:f3:73:75:ee:
43:52:47:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:04:26 2025 by rpki-client