Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135322e302f32342d3234203d3e20323632343031.roa
File: 3137372e33362e3135322e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier: ZWlzfscq9Ht7now9nK6hmijLkqBQ/Refa0yuJMUL6Y8=
Subject key identifier: 81:1F:16:E7:0E:FE:BF:13:8F:6D:F9:BB:9D:AC:DA:B2:7C:5E:54:0D
Certificate issuer: /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial: 57DAA5C13129D89FCB053A14434F543B89260C7B
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135322e302f32342d3234203d3e20323632343031.roa
Signing time: Thu 06 Mar 2025 11:29:51 +0000
ROA not before: Thu 06 Mar 2025 11:24:51 +0000
ROA not after: Thu 05 Mar 2026 11:29:51 +0000
asID: 262401
IP address blocks: 177.36.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 20:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:da:a5:c1:31:29:d8:9f:cb:05:3a:14:43:4f:54:3b:89:26:0c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Validity
Not Before: Mar 6 11:24:51 2025 GMT
Not After : Mar 5 11:29:51 2026 GMT
Subject: CN=811F16E70EFEBF138F6DF9BB9DACDAB27C5E540D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:de:53:c9:8a:74:e9:28:e7:0e:18:73:7c:dc:
d0:71:de:8a:0e:c2:e0:98:7b:d0:e1:c9:0b:b0:de:
15:2a:13:75:b4:05:23:9b:6e:8c:66:75:6f:0c:bc:
f4:a2:23:c2:3c:b8:8b:8e:b0:c0:99:89:70:4e:84:
ad:2d:0b:40:03:80:f1:f0:92:f9:af:cb:fe:61:a4:
1d:60:e3:2d:b9:ed:65:45:15:0e:0f:7e:5d:c0:89:
67:79:d7:80:4e:32:61:5b:51:94:bf:ea:3a:3e:e2:
17:56:b2:76:11:6b:ef:c9:37:f2:5f:9c:98:64:31:
92:83:7d:e9:bb:fc:b6:55:10:8e:33:77:91:0b:f1:
13:13:fe:2b:9c:31:11:6d:5b:fe:7d:3d:2a:29:a7:
8f:52:de:7f:eb:bc:80:7a:87:06:d7:f6:d2:c3:6d:
06:ac:d1:d9:4e:ca:7a:ca:cf:77:d7:53:49:5a:8a:
f1:7d:89:e9:ad:f7:16:46:f8:8a:2a:79:34:90:e1:
3b:a6:ef:19:14:1c:70:6c:ab:40:66:fc:8b:64:32:
74:b6:77:96:fb:00:bf:60:8e:e2:94:f2:12:f8:58:
58:8b:0c:0d:90:5b:3b:57:f9:1f:f1:4d:5b:6c:1a:
60:98:c7:34:99:a5:e5:fa:27:d0:1c:c3:17:9c:aa:
e8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1F:16:E7:0E:FE:BF:13:8F:6D:F9:BB:9D:AC:DA:B2:7C:5E:54:0D
X509v3 Authority Key Identifier:
keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135322e302f32342d3234203d3e20323632343031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.36.152.0/24
Signature Algorithm: sha256WithRSAEncryption
35:7b:52:0c:58:23:03:f0:99:17:5f:fc:01:75:c2:02:c4:20:
c9:99:2a:3e:ee:af:5f:6d:3d:97:71:97:b9:74:ef:f3:1b:c4:
f6:5c:13:46:64:0f:74:81:60:3b:ce:54:68:fb:34:9a:ce:28:
61:1c:80:ce:3d:44:8c:f2:0d:d6:26:24:b1:73:32:d0:52:e7:
88:78:23:13:28:c7:9c:ac:33:35:a0:38:9a:66:54:e5:56:cf:
d2:55:17:36:56:ab:4d:68:3d:ce:eb:e0:d5:b4:f9:06:ab:6e:
84:0b:9a:0c:d7:3b:56:3c:03:8b:96:d1:80:a2:2e:8e:21:6e:
6f:27:44:87:55:ea:33:77:cc:fa:cc:2d:40:38:1e:0e:ab:65:
42:42:dd:00:4a:5c:fd:eb:24:ed:3b:41:8b:6c:13:47:85:ce:
13:b1:81:c5:33:a5:f5:78:63:c1:0e:42:ab:08:b8:7b:a3:b5:
6a:03:bc:02:ec:e0:be:53:8a:88:cf:d7:c3:78:5c:0f:7b:aa:
bd:8d:61:8c:d5:60:e8:57:d9:61:2b:61:ff:42:e2:72:8c:40:
07:72:4a:6a:33:4d:90:da:2c:df:76:99:ef:31:ea:78:5f:69:
98:9f:6f:6e:03:e0:d6:9c:0e:77:85:f4:be:72:58:ee:7b:7b:
11:f6:2e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 01:56:57 2025 by rpki-client