Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135392e302f32342d3234203d3e20323632343031.roa
File: 3137372e33362e3135392e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier: gfhfjyw2SKF1QdQTYpVnn2Y0Xnp/lk3cvam+C9Vjo9M=
Subject key identifier: B9:11:8F:1F:73:34:0F:17:72:E6:18:A6:1C:C9:0F:63:C3:4A:0A:3A
Certificate issuer: /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial: 5D490DDB451CB7BB6400D09C4EA95E7A41A274B6
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135392e302f32342d3234203d3e20323632343031.roa
Signing time: Thu 06 Mar 2025 11:29:48 +0000
ROA not before: Thu 06 Mar 2025 11:24:48 +0000
ROA not after: Thu 05 Mar 2026 11:29:48 +0000
asID: 262401
IP address blocks: 177.36.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 21:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:49:0d:db:45:1c:b7:bb:64:00:d0:9c:4e:a9:5e:7a:41:a2:74:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Validity
Not Before: Mar 6 11:24:48 2025 GMT
Not After : Mar 5 11:29:48 2026 GMT
Subject: CN=B9118F1F73340F1772E618A61CC90F63C34A0A3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2c:cd:bb:b8:e7:97:07:fe:1e:d7:65:51:de:
b6:eb:6b:89:c0:fa:4a:2f:fa:a3:52:de:32:e5:c5:
82:67:77:a7:9f:61:5e:05:ef:8a:7d:1a:0b:8f:ab:
cc:3b:21:f0:5f:32:6d:da:b3:6d:e8:ae:47:2a:21:
c8:69:15:71:73:57:28:f6:2c:86:f6:ef:8a:51:56:
08:27:11:eb:93:07:0b:1d:49:28:09:5a:bd:d0:96:
69:b6:13:12:35:d4:33:fd:06:18:25:93:77:0e:31:
9d:92:d0:c4:78:20:31:ee:85:fa:25:88:e2:a3:70:
74:81:c1:62:36:39:5c:3a:84:4b:db:e8:4e:c1:f5:
77:3e:08:af:46:7b:81:45:e6:e2:5b:21:fa:ec:77:
9f:6f:65:ed:91:b3:14:5f:ef:6e:46:bb:db:48:70:
42:06:fa:61:7d:27:d3:e6:0e:23:62:6a:42:ce:9c:
85:f7:95:58:aa:e6:c6:0c:01:e8:58:19:20:91:7a:
cf:36:0e:6b:39:9c:2e:01:11:8c:21:7a:1e:0b:8b:
08:e4:6b:8f:31:24:e4:d9:a4:d9:c0:62:08:c8:50:
c5:2b:47:4d:38:6b:8c:12:57:e6:a2:6c:51:ff:5d:
68:f9:74:25:d0:62:e6:f0:9f:57:06:e2:19:09:c3:
89:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:11:8F:1F:73:34:0F:17:72:E6:18:A6:1C:C9:0F:63:C3:4A:0A:3A
X509v3 Authority Key Identifier:
keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135392e302f32342d3234203d3e20323632343031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.36.159.0/24
Signature Algorithm: sha256WithRSAEncryption
63:5a:a2:95:ff:e5:a1:d5:9b:aa:6c:ed:c9:39:0f:db:38:23:
75:60:97:d7:33:65:c3:a6:0c:18:9b:30:db:ab:3e:d7:5a:8f:
d4:1e:f9:6c:75:2b:a6:cc:9c:62:9c:bc:08:33:70:19:3f:10:
6b:2a:8b:dd:6d:e0:2b:b5:24:e3:93:e7:46:59:fa:6b:b3:8b:
b6:8a:37:5c:f8:70:2c:fd:0c:e8:4b:65:c3:56:df:42:0a:ba:
ef:f1:3d:7c:cc:b2:4b:fb:50:14:ea:14:1f:69:61:dc:af:f9:
57:13:84:5a:18:3c:05:b2:3c:1b:bd:1d:1c:7d:c7:e2:6d:d3:
e4:3a:76:fd:00:7b:c6:15:91:04:2e:4c:25:36:d6:0d:b5:29:
ba:4f:08:57:8b:7c:40:d5:f9:6a:e0:00:05:eb:c6:38:a0:4f:
1c:f1:10:27:84:e9:b5:8a:24:94:f1:fe:50:fc:2f:44:86:3c:
a3:87:ed:56:bf:94:ce:4c:5c:55:40:48:c1:24:7e:dd:6e:2c:
7c:3b:e1:c8:23:7f:f0:c3:8f:39:54:7b:8f:d6:7f:1b:41:22:
01:13:4f:a0:27:fc:e6:74:d0:0e:0f:26:76:07:1a:9c:87:77:
b1:26:ed:5f:35:0e:d8:90:31:f4:aa:b8:79:24:9e:89:37:0f:
ff:61:d7:27
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXUkN20Uct7tkANCcTqleekGidLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDRDNEI0NjUwMzIwNzQ4MUE1RTI5Q0U4RTQ1MEU4M0M5
MTdCMkYyMjAeFw0yNTAzMDYxMTI0NDhaFw0yNjAzMDUxMTI5NDhaMDMxMTAvBgNV
BAMTKEI5MTE4RjFGNzMzNDBGMTc3MkU2MThBNjFDQzkwRjYzQzM0QTBBM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPLM27uOeXB/4e12VR3rbra4nA
+kov+qNS3jLlxYJnd6efYV4F74p9GguPq8w7IfBfMm3as23orkcqIchpFXFzVyj2
LIb274pRVggnEeuTBwsdSSgJWr3Qlmm2ExI11DP9Bhglk3cOMZ2S0MR4IDHuhfol
iOKjcHSBwWI2OVw6hEvb6E7B9Xc+CK9Ge4FF5uJbIfrsd59vZe2RsxRf725Gu9tI
cEIG+mF9J9PmDiNiakLOnIX3lViq5sYMAehYGSCRes82Dms5nC4BEYwheh4Liwjk
a48xJOTZpNnAYgjIUMUrR004a4wSV+aibFH/XWj5dCXQYubwn1cG4hkJw4kpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuRGPH3M0Dxdy5himHMkPY8NKCjowHwYDVR0j
BBgwFoAUBMS0ZQMgdIGl4pzo5FDoPJF7LyIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NCa2Y0ckhMWDFyV3FYY2d0NXNIajU3TnRON05Zem9jNkNqWTMyWWFq
WHYvMS8wNEM0QjQ2NTAzMjA3NDgxQTVFMjlDRThFNDUwRTgzQzkxN0IyRjIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0QzRCNDY1MDMyMDc0ODFB
NUUyOUNFOEU0NTBFODNDOTE3QjJGMjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDQmtmNHJITFgxcldxWGNndDVzSGo1N050TjdOWXpvYzZDalkzMllhalh2LzEv
MzEzNzM3MmUzMzM2MmUzMTM1MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxJJ8wDQYJKoZIhvcNAQELBQADggEBAGNaopX/
5aHVm6ps7ck5D9s4I3Vgl9czZcOmDBibMNurPtdaj9Qe+Wx1K6bMnGKcvAgzcBk/
EGsqi91t4Cu1JOOT50ZZ+muzi7aKN1z4cCz9DOhLZcNW30IKuu/xPXzMskv7UBTq
FB9pYdyv+VcThFoYPAWyPBu9HRx9x+Jt0+Q6dv0Ae8YVkQQuTCU21g21KbpPCFeL
fEDV+WrgAAXrxjigTxzxECeE6bWKJJTx/lD8L0SGPKOH7Va/lM5MXFVASMEkft1u
LHw74cgjf/DDjzlUe4/WfxtBIgETT6An/OZ00A4PJnYHGpyHd7Em7V81DtiQMfSq
uHkknok3D/9h1yc=
-----END CERTIFICATE-----
Generated at Mon Apr 14 04:46:13 2025 by rpki-client