Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/3136382e3132312e3131322e302f32342d3234203d3e20323635333131.roa
File: 3136382e3132312e3131322e302f32342d3234203d3e20323635333131.roa (raw, json)
Hash identifier: +hyg43Qv7DEkJRrW+Ar4Z9CTsi3lsDjhxlX3OZNLYds=
Subject key identifier: 69:7E:CC:C5:15:13:05:70:DF:1C:E5:1A:7C:9D:78:16:24:68:4F:12
Certificate issuer: /CN=F24241E6982A012648294002B697451627DFF661
Certificate serial: 12A479032B43CB17FA6C66FD8B954376E59D4697
Authority key identifier: F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/3136382e3132312e3131322e302f32342d3234203d3e20323635333131.roa
Signing time: Thu 06 Mar 2025 16:47:35 +0000
ROA not before: Thu 06 Mar 2025 16:42:35 +0000
ROA not after: Thu 05 Mar 2026 16:47:35 +0000
asID: 265311
IP address blocks: 168.121.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl
rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 11 Apr 2025 20:07:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:a4:79:03:2b:43:cb:17:fa:6c:66:fd:8b:95:43:76:e5:9d:46:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F24241E6982A012648294002B697451627DFF661
Validity
Not Before: Mar 6 16:42:35 2025 GMT
Not After : Mar 5 16:47:35 2026 GMT
Subject: CN=697ECCC515130570DF1CE51A7C9D781624684F12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:34:10:ec:9f:94:a2:44:c7:a5:49:7b:e5:67:
a8:62:8f:71:c9:26:66:a0:40:fd:b3:8a:1c:2d:1f:
eb:fe:db:ec:08:eb:83:4d:2d:ce:22:10:e0:c7:8a:
e6:a2:44:71:5b:5d:75:ca:16:ea:77:eb:99:88:24:
db:21:c5:b9:f2:16:eb:ea:6a:4c:42:f8:5b:2b:ef:
4c:77:43:72:99:5d:bf:74:44:a3:08:38:84:40:6a:
92:01:f0:8c:e5:f2:dd:1e:64:c0:30:85:6c:50:5f:
df:15:48:c0:d5:33:15:6c:61:ec:7f:df:e4:80:b6:
e0:4e:ab:8e:ee:57:65:a4:ea:29:dd:23:35:4a:d9:
34:f8:cd:89:0b:be:ff:97:c6:7a:a1:a4:30:e9:c1:
8a:f2:0a:b3:58:f8:72:68:19:4c:64:e6:78:ef:73:
f5:c4:94:b6:0b:d7:b6:48:b1:62:65:16:84:52:62:
ba:50:06:99:9d:6f:84:4f:ba:e2:45:56:f6:d0:bc:
13:6c:85:7d:c9:49:23:61:17:b1:a0:7c:a6:6a:7d:
00:59:8f:a3:fd:cc:43:b6:e1:19:27:89:cc:da:f5:
94:a3:9e:f4:24:1b:9e:e3:3d:b3:81:52:82:56:db:
ec:66:37:9f:f8:de:ef:85:6d:9d:41:10:12:f2:cc:
b3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7E:CC:C5:15:13:05:70:DF:1C:E5:1A:7C:9D:78:16:24:68:4F:12
X509v3 Authority Key Identifier:
keyid:F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/3136382e3132312e3131322e302f32342d3234203d3e20323635333131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.112.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c0:78:ff:b9:ef:05:98:89:bf:f3:15:2c:17:09:74:29:e5:
b6:f7:51:57:9b:47:53:6b:d6:48:c6:4e:fd:db:18:6b:c1:07:
08:f6:22:38:20:cf:b5:00:f4:9d:df:ff:8c:22:48:09:e4:68:
74:06:80:b7:e2:3c:68:ce:49:ee:7a:4c:24:b1:0b:fd:ba:bc:
9d:b0:90:00:02:88:1c:fd:91:7c:7c:80:98:82:9d:d8:2d:0c:
48:01:e0:13:07:31:f5:dd:d9:62:77:5f:7e:4a:a4:23:84:26:
ee:82:43:d8:09:a7:12:2c:b6:ec:68:f9:93:77:a0:b5:48:90:
32:10:1b:54:2c:0e:a5:e8:04:99:a8:01:c1:1f:ca:7f:42:02:
26:d9:54:88:9f:4d:89:a1:02:84:b7:09:00:5c:45:76:9c:5e:
4e:e0:74:a6:55:0f:02:2c:b7:bd:09:d5:21:2b:69:9a:9c:9a:
36:82:e2:dd:e5:ec:bc:9b:bc:d1:e5:7a:e5:b4:55:c6:4b:57:
0d:05:24:5d:1a:ca:d8:cd:cc:a2:3a:aa:10:e7:b4:4e:5e:66:
e1:66:1e:d3:5c:85:d8:eb:01:70:e7:40:4b:8f:72:8a:6f:90:
b4:c9:b0:57:8e:ee:ca:5b:2a:b1:81:10:8b:2a:86:82:15:90:
ff:b2:07:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:32:54 2025 by rpki-client