Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232302e302f32322d3232203d3e20323633323633.roa
File: 3137302e3234342e3232302e302f32322d3232203d3e20323633323633.roa (raw, json)
Hash identifier: quf6k4pJzw7rdv7qC43TaXPGJ7omspB83eceNxi5SLg=
Subject key identifier: 37:E4:BC:DD:BE:2B:A1:EF:C7:4D:83:C9:DB:C0:68:04:61:F8:A5:70
Certificate issuer: /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial: 0C5FF14153B76355DED881B8D4E455DEB1A9F6AF
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232302e302f32322d3232203d3e20323633323633.roa
Signing time: Thu 06 Mar 2025 08:00:28 +0000
ROA not before: Thu 06 Mar 2025 07:55:28 +0000
ROA not after: Thu 05 Mar 2026 08:00:28 +0000
asID: 263263
IP address blocks: 170.244.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl
rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 11 Apr 2025 03:43:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:5f:f1:41:53:b7:63:55:de:d8:81:b8:d4:e4:55:de:b1:a9:f6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Validity
Not Before: Mar 6 07:55:28 2025 GMT
Not After : Mar 5 08:00:28 2026 GMT
Subject: CN=37E4BCDDBE2BA1EFC74D83C9DBC0680461F8A570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:fa:79:02:97:e5:33:55:6e:77:ba:59:dd:
e0:05:42:1e:75:ae:9d:71:9d:25:93:0d:bd:30:57:
3d:06:8c:da:fc:55:00:d6:41:51:bd:bf:ab:67:0c:
f6:b4:c0:08:cf:b1:a7:8d:70:ff:dc:79:4b:b5:de:
2b:9c:7c:98:b6:30:9f:92:6b:61:fd:9d:3c:03:8a:
3c:92:aa:e0:10:e6:ae:78:87:4c:f8:0c:11:31:13:
57:92:85:89:1e:b7:d3:dc:a9:83:ce:7b:e9:41:41:
b3:f8:e7:86:d2:9d:c9:a5:54:0b:18:aa:fa:4f:e7:
0a:e4:e5:a2:ca:1d:31:fc:27:98:83:05:4d:a0:c3:
73:95:dd:93:9b:cd:8d:ff:1e:67:90:09:20:f8:7f:
44:41:45:6b:71:59:42:a2:af:7d:62:c5:ab:b0:c1:
e9:bd:f9:5f:63:f4:92:02:2d:89:dc:90:45:55:ab:
90:a0:ea:6f:a5:2b:40:97:e3:68:b0:67:ca:5c:9f:
a4:97:85:1f:60:d0:8b:51:38:a7:36:74:f9:78:42:
ac:a6:82:9a:d2:96:7a:51:1c:5e:bc:e4:7c:08:0a:
7b:bc:bf:ad:49:11:48:e9:5d:64:0f:17:ec:57:7f:
2e:b7:a6:45:cb:6d:f7:a6:d8:cf:b6:f5:55:41:22:
65:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E4:BC:DD:BE:2B:A1:EF:C7:4D:83:C9:DB:C0:68:04:61:F8:A5:70
X509v3 Authority Key Identifier:
keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232302e302f32322d3232203d3e20323633323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.220.0/22
Signature Algorithm: sha256WithRSAEncryption
54:00:f8:3d:4a:16:b1:02:27:ed:ed:d3:7a:8f:77:7f:5c:01:
52:33:09:9a:30:68:55:ca:ad:43:fb:b3:e1:0c:b1:bb:fa:05:
3b:30:f5:84:f7:f8:c8:aa:49:39:1e:c1:82:b9:d8:31:99:6f:
ac:a7:5f:32:6a:3f:e1:e2:9d:46:59:1f:8b:05:ee:7a:88:61:
5f:2c:f5:7c:76:ba:73:8c:64:7b:e5:97:0f:27:51:1a:6f:59:
a4:7b:ef:30:91:b6:72:98:0b:bb:cc:c1:30:ad:c4:dd:e7:f3:
a3:72:e3:81:cf:ef:82:b8:7d:51:b0:72:2f:62:7c:1e:b2:2b:
b7:0d:bf:eb:a0:4b:45:11:2d:fa:6d:e9:f7:dc:0e:6a:0f:07:
94:27:d7:3b:78:29:a0:eb:73:f0:4a:ba:d6:bd:3d:94:1e:a4:
ba:35:2f:2e:ac:b2:71:66:73:94:72:a7:f6:88:9c:26:9a:cd:
ec:d7:cd:8e:0c:be:68:f3:e2:91:2f:01:8f:15:6e:13:c6:c5:
0a:b0:e5:a7:03:ce:9a:22:c1:e1:8e:ba:b2:32:84:3a:09:2e:
f9:c2:bf:d5:c2:47:b7:84:68:cc:9e:bc:76:6c:d1:92:71:92:
7b:b1:9b:e6:13:bf:51:41:14:55:cc:ea:b9:c4:da:bb:32:97:
e3:d4:9b:70
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDF/xQVO3Y1Xe2IG41ORV3rGp9q8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UyRDFCQzhCMjY3MzVFOTA2OEU4ODMzMzIwQTlGREVC
MDRFNjlDRDAeFw0yNTAzMDYwNzU1MjhaFw0yNjAzMDUwODAwMjhaMDMxMTAvBgNV
BAMTKDM3RTRCQ0REQkUyQkExRUZDNzREODNDOURCQzA2ODA0NjFGOEE1NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJd/p5ApflM1Vud7pZ3eAFQh51
rp1xnSWTDb0wVz0GjNr8VQDWQVG9v6tnDPa0wAjPsaeNcP/ceUu13iucfJi2MJ+S
a2H9nTwDijySquAQ5q54h0z4DBExE1eShYket9PcqYPOe+lBQbP454bSncmlVAsY
qvpP5wrk5aLKHTH8J5iDBU2gw3OV3ZObzY3/HmeQCSD4f0RBRWtxWUKir31ixauw
wem9+V9j9JICLYnckEVVq5Cg6m+lK0CX42iwZ8pcn6SXhR9g0ItROKc2dPl4Qqym
gprSlnpRHF685HwICnu8v61JEUjpXWQPF+xXfy63pkXLbfem2M+29VVBImUhAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUN+S83b4roe/HTYPJ28BoBGH4pXAwHwYDVR0j
BBgwFoAUzi0byLJnNekGjogzMgqf3rBOac0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDVDVEZuOHdudTRveXNqWUozTFNRZHRLOFBIbnhObTVtRDRWSFl2SDlD
aUQvMS9DRTJEMUJDOEIyNjczNUU5MDY4RTg4MzMzMjBBOUZERUIwNEU2OUNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFMkQxQkM4QjI2NzM1RTkw
NjhFODgzMzMyMEE5RkRFQjA0RTY5Q0QuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ1Q1RGbjh3bnU0b3lzallKM0xTUWR0SzhQSG54Tm01bUQ0VkhZdkg5Q2lELzEv
MzEzNzMwMmUzMjM0MzQyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzMyMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr03DANBgkqhkiG9w0BAQsFAAOCAQEAVAD4
PUoWsQIn7e3Teo93f1wBUjMJmjBoVcqtQ/uz4Qyxu/oFOzD1hPf4yKpJOR7BgrnY
MZlvrKdfMmo/4eKdRlkfiwXueohhXyz1fHa6c4xke+WXDydRGm9ZpHvvMJG2cpgL
u8zBMK3E3efzo3Ljgc/vgrh9UbByL2J8HrIrtw2/66BLRREt+m3p99wOag8HlCfX
O3gpoOtz8Eq61r09lB6kujUvLqyycWZzlHKn9oicJprN7NfNjgy+aPPikS8BjxVu
E8bFCrDlpwPOmiLB4Y66sjKEOgku+cK/1cJHt4RozJ68dmzRknGSe7Gb5hO/UUEU
VczqucTauzKX49SbcA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 20:51:20 2025 by rpki-client