Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/3137372e3232312e3134322e302f32332d3234203d3e20323730373335.roa
File: 3137372e3232312e3134322e302f32332d3234203d3e20323730373335.roa (raw, json)
Hash identifier: Ry4WEHqQ3COy4GFObdDBhjjlH3TTWPjEE+vFu0K5ing=
Subject key identifier: E3:21:32:13:DD:AB:F4:B0:89:8D:E2:0E:57:1F:47:DC:D0:4F:4C:45
Certificate issuer: /CN=275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE
Certificate serial: 08E27968340FE6701C10E0401BF915DE47E32109
Authority key identifier: 27:5D:9E:0F:3E:6B:B4:0B:BC:90:C8:BA:26:99:DD:6A:35:6D:A2:AE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/3137372e3232312e3134322e302f32332d3234203d3e20323730373335.roa
Signing time: Wed 05 Mar 2025 21:00:20 +0000
ROA not before: Wed 05 Mar 2025 20:55:20 +0000
ROA not after: Wed 04 Mar 2026 21:00:20 +0000
asID: 270735
IP address blocks: 177.221.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.crl
rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 27 Apr 2025 00:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:e2:79:68:34:0f:e6:70:1c:10:e0:40:1b:f9:15:de:47:e3:21:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE
Validity
Not Before: Mar 5 20:55:20 2025 GMT
Not After : Mar 4 21:00:20 2026 GMT
Subject: CN=E3213213DDABF4B0898DE20E571F47DCD04F4C45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:43:ed:51:43:b4:41:01:01:76:65:25:63:
41:33:68:aa:21:63:12:02:4c:e0:ea:fd:47:d7:9c:
b1:90:84:73:b6:f8:3d:aa:03:77:93:33:76:56:44:
35:f4:50:18:d7:3a:d8:4d:92:65:f8:02:cb:03:30:
f9:cc:2d:45:e1:10:3d:5d:48:27:44:34:48:6c:ca:
4e:8d:df:35:93:00:b7:4c:c5:b4:26:14:20:a5:b4:
db:38:f1:30:87:05:09:53:a5:2b:fe:d7:c0:36:a0:
8b:85:af:cd:16:68:b2:84:bc:15:ae:87:b8:63:52:
f2:09:37:51:f4:66:66:63:6f:64:bf:cb:af:ae:cd:
de:43:3b:ce:fc:58:4b:14:91:6d:e8:2b:40:0f:09:
76:c3:ae:13:ab:70:b9:54:60:8e:8f:63:cc:b4:63:
97:62:35:65:f2:bc:8c:4a:b7:85:85:44:a2:f4:64:
fb:23:43:80:87:17:b7:89:75:1f:fa:ad:9c:95:7a:
35:e6:4d:fd:97:02:dd:b4:71:88:25:4e:b5:63:ed:
7d:93:01:ff:04:7c:d3:f5:ef:2c:63:3b:94:e3:70:
39:82:19:48:9e:74:5f:97:14:92:a1:a6:fe:03:99:
37:79:82:c8:c3:fe:0a:e1:1c:5a:54:4e:fa:84:f9:
d3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:21:32:13:DD:AB:F4:B0:89:8D:E2:0E:57:1F:47:DC:D0:4F:4C:45
X509v3 Authority Key Identifier:
keyid:27:5D:9E:0F:3E:6B:B4:0B:BC:90:C8:BA:26:99:DD:6A:35:6D:A2:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/3137372e3232312e3134322e302f32332d3234203d3e20323730373335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.221.142.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:b9:95:64:89:fd:e2:22:1f:55:fb:cb:b2:29:33:70:83:15:
6a:38:7a:d6:dc:92:db:fa:bf:63:19:f2:4f:98:da:81:03:46:
5a:a5:c9:74:ea:24:5e:74:84:ce:6e:e7:ca:1c:ed:f7:58:32:
ba:40:8c:c1:a4:cc:51:d0:6e:ae:f1:70:98:16:aa:c1:fb:ba:
64:e7:e6:59:5c:5b:b7:23:6b:3e:99:6a:be:7b:77:fd:6a:96:
85:ce:9a:e3:7a:95:0e:eb:04:6a:39:8b:30:58:4a:ba:2b:e3:
89:35:56:51:53:c6:ac:be:34:4e:6e:80:de:a1:36:96:b9:d3:
01:7f:ec:20:0a:9c:58:4e:e2:63:18:27:76:e8:f9:c7:3a:7d:
9c:9d:52:ae:53:44:fa:65:02:ce:e3:47:6f:e8:7b:f7:fe:53:
6e:b5:56:31:b5:58:c4:ce:24:ce:8c:2e:b7:59:a9:82:d1:f9:
39:3c:7b:35:12:c2:fd:fa:6a:b6:17:f2:f7:54:6c:3b:87:a8:
93:78:81:f6:80:29:57:91:d1:22:39:25:f2:c0:1b:31:db:f9:
7d:eb:2c:5a:3e:c1:1f:11:d7:8d:73:8d:f0:1e:bc:54:00:cc:
11:6d:3e:9b:5e:11:16:b3:f8:c3:a3:25:63:cb:f5:5c:cc:c4:
38:45:95:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:39:02 2025 by rpki-client