Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/3137372e3132342e36342e302f32312d3234203d3e20323632333137.roa
File: 3137372e3132342e36342e302f32312d3234203d3e20323632333137.roa (raw, json)
Hash identifier: UT5fG5edMueNk/UdRtQKGq09mXgMcYFNYAhRHgxLSNw=
Subject key identifier: B7:1D:36:F1:49:8C:A6:58:01:BB:E2:80:28:DB:28:94:81:D1:05:BB
Certificate issuer: /CN=719575E8618FCC47BDBFE563F69F5D0962836551
Certificate serial: 23C529A106A2A7A9F32E009DC3FCFF5071111A2E
Authority key identifier: 71:95:75:E8:61:8F:CC:47:BD:BF:E5:63:F6:9F:5D:09:62:83:65:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/719575E8618FCC47BDBFE563F69F5D0962836551.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/3137372e3132342e36342e302f32312d3234203d3e20323632333137.roa
Signing time: Mon 17 Mar 2025 19:10:40 +0000
ROA not before: Mon 17 Mar 2025 19:05:40 +0000
ROA not after: Mon 16 Mar 2026 19:10:40 +0000
asID: 262317
IP address blocks: 177.124.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/719575E8618FCC47BDBFE563F69F5D0962836551.crl
rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/719575E8618FCC47BDBFE563F69F5D0962836551.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/719575E8618FCC47BDBFE563F69F5D0962836551.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 13 Apr 2025 03:43:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:c5:29:a1:06:a2:a7:a9:f3:2e:00:9d:c3:fc:ff:50:71:11:1a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=719575E8618FCC47BDBFE563F69F5D0962836551
Validity
Not Before: Mar 17 19:05:40 2025 GMT
Not After : Mar 16 19:10:40 2026 GMT
Subject: CN=B71D36F1498CA65801BBE28028DB289481D105BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:49:45:cb:21:d4:2c:ab:f7:01:7c:48:d9:
a1:98:e8:df:af:5a:2e:99:94:1a:de:c2:b6:99:0d:
9e:b4:10:34:76:99:93:eb:f5:91:63:23:86:0b:9f:
7c:5a:27:d1:27:1c:04:b0:a5:2c:2e:5f:b6:12:59:
cc:0c:4f:06:e6:06:52:59:f5:15:d3:8c:5e:1f:24:
4c:1a:57:b5:2d:a4:6b:f9:88:77:11:15:73:ef:0a:
9b:0c:fe:f3:3a:95:df:88:c2:2f:04:e0:44:9f:a6:
74:cd:15:0d:b8:d5:69:2a:23:0b:06:80:12:5f:93:
ea:e3:5e:c3:ce:be:6e:34:5a:11:c3:91:85:7a:4e:
82:f3:98:13:40:69:aa:60:7f:cf:f1:1b:05:61:87:
fd:92:87:5b:ae:03:90:1b:ed:fc:d1:5b:11:6d:f1:
a8:d2:33:d5:e2:f7:f0:d7:3e:47:a4:28:2c:07:ca:
6e:1d:93:d7:05:97:68:6d:9f:0e:db:51:0c:8f:47:
60:70:e4:23:16:4f:65:24:6c:ee:27:e8:b9:0c:70:
ae:5c:70:bd:02:a0:10:f3:d8:2a:f8:9b:48:cd:70:
7c:53:b6:78:07:81:4a:9c:8a:dd:e5:46:83:7e:b4:
c5:b2:16:c7:85:cf:e3:91:20:d4:7a:84:77:ba:f4:
5e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1D:36:F1:49:8C:A6:58:01:BB:E2:80:28:DB:28:94:81:D1:05:BB
X509v3 Authority Key Identifier:
keyid:71:95:75:E8:61:8F:CC:47:BD:BF:E5:63:F6:9F:5D:09:62:83:65:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/719575E8618FCC47BDBFE563F69F5D0962836551.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/719575E8618FCC47BDBFE563F69F5D0962836551.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/3137372e3132342e36342e302f32312d3234203d3e20323632333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.124.64.0/21
Signature Algorithm: sha256WithRSAEncryption
08:1f:08:15:2d:f0:d0:d2:d8:92:ac:c1:1a:ef:19:88:36:9c:
14:7f:a8:88:a3:31:d1:c2:b2:0c:5b:1e:eb:29:43:c3:16:c1:
d0:b4:a5:e2:54:ce:bd:dd:b5:03:a7:a6:8a:57:ef:c6:dc:3f:
93:ff:5d:3b:5a:f2:8a:77:f3:05:e4:84:ef:4e:42:9d:0c:f0:
10:d3:4e:d2:5b:9b:76:0d:cb:4e:44:c3:4a:6c:83:d1:71:54:
61:2d:7f:48:e4:45:48:f2:88:9f:42:81:d1:b7:95:69:93:69:
39:19:d2:51:28:22:ee:cd:45:8c:3d:71:ee:57:fc:84:dc:96:
12:ff:3f:df:3e:e0:f6:01:36:51:9e:2d:7a:3d:e9:01:50:04:
59:2a:93:b2:dc:84:da:44:ff:32:3e:df:72:f4:30:b1:37:c2:
49:80:d7:73:04:78:fd:3e:a1:1d:12:43:ea:ec:92:14:df:df:
d0:0c:d2:ef:b5:96:c0:a5:bd:6d:2b:7f:04:fa:d2:c0:1a:e1:
e6:8e:78:b4:c5:ef:9a:0f:ed:50:64:2b:53:cd:dd:4a:15:3d:
4e:39:28:46:d5:7b:72:33:bd:54:14:81:f7:b1:1d:d4:f1:c7:
1e:57:04:78:af:79:25:af:89:b8:18:38:8e:e9:d2:e7:12:fa:
2b:d5:d1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:32:50 2025 by rpki-client