Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232302e302f32332d3233203d3e20323634393135.roa
File: 3136382e3232382e3232302e302f32332d3233203d3e20323634393135.roa (raw, json)
Hash identifier: n+cJqzqWVFKkRVzRmLDPjpq0wcrOjXgEyRRcFM0W5B4=
Subject key identifier: A0:E8:9E:77:AD:24:5B:44:FC:3A:E8:FC:AF:CF:46:65:70:25:C1:95
Certificate issuer: /CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
Certificate serial: 76FD9A04DAE68758587551E4E1E6F5C0D149CFD0
Authority key identifier: DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232302e302f32332d3233203d3e20323634393135.roa
Signing time: Thu 13 Mar 2025 18:14:28 +0000
ROA not before: Thu 13 Mar 2025 18:09:28 +0000
ROA not after: Thu 12 Mar 2026 18:14:28 +0000
asID: 264915
IP address blocks: 168.228.220.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.crl
rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 14:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:fd:9a:04:da:e6:87:58:58:75:51:e4:e1:e6:f5:c0:d1:49:cf:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
Validity
Not Before: Mar 13 18:09:28 2025 GMT
Not After : Mar 12 18:14:28 2026 GMT
Subject: CN=A0E89E77AD245B44FC3AE8FCAFCF46657025C195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:14:fe:b1:86:a2:5a:36:c9:02:c9:a4:b6:
4b:95:a2:85:66:16:7f:d7:4e:35:62:d0:51:94:1c:
33:36:74:33:ba:2e:54:51:78:75:63:03:3e:d8:e9:
67:ef:c2:35:9c:98:af:23:c4:3a:52:85:6a:f3:29:
c2:5a:7d:f9:c8:6f:52:14:00:da:e5:a6:7c:e6:38:
f8:3e:a7:fe:0d:d5:a9:08:8d:da:db:0d:45:7d:6e:
0f:36:47:20:a7:fd:da:73:d1:ca:43:1e:87:d8:d2:
da:cc:2f:07:f2:ae:a8:c4:5a:01:21:48:50:6f:01:
3b:09:80:30:92:82:c7:f8:fd:2d:ea:5c:88:cb:64:
7b:cd:b4:27:a9:23:82:a3:f9:e6:b4:7f:30:eb:08:
bf:a2:1e:ba:c3:72:2e:0a:b7:51:0d:7c:d8:e7:61:
75:89:72:83:fd:a8:d3:e7:cd:81:b6:61:f2:8e:93:
5a:55:23:12:e0:f4:35:ba:9a:01:46:e4:b8:c0:54:
e6:d4:30:5b:63:ee:47:b0:60:92:ba:ec:1a:08:a6:
bb:e4:06:5f:f1:fb:10:1e:ff:e3:ac:fd:7c:75:37:
7d:38:45:a7:0a:65:bc:c7:2b:65:69:26:bf:b4:39:
95:57:63:18:e3:18:05:7d:91:f1:4c:40:d8:e4:c8:
b9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E8:9E:77:AD:24:5B:44:FC:3A:E8:FC:AF:CF:46:65:70:25:C1:95
X509v3 Authority Key Identifier:
keyid:DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232302e302f32332d3233203d3e20323634393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.220.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:9f:68:0b:03:59:05:b9:34:60:0f:2f:15:1d:29:76:b5:da:
e2:c2:f9:8e:a6:ad:49:13:15:fb:1e:ba:3c:1b:28:e9:b8:95:
c5:35:cf:bb:a8:9b:a9:57:d3:92:ad:f9:93:74:c6:d0:03:4c:
cb:36:29:84:ca:d6:3c:33:aa:10:d2:6f:ca:d1:8a:22:18:7c:
f9:cd:54:23:59:2e:8c:19:82:1b:1b:6b:24:6c:3f:61:ae:c3:
2a:25:10:6f:7a:11:24:42:69:99:d8:51:be:f6:f3:8b:f9:38:
c1:57:36:ad:95:d6:1a:9e:42:d1:f9:e6:b3:d3:0d:b1:f7:af:
29:06:bb:48:53:c5:4e:61:02:28:3e:4f:4f:b7:97:c8:3a:07:
5c:7e:52:20:8d:1b:16:99:bc:a2:d8:cf:4c:cd:ad:60:5a:fe:
97:86:4f:54:4a:16:e7:05:97:92:19:9d:13:82:17:bf:68:32:
bb:b4:42:a8:66:93:cb:66:b3:e7:3a:ad:9c:e9:8a:59:72:94:
64:e5:92:87:fe:2f:4e:48:56:ee:20:c2:7b:d1:0c:9e:7d:84:
54:43:64:6a:e3:89:c7:ac:ba:ad:a1:81:97:09:8c:19:2f:5d:
51:29:4b:bd:2f:c3:3a:94:b6:22:f4:b0:a9:3f:d2:bf:3f:db:
d0:50:46:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 22:09:55 2025 by rpki-client