Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/3138392e33362e3235322e302f32322d3234203d3e20323730373936.roa
File: 3138392e33362e3235322e302f32322d3234203d3e20323730373936.roa (raw, json)
Hash identifier: q/6qUhrGpywsYVU0hghyX+iDJDoyen0tHtGj+/ZKltg=
Subject key identifier: D4:E6:DC:17:0B:7F:71:6D:8C:DC:DE:78:FF:88:BF:63:2F:E4:29:D9
Certificate issuer: /CN=E320B3454EEB8E41FD31C773CF83B3C7CEEA3352
Certificate serial: 56C8A3A1D3F5F0440AB2DA82559A44E3FC501281
Authority key identifier: E3:20:B3:45:4E:EB:8E:41:FD:31:C7:73:CF:83:B3:C7:CE:EA:33:52
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/3138392e33362e3235322e302f32322d3234203d3e20323730373936.roa
Signing time: Thu 06 Mar 2025 06:52:15 +0000
ROA not before: Thu 06 Mar 2025 06:47:15 +0000
ROA not after: Thu 05 Mar 2026 06:52:15 +0000
asID: 270796
IP address blocks: 189.36.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.crl
rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 27 Apr 2025 02:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:c8:a3:a1:d3:f5:f0:44:0a:b2:da:82:55:9a:44:e3:fc:50:12:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E320B3454EEB8E41FD31C773CF83B3C7CEEA3352
Validity
Not Before: Mar 6 06:47:15 2025 GMT
Not After : Mar 5 06:52:15 2026 GMT
Subject: CN=D4E6DC170B7F716D8CDCDE78FF88BF632FE429D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d9:d5:3d:3b:c3:0c:08:fc:d4:c5:d5:2d:25:
f9:70:1b:fd:94:12:f5:3f:71:b8:78:f1:00:75:2e:
85:70:49:ca:92:7a:cc:6b:cf:cc:c8:39:10:43:e4:
57:2b:07:4b:54:64:e7:45:50:46:31:77:ef:4d:c0:
de:cd:24:d5:5a:23:ec:6a:51:52:78:db:db:12:2d:
0e:be:12:2d:f0:d2:d9:3a:bc:3c:d3:45:eb:2a:b3:
5a:72:b4:8c:7d:7d:72:7c:2d:1e:dd:02:26:c1:1d:
b9:22:58:e4:f4:f0:22:bc:79:53:18:88:1d:42:bd:
0e:55:f0:e6:1e:9c:c7:b9:dd:1b:85:58:88:85:a4:
cc:de:8b:10:e5:76:7e:82:a4:b3:8f:9f:97:ab:e3:
b0:50:53:31:cf:4e:0d:b7:2b:6d:01:bc:19:21:f6:
2e:53:40:7a:1b:ba:d5:e8:d6:45:33:e2:af:ec:74:
c8:10:26:94:d7:13:0e:7b:88:07:d3:a8:ea:6a:6b:
3a:b6:b4:70:93:39:86:8c:d8:c9:83:4c:cb:dc:d3:
ab:09:35:06:1b:db:0a:d6:85:07:cf:68:f2:55:68:
16:9c:66:7d:3d:9b:3d:f7:44:26:2b:19:b3:7b:ec:
df:5d:dc:b2:5f:3d:1e:d9:d5:7c:3b:49:49:db:cc:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E6:DC:17:0B:7F:71:6D:8C:DC:DE:78:FF:88:BF:63:2F:E4:29:D9
X509v3 Authority Key Identifier:
keyid:E3:20:B3:45:4E:EB:8E:41:FD:31:C7:73:CF:83:B3:C7:CE:EA:33:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/3138392e33362e3235322e302f32322d3234203d3e20323730373936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.36.252.0/22
Signature Algorithm: sha256WithRSAEncryption
89:23:29:75:69:53:ac:02:5e:22:cb:98:d9:5d:60:bf:fc:a0:
96:f1:6c:90:05:e4:ab:4c:f1:e2:a4:92:4f:e8:00:57:68:03:
31:c8:cb:5d:4b:b5:cb:1c:eb:26:01:13:90:55:0f:58:73:93:
df:b0:c6:83:d6:2a:00:6c:f1:b3:a1:04:41:86:88:1b:3c:f8:
94:f8:bd:52:7b:c2:2e:72:af:dd:09:ba:cf:d0:0e:28:4b:49:
6d:77:03:7b:03:51:d8:52:8a:f5:11:22:07:ee:7f:2e:30:09:
f1:79:68:19:33:47:59:26:c5:8a:90:fa:89:9f:7b:18:ba:81:
c3:f9:01:6e:be:93:75:d5:40:18:8a:5e:48:9a:61:45:2a:16:
a9:f4:81:6f:10:a6:aa:2d:81:d1:bf:d0:b3:8f:ac:f3:9b:61:
c4:06:9d:be:88:a3:8d:23:b0:4c:9e:c8:a0:03:1c:77:fc:5c:
bf:8a:fe:63:69:4d:f0:8f:4e:9c:90:fe:28:71:4c:b7:e7:60:
4f:7f:c0:f8:78:cb:86:53:4e:6d:95:18:6b:de:11:d1:17:cf:
7b:9e:4e:6f:0e:9f:98:35:3f:12:cf:a2:5e:71:82:cb:e3:83:
25:97:3b:0a:2f:25:64:15:68:8e:93:aa:b9:1a:32:68:ea:6e:
a4:b6:85:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:45:15 2025 by rpki-client