Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3137302e38322e3131392e302f32342d3332203d3e20323633343234.roa
File: 3137302e38322e3131392e302f32342d3332203d3e20323633343234.roa (raw, json)
Hash identifier: SOwLUhw4kUcSjTYAGTcyYgu6fzv7HyAAZQdW7ptHizE=
Subject key identifier: B4:29:53:DF:7A:D8:DB:EB:4B:5A:DC:B6:3F:B6:AE:61:34:7B:BE:CB
Certificate issuer: /CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
Certificate serial: 336CCDF269C79621423BDAD9EE5D197975A1F758
Authority key identifier: 69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3137302e38322e3131392e302f32342d3332203d3e20323633343234.roa
Signing time: Wed 26 Mar 2025 11:43:38 +0000
ROA not before: Wed 26 Mar 2025 11:38:38 +0000
ROA not after: Wed 25 Mar 2026 11:43:38 +0000
asID: 263424
IP address blocks: 170.82.119.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl
rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:6c:cd:f2:69:c7:96:21:42:3b:da:d9:ee:5d:19:79:75:a1:f7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
Validity
Not Before: Mar 26 11:38:38 2025 GMT
Not After : Mar 25 11:43:38 2026 GMT
Subject: CN=B42953DF7AD8DBEB4B5ADCB63FB6AE61347BBECB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:78:fc:f0:fd:62:2a:b7:33:27:76:14:1d:
f1:e7:47:b4:a4:c6:29:cf:0f:d4:c5:8e:bd:a2:52:
40:60:3c:aa:28:7a:ee:6c:cb:5c:2a:33:dc:7f:47:
60:d7:c7:7c:25:63:7f:b6:0a:78:1d:a2:e7:98:fa:
d1:c0:15:b7:15:39:8a:ef:fb:36:e0:3f:31:c3:5c:
dd:d7:62:1e:31:1c:a6:46:cf:54:37:62:7d:03:a3:
5c:a1:7d:c6:7c:ec:8e:f4:f2:9b:b8:ba:43:2d:1d:
fb:30:2d:0f:70:29:f2:84:6d:0c:a6:37:61:80:52:
44:8b:62:80:92:45:38:65:3c:d2:c4:4e:69:0d:16:
ff:97:06:ff:46:6b:65:cd:e9:33:3b:97:12:d0:8a:
28:ca:af:91:c0:19:f1:8e:4e:1a:5f:38:03:d8:a6:
bb:88:83:92:c1:80:5b:de:bc:d7:c3:da:17:fa:e2:
e9:e4:c9:36:cc:8d:ae:66:bb:45:8a:51:64:d9:db:
61:cd:ed:fe:e7:05:d1:d5:39:80:3b:61:06:5e:4d:
bb:4e:cb:20:f8:28:e3:d0:5e:a0:06:3b:99:9a:a5:
5e:2e:6a:57:ee:d1:80:a6:41:9e:6e:ab:bd:84:a9:
9f:73:ef:54:2e:84:ca:e3:d3:5d:6f:8a:da:3f:a4:
a0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:29:53:DF:7A:D8:DB:EB:4B:5A:DC:B6:3F:B6:AE:61:34:7B:BE:CB
X509v3 Authority Key Identifier:
keyid:69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3137302e38322e3131392e302f32342d3332203d3e20323633343234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.119.0/24
Signature Algorithm: sha256WithRSAEncryption
33:4b:ff:c8:fd:57:ad:87:13:55:43:e8:a2:65:30:4c:fa:3b:
58:e7:68:32:79:89:86:9b:ae:7c:87:e1:2d:12:1a:5e:60:a0:
e4:1f:4c:ad:4d:fe:99:8b:ca:7c:d7:5e:74:88:d0:cb:08:72:
ac:fe:3c:0e:ef:11:7f:d5:58:8a:94:32:b4:e7:b1:e1:fd:26:
40:fb:e1:cb:b4:3d:ab:2f:e7:b5:37:04:df:51:49:30:bd:d4:
14:6b:64:fe:11:8b:f0:ce:7b:c3:c6:d4:9e:48:0d:e2:52:9d:
65:b6:f1:81:c3:b5:dc:e4:34:8e:b6:0c:7b:3a:b4:7f:1b:68:
ff:11:e4:e3:ab:6d:56:40:e6:1a:63:53:1d:c3:ee:a5:41:70:
84:55:e9:79:ce:67:e6:b1:88:e6:f0:6b:0b:0f:8a:f4:4f:17:
e2:b5:8a:9c:3e:85:c2:7c:c4:d4:d4:cf:43:d3:b9:6c:9c:33:
2c:f8:1d:a3:c8:ef:07:88:99:4f:92:28:f2:31:c7:e8:2e:a9:
b7:01:01:2f:e9:a8:ca:79:83:13:c7:82:ef:a1:63:10:1a:8e:
21:12:5b:ba:81:4d:8b:c2:db:fc:f5:fd:39:7b:3b:2d:96:31:
19:f9:c1:c6:68:3a:3c:07:b5:18:65:03:49:d1:f8:3a:4f:36:
f8:5c:44:47
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUM2zN8mnHliFCO9rZ7l0ZeXWh91gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk1QTI4RkMxMzNFQjU0MDhCOUJBMTI2RDlGRkUyMDg4
NEVERUNEMjAeFw0yNTAzMjYxMTM4MzhaFw0yNjAzMjUxMTQzMzhaMDMxMTAvBgNV
BAMTKEI0Mjk1M0RGN0FEOERCRUI0QjVBRENCNjNGQjZBRTYxMzQ3QkJFQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3pHj88P1iKrczJ3YUHfHnR7Sk
xinPD9TFjr2iUkBgPKooeu5sy1wqM9x/R2DXx3wlY3+2CngdoueY+tHAFbcVOYrv
+zbgPzHDXN3XYh4xHKZGz1Q3Yn0Do1yhfcZ87I708pu4ukMtHfswLQ9wKfKEbQym
N2GAUkSLYoCSRThlPNLETmkNFv+XBv9Ga2XN6TM7lxLQiijKr5HAGfGOThpfOAPY
pruIg5LBgFvevNfD2hf64unkyTbMja5mu0WKUWTZ22HN7f7nBdHVOYA7YQZeTbtO
yyD4KOPQXqAGO5mapV4ualfu0YCmQZ5uq72EqZ9z71QuhMrj011vito/pKB/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtClT33rY2+tLWty2P7auYTR7vsswHwYDVR0j
BBgwFoAUaVoo/BM+tUCLm6Em2f/iCITt7NIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUhFWVJMOHlrV3hBNWFNMnZqbjdqWTI1WHYzYnF2bXk5dGlnRkJOcVJr
TjgvMi82OTVBMjhGQzEzM0VCNTQwOEI5QkExMjZEOUZGRTIwODg0RURFQ0QyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5NUEyOEZDMTMzRUI1NDA4
QjlCQTEyNkQ5RkZFMjA4ODRFREVDRDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVIRVlSTDh5a1d4QTVhTTJ2am43alkyNVh2M2Jxdm15OXRpZ0ZCTnFSa044LzIv
MzEzNzMwMmUzODMyMmUzMTMxMzkyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM2
MzMzNDMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqUncwDQYJKoZIhvcNAQELBQADggEBADNL/8j9
V62HE1VD6KJlMEz6O1jnaDJ5iYabrnyH4S0SGl5goOQfTK1N/pmLynzXXnSI0MsI
cqz+PA7vEX/VWIqUMrTnseH9JkD74cu0Pasv57U3BN9RSTC91BRrZP4Ri/DOe8PG
1J5IDeJSnWW28YHDtdzkNI62DHs6tH8baP8R5OOrbVZA5hpjUx3D7qVBcIRV6XnO
Z+axiObwawsPivRPF+K1ipw+hcJ8xNTUz0PTuWycMyz4HaPI7weImU+SKPIxx+gu
qbcBAS/pqMp5gxPHgu+hYxAajiESW7qBTYvC2/z1/Tl7Oy2WMRn5wcZoOjwHtRhl
A0nR+DpPNvhcREc=
-----END CERTIFICATE-----
Generated at Sun Apr 13 19:49:57 2025 by rpki-client