Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3134382e302f32322d3232203d3e20323633363530.roa
File: 3133382e3235352e3134382e302f32322d3232203d3e20323633363530.roa (raw, json)
Hash identifier: LXRmb4zfD6o3B7/VmuFOKShUsVwwF+Iq5iC0r91FsZM=
Subject key identifier: 73:76:5C:BA:5A:DE:27:7F:0E:A0:12:5E:83:B7:42:05:3D:E3:C0:11
Certificate issuer: /CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
Certificate serial: 06221AB455B1192085117F88E72729DE8D3812F4
Authority key identifier: A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3134382e302f32322d3232203d3e20323633363530.roa
Signing time: Thu 06 Mar 2025 22:10:33 +0000
ROA not before: Thu 06 Mar 2025 22:05:33 +0000
ROA not after: Thu 05 Mar 2026 22:10:33 +0000
asID: 263650
IP address blocks: 138.255.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl
rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 16:40:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:22:1a:b4:55:b1:19:20:85:11:7f:88:e7:27:29:de:8d:38:12:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
Validity
Not Before: Mar 6 22:05:33 2025 GMT
Not After : Mar 5 22:10:33 2026 GMT
Subject: CN=73765CBA5ADE277F0EA0125E83B742053DE3C011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:a9:38:44:81:4d:84:45:ed:e1:92:8a:2e:
77:bd:b9:65:ae:04:de:b1:d2:1e:eb:4b:72:63:d3:
7b:4a:28:99:3f:89:a8:e6:87:ed:1c:b2:d9:e1:49:
54:56:b4:64:ee:0b:1b:d3:4e:91:a6:1b:47:00:ed:
99:58:09:c7:aa:e2:5c:b4:0c:dd:c8:f4:e1:a8:c1:
31:1c:8c:de:08:55:f7:89:3d:26:2b:0a:3b:bd:3f:
20:a3:02:4f:b8:a4:f4:25:9c:07:65:f8:a9:31:ce:
99:27:44:61:d2:9e:29:65:e6:7b:ed:9d:92:94:f8:
3c:25:4e:72:b5:f7:49:60:d8:e4:80:c0:51:79:9b:
1e:29:f9:03:b7:9a:29:1b:07:3a:95:7e:ce:42:38:
78:d3:ed:48:87:0f:10:4b:30:c2:9b:a5:01:fe:71:
c2:81:e5:62:d5:00:74:d2:cd:ac:7a:80:c5:43:16:
26:0f:26:8a:fb:34:c2:c8:a3:12:28:7f:11:f9:d2:
5f:6f:10:11:12:5d:01:f8:93:91:31:2c:ad:2a:13:
c8:0b:47:30:89:68:6c:93:a4:81:1e:97:4d:72:ca:
f8:90:34:45:97:8d:55:67:a9:bf:79:75:0d:14:55:
1f:32:c2:2c:01:a7:62:53:da:47:16:aa:ff:dd:3c:
92:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:76:5C:BA:5A:DE:27:7F:0E:A0:12:5E:83:B7:42:05:3D:E3:C0:11
X509v3 Authority Key Identifier:
keyid:A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3134382e302f32322d3232203d3e20323633363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.148.0/22
Signature Algorithm: sha256WithRSAEncryption
57:07:c4:8e:87:8a:a8:46:e7:f4:2e:99:1d:68:15:ff:39:30:
11:e5:92:b5:6b:f9:75:96:01:3c:8f:ba:c1:77:a1:b3:f8:a1:
e0:f5:12:fd:b6:b8:15:9b:23:7c:d2:5c:d8:dd:3a:4f:35:cf:
60:d5:17:a8:53:c3:77:72:e5:17:7f:a8:32:06:90:2b:74:3d:
44:90:e3:5e:a3:e0:4d:3d:0e:97:53:5c:63:82:d8:27:a5:09:
21:2b:59:e4:a6:90:f0:d3:51:5e:b0:e4:49:3f:3d:56:e3:59:
f1:8d:ad:08:d8:24:71:09:aa:0e:cd:78:a9:83:08:c9:ff:9d:
17:6a:0a:86:83:17:31:8a:b3:88:ce:52:0d:17:7d:a0:f3:fc:
17:40:22:2e:6c:34:67:e1:a2:2f:5e:5f:e6:38:13:1c:1d:32:
a9:e7:c1:ee:4a:c8:bb:df:c7:0c:52:4f:b6:72:d0:a0:e9:b8:
9f:e1:ca:a5:e1:ac:c4:73:47:4f:c4:37:e6:24:a8:b3:3d:36:
09:38:99:57:f8:d3:80:44:dd:18:f3:7b:10:98:db:cb:fd:a2:
32:56:bb:93:82:00:3b:ee:fc:34:35:7f:5f:de:98:9e:49:26:
96:9a:e5:35:50:19:54:c9:75:d4:22:42:e1:e4:ac:fa:70:ce:
78:75:e2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:17:55 2025 by rpki-client