Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231342e302f32332d3233203d3e203532363835.roa
File: 3137372e3133362e3231342e302f32332d3233203d3e203532363835.roa (raw, json)
Hash identifier: nFLHRudGZwA3HQtvI/5BwGRmGesptO/gK/mJdruQFN4=
Subject key identifier: C8:25:4F:DE:32:A1:9C:2D:42:F2:35:F3:D6:14:04:B1:2D:1A:FD:B5
Certificate issuer: /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial: 58299F89C707E497B2CD31E5AA2CE78A22CCBA32
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231342e302f32332d3233203d3e203532363835.roa
Signing time: Wed 05 Mar 2025 20:59:42 +0000
ROA not before: Wed 05 Mar 2025 20:54:42 +0000
ROA not after: Wed 04 Mar 2026 20:59:42 +0000
asID: 52685
IP address blocks: 177.136.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 12 Apr 2025 04:55:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:29:9f:89:c7:07:e4:97:b2:cd:31:e5:aa:2c:e7:8a:22:cc:ba:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Validity
Not Before: Mar 5 20:54:42 2025 GMT
Not After : Mar 4 20:59:42 2026 GMT
Subject: CN=C8254FDE32A19C2D42F235F3D61404B12D1AFDB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:87:05:53:06:f6:ab:bf:22:b6:76:0d:3b:85:
9d:fe:8b:3b:0b:b1:90:8d:54:b0:3f:8f:ef:8c:ef:
f5:2d:c8:a9:14:4c:62:08:b8:9a:83:11:6a:1a:5b:
13:3b:73:93:d1:7f:61:28:ae:13:8c:26:f9:f2:bc:
7b:9a:c0:78:8f:aa:86:1c:a6:d0:3f:be:cf:49:3d:
1f:e1:97:01:2c:c8:fe:51:0e:a8:89:3b:e1:f7:f2:
6b:7a:35:d2:e4:4e:b8:02:aa:50:0b:03:e0:b8:11:
e9:d6:e0:00:b9:1b:79:4b:4c:06:b7:45:21:69:63:
c0:d6:6b:34:b7:b5:6e:c9:d0:e3:05:f8:c9:8e:91:
10:3b:21:28:a0:dd:b2:46:a5:5e:09:9f:33:d4:b6:
90:b0:31:6f:04:a8:70:ce:bf:80:25:b7:33:ee:5d:
86:65:33:6f:8a:38:87:59:4c:b0:0d:af:6e:d9:9d:
d8:51:89:b7:5d:bb:ec:f6:2e:2e:3e:9f:3d:7a:ef:
46:72:6c:21:16:59:ed:54:c5:c9:59:59:87:3d:ba:
1b:15:85:a5:fc:74:cd:95:34:8a:87:a7:39:9c:2a:
ba:b8:1e:60:e0:de:16:89:12:39:15:55:fd:1d:47:
cb:df:2d:96:fe:34:ea:b7:1d:f5:bd:1e:59:c5:46:
6d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:25:4F:DE:32:A1:9C:2D:42:F2:35:F3:D6:14:04:B1:2D:1A:FD:B5
X509v3 Authority Key Identifier:
keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231342e302f32332d3233203d3e203532363835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.136.214.0/23
Signature Algorithm: sha256WithRSAEncryption
16:5f:02:8d:a5:29:ec:4b:14:79:50:00:3a:9f:3d:f3:51:1c:
c6:3b:bf:20:0e:b2:14:b8:d4:8f:f3:fc:38:90:33:15:85:49:
33:b2:d7:71:8c:c8:34:08:d6:74:0f:1c:a9:f8:24:c8:ac:5d:
ca:8f:09:5d:49:2d:f3:a8:93:f5:99:dc:c1:55:b0:97:24:2d:
3c:91:20:82:d9:12:91:ac:0a:54:92:f0:16:9a:13:58:55:b7:
b9:3c:76:98:ee:21:c8:f5:d3:6b:c1:23:ca:91:7d:46:e6:00:
80:cc:72:93:3f:bd:62:f7:d6:a2:91:00:1c:97:a6:d0:d8:73:
1b:0c:5d:f6:d1:c3:88:84:d4:1a:cd:94:aa:cf:38:bb:1e:65:
46:3f:12:b3:95:c4:41:9c:f3:29:29:2f:18:7a:88:7a:a8:a0:
dd:ce:5c:e5:f1:3d:d6:9a:4b:e9:c1:57:ed:ac:95:e1:4d:8a:
d6:d9:60:90:7e:5d:9b:93:43:07:c7:47:bc:fc:6a:9a:46:fc:
2d:2c:2d:32:1c:04:8f:ae:1d:1a:3e:f7:ca:46:1d:8a:b2:12:
63:02:d8:eb:fb:d9:9a:68:46:e1:5f:71:75:78:13:0b:eb:2b:
92:59:ba:f8:c5:59:58:6a:38:73:c8:12:3f:d2:4e:d1:6b:d5:
8c:68:a5:b2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWCmficcH5JeyzTHlqizniiLMujIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhDRjY3NzRCNTJEOEE2MDg3NTIzMDNDMDhEODEzOUFC
QjY5RTNGMDAeFw0yNTAzMDUyMDU0NDJaFw0yNjAzMDQyMDU5NDJaMDMxMTAvBgNV
BAMTKEM4MjU0RkRFMzJBMTlDMkQ0MkYyMzVGM0Q2MTQwNEIxMkQxQUZEQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDghwVTBvarvyK2dg07hZ3+izsL
sZCNVLA/j++M7/UtyKkUTGIIuJqDEWoaWxM7c5PRf2EorhOMJvnyvHuawHiPqoYc
ptA/vs9JPR/hlwEsyP5RDqiJO+H38mt6NdLkTrgCqlALA+C4EenW4AC5G3lLTAa3
RSFpY8DWazS3tW7J0OMF+MmOkRA7ISig3bJGpV4JnzPUtpCwMW8EqHDOv4AltzPu
XYZlM2+KOIdZTLANr27ZndhRibddu+z2Li4+nz1670ZybCEWWe1UxclZWYc9uhsV
haX8dM2VNIqHpzmcKrq4HmDg3haJEjkVVf0dR8vfLZb+NOq3HfW9HlnFRm05AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyCVP3jKhnC1C8jXz1hQEsS0a/bUwHwYDVR0j
BBgwFoAUOM9ndLUtimCHUjA8CNgTmrtp4/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxREpGcTZ4WFd5QTduV041RkdnOE53RXNmWG5tWEtqS2d6bVNBVFBz
THQvMS8zOENGNjc3NEI1MkQ4QTYwODc1MjMwM0MwOEQ4MTM5QUJCNjlFM0YwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4Q0Y2Nzc0QjUyRDhBNjA4
NzUyMzAzQzA4RDgxMzlBQkI2OUUzRjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MURKRnE2eFhXeUE3bldONUZHZzhOd0VzZlhubVhLaktnem1TQVRQc0x0LzEv
MzEzNzM3MmUzMTMzMzYyZTMyMzEzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzNjM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxiNYwDQYJKoZIhvcNAQELBQADggEBABZfAo2l
KexLFHlQADqfPfNRHMY7vyAOshS41I/z/DiQMxWFSTOy13GMyDQI1nQPHKn4JMis
XcqPCV1JLfOok/WZ3MFVsJckLTyRIILZEpGsClSS8BaaE1hVt7k8dpjuIcj102vB
I8qRfUbmAIDMcpM/vWL31qKRAByXptDYcxsMXfbRw4iE1BrNlKrPOLseZUY/ErOV
xEGc8ykpLxh6iHqooN3OXOXxPdaaS+nBV+2sleFNitbZYJB+XZuTQwfHR7z8appG
/C0sLTIcBI+uHRo+98pGHYqyEmMC2Ov72ZpoRuFfcXV4EwvrK5JZuvjFWVhqOHPI
Ej/STtFr1YxopbI=
-----END CERTIFICATE-----
Generated at Fri Apr 11 20:46:39 2025 by rpki-client