Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231342e302f32342d3234203d3e203532363835.roa
File: 3137372e3133362e3231342e302f32342d3234203d3e203532363835.roa (raw, json)
Hash identifier: 0/wQBJ27s8Qg5HAPRi1Y56ge8tTexGDDVKFkgslpHR4=
Subject key identifier: 44:10:58:E4:48:F6:96:62:98:05:AC:E0:11:B5:DC:80:07:C4:E7:B4
Certificate issuer: /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial: 7197B4E44ABA8C3D9BA1265C9C9D46D9F6754E21
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231342e302f32342d3234203d3e203532363835.roa
Signing time: Wed 05 Mar 2025 20:59:43 +0000
ROA not before: Wed 05 Mar 2025 20:54:43 +0000
ROA not after: Wed 04 Mar 2026 20:59:43 +0000
asID: 52685
IP address blocks: 177.136.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 12 Apr 2025 04:55:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:97:b4:e4:4a:ba:8c:3d:9b:a1:26:5c:9c:9d:46:d9:f6:75:4e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Validity
Not Before: Mar 5 20:54:43 2025 GMT
Not After : Mar 4 20:59:43 2026 GMT
Subject: CN=441058E448F696629805ACE011B5DC8007C4E7B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:09:30:c3:ee:11:27:e0:6a:e6:ea:5e:82:
06:a7:24:59:fe:9a:f5:c8:2e:68:d5:23:30:9e:6e:
1a:78:ea:79:45:4e:9b:c1:86:44:48:33:f4:4a:67:
62:97:ea:82:48:65:98:bc:4c:b2:f3:a5:68:e4:0f:
83:0f:94:00:e2:de:e6:4e:f6:88:68:8b:31:6f:f7:
44:ae:28:21:0e:8c:3e:4a:69:14:75:2e:60:83:34:
15:bf:f9:a2:1a:32:60:a4:59:4c:fe:c3:17:43:80:
64:31:dc:24:0e:8c:76:03:3f:17:92:b1:92:dd:4e:
8b:3a:ff:1e:ab:9f:0e:4a:97:24:69:c6:56:22:88:
25:8b:62:2a:a7:35:2d:e8:36:8c:8b:c3:b7:e8:96:
c7:45:88:8d:8d:07:79:11:7d:b0:0f:0a:04:ec:69:
d7:8d:d2:34:c9:53:c7:60:d0:0a:1c:b4:46:3b:4b:
b5:f1:24:49:08:5f:d2:7c:af:ec:57:b7:9a:cc:72:
9b:20:03:f6:82:f4:2a:e6:43:7a:34:87:9d:cc:b0:
fa:6d:e7:a5:60:26:07:b1:10:d8:67:7a:5e:21:d0:
79:51:3e:70:15:f6:1d:fe:2f:be:f2:09:71:41:0e:
42:2f:24:ea:9a:4c:9e:be:6e:48:92:61:17:31:b4:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:10:58:E4:48:F6:96:62:98:05:AC:E0:11:B5:DC:80:07:C4:E7:B4
X509v3 Authority Key Identifier:
keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231342e302f32342d3234203d3e203532363835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.136.214.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:58:0f:0a:76:b6:4c:2f:cd:28:97:9e:f7:d7:f1:09:2c:7d:
2b:50:b2:1d:33:2b:2e:65:87:dd:db:de:c5:a6:15:97:a6:01:
6d:82:79:4b:f0:77:92:22:9d:8a:b5:1d:49:30:aa:29:00:05:
aa:ed:60:38:71:85:74:27:dc:4a:ff:73:b0:92:fa:57:4f:50:
48:29:f5:37:7f:2e:09:ae:3f:a8:ac:b9:1b:92:84:ed:6e:51:
c2:21:32:02:10:24:73:30:c4:26:29:48:f8:b7:44:6a:cc:af:
a6:cb:d0:f0:61:c2:48:bf:c6:a7:d2:9e:6d:2f:17:96:99:ac:
76:63:c6:b0:9f:5f:60:f2:5c:2c:3d:f3:85:bb:fe:7f:56:15:
1c:c7:c1:31:14:d3:5d:f0:96:60:d7:b3:e5:ef:24:70:90:ac:
16:7f:89:dd:f7:a3:ce:86:21:df:6e:c8:57:08:23:79:4f:1e:
ac:33:a1:22:1c:96:07:74:2e:82:0e:86:de:69:cb:0b:71:23:
db:2a:d5:60:62:d4:c9:b7:66:22:dd:a2:e9:e9:3a:c3:14:c0:
9f:c8:bc:21:85:0f:2a:ef:54:c5:fd:63:d1:27:0d:52:d1:59:
89:a6:6d:76:31:d1:ff:cb:32:13:1b:3c:d6:42:b2:92:0a:e4:
3a:cc:11:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:17 2025 by rpki-client