Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3133312e3139362e3133322e302f32322d3234203d3e20323635393238.roa
File: 3133312e3139362e3133322e302f32322d3234203d3e20323635393238.roa (raw, json)
Hash identifier: Orbb6MeNodxx3916UDCrBEg7Fpk2zV0yU2VrzE/g0s8=
Subject key identifier: D9:6B:1C:09:C8:73:98:DB:6E:AE:F0:89:AB:7D:26:A2:79:79:DE:AD
Certificate issuer: /CN=B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369
Certificate serial: 30C887A5858E05FB58DF4E97E9A4044C49D86628
Authority key identifier: B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3133312e3139362e3133322e302f32322d3234203d3e20323635393238.roa
Signing time: Thu 19 Dec 2024 19:50:28 +0000
ROA not before: Thu 19 Dec 2024 19:45:28 +0000
ROA not after: Thu 18 Dec 2025 19:50:28 +0000
asID: 265928
IP address blocks: 131.196.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl
rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 11 Apr 2025 22:05:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:c8:87:a5:85:8e:05:fb:58:df:4e:97:e9:a4:04:4c:49:d8:66:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369
Validity
Not Before: Dec 19 19:45:28 2024 GMT
Not After : Dec 18 19:50:28 2025 GMT
Subject: CN=D96B1C09C87398DB6EAEF089AB7D26A27979DEAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b5:c3:68:cf:65:57:e7:7d:29:44:da:47:be:
bf:4a:60:1e:12:68:45:bd:08:59:55:13:7a:58:61:
cb:e5:1a:3d:79:9a:b1:b3:91:cd:00:ed:be:23:33:
38:3b:06:f7:35:26:85:a6:9d:79:c6:54:b5:ac:5e:
1c:7d:92:d1:e2:13:6d:ec:e7:2e:03:5e:a9:27:2c:
86:c8:88:3b:84:57:72:88:63:a0:fb:3e:3e:4d:08:
66:b4:71:7e:90:13:38:72:98:b3:d3:0b:92:76:b6:
74:01:67:a8:26:65:f7:e3:93:92:b9:e2:47:bd:81:
d3:cb:ca:fa:86:4c:88:a6:2d:e1:0c:0c:f6:93:21:
a1:a4:19:35:67:1f:ea:03:af:55:58:35:f9:db:dc:
85:d6:de:91:9e:f8:6a:2a:de:df:44:a7:a8:c2:94:
64:c9:90:04:2f:46:e3:3b:cd:9c:2f:0c:02:c4:e3:
72:64:94:f3:97:15:d7:9d:b0:af:2c:a6:6f:91:ba:
c7:3b:8b:29:8b:ac:86:fc:db:a1:68:f2:cb:de:32:
76:40:4d:53:1c:bb:7c:a3:c4:b7:a7:f6:e9:a3:87:
d3:59:3b:9b:b0:40:cd:e2:a8:6b:61:68:93:b7:ab:
7c:ea:f9:f3:58:e7:e3:02:46:60:27:c0:1e:bd:da:
52:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6B:1C:09:C8:73:98:DB:6E:AE:F0:89:AB:7D:26:A2:79:79:DE:AD
X509v3 Authority Key Identifier:
keyid:B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3133312e3139362e3133322e302f32322d3234203d3e20323635393238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.132.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:20:60:ea:a0:85:74:cd:ab:52:2d:35:a6:16:0e:64:b9:02:
46:4f:d4:d5:40:c8:33:a0:9d:8f:7d:d3:7a:ab:a6:d9:c8:6e:
af:77:d3:64:9d:fb:1f:1f:85:09:9c:ac:33:ff:87:cb:b0:6a:
7c:7d:ab:99:ac:18:81:ef:8d:6b:da:34:cb:da:11:dd:54:00:
d0:8e:32:49:fc:f3:68:72:3a:81:96:6e:03:20:bb:28:5a:1c:
57:22:f8:f4:a8:f8:f9:09:a5:81:b6:95:7a:56:16:55:8b:91:
09:a7:2e:d5:33:07:e9:5b:7c:64:f0:81:2f:02:c3:d8:53:c4:
2e:8e:82:ee:9d:24:21:76:88:5d:c6:ff:b4:9f:48:43:b7:dc:
d4:76:4a:fd:94:88:48:da:a8:ac:79:20:bd:65:47:e4:17:f9:
df:b9:88:99:27:cc:a9:f0:73:d2:a4:87:72:96:21:79:16:be:
9d:d3:e0:0d:8f:23:4c:90:1b:1e:b6:d3:63:3e:94:62:c3:c9:
18:aa:2d:8b:07:1c:2d:42:13:bd:46:7a:22:2b:09:0d:1f:cb:
d4:81:fd:5c:90:05:0c:2d:ce:63:1b:c4:4e:15:93:a2:c1:1d:
30:13:9e:43:39:be:9f:3a:c5:92:a2:90:4c:5e:6b:bb:46:4d:
a9:7f:61:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:21:15 2025 by rpki-client