Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/3133382e302e3133352e302f32342d3234203d3e20323634353437.roa
File: 3133382e302e3133352e302f32342d3234203d3e20323634353437.roa (raw, json)
Hash identifier: 3GfF9/keOxONrG5saKxKuNHrqS76c3fizCCjgZkOCfQ=
Subject key identifier: 29:0B:D5:61:79:D2:D0:99:41:82:F1:8B:ED:60:99:31:EA:DD:C5:7D
Certificate issuer: /CN=464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC
Certificate serial: 721299B7BC99AAD8CBDF5FD39682D9842187024A
Authority key identifier: 46:4F:7E:BA:13:C4:3D:1F:B8:EA:CC:BC:C0:D4:2E:9A:28:BC:5E:AC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/3133382e302e3133352e302f32342d3234203d3e20323634353437.roa
Signing time: Mon 27 Jan 2025 14:12:00 +0000
ROA not before: Mon 27 Jan 2025 14:07:00 +0000
ROA not after: Mon 26 Jan 2026 14:12:00 +0000
asID: 264547
IP address blocks: 138.0.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.crl
rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 12:39:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:12:99:b7:bc:99:aa:d8:cb:df:5f:d3:96:82:d9:84:21:87:02:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC
Validity
Not Before: Jan 27 14:07:00 2025 GMT
Not After : Jan 26 14:12:00 2026 GMT
Subject: CN=290BD56179D2D0994182F18BED609931EADDC57D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0c:50:ed:b9:32:d8:76:f9:69:63:02:28:4c:
cc:55:15:d6:87:15:98:d9:46:78:23:ba:2c:b7:a7:
4e:1c:21:15:a5:07:b8:31:1f:12:b9:fd:cb:0e:16:
70:68:d7:20:39:dc:a9:51:99:d6:be:df:53:f9:8c:
be:5b:a5:f7:79:a0:e7:e2:6a:f5:e2:c8:6c:48:ce:
2a:1c:df:d9:71:32:84:25:e5:f9:0f:20:65:b8:07:
4f:f4:a9:dc:8e:66:17:71:94:d7:76:ee:34:97:23:
a0:52:9f:10:92:b8:7f:36:4d:a2:7c:eb:a1:c5:af:
67:66:23:87:0a:7a:b5:fb:a3:a3:35:9f:93:5b:89:
c0:b9:a3:9a:1f:23:7f:ad:01:9b:a0:41:fb:71:7a:
5b:43:b1:ec:b5:80:fa:94:cb:b6:a3:73:a8:66:35:
ad:09:0e:3b:bf:ad:42:88:12:5e:93:ee:60:41:33:
a7:6d:87:74:9d:ab:d1:e7:85:20:1c:fd:d9:86:30:
77:07:18:b1:41:71:a6:23:54:22:2b:7d:1e:63:f9:
e0:23:0a:f7:24:00:4e:29:aa:f5:a1:1e:87:61:70:
75:7e:b5:8e:d2:e6:26:51:df:1a:4f:c9:d0:f0:8c:
c1:8a:aa:50:a7:2e:aa:d4:85:cb:c0:60:ad:93:2e:
09:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0B:D5:61:79:D2:D0:99:41:82:F1:8B:ED:60:99:31:EA:DD:C5:7D
X509v3 Authority Key Identifier:
keyid:46:4F:7E:BA:13:C4:3D:1F:B8:EA:CC:BC:C0:D4:2E:9A:28:BC:5E:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/3133382e302e3133352e302f32342d3234203d3e20323634353437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.135.0/24
Signature Algorithm: sha256WithRSAEncryption
34:5d:9f:85:3c:de:b1:4a:fb:02:0c:9d:a0:6d:14:c0:ce:41:
b0:cf:67:cc:da:67:ef:e5:e6:1c:3c:04:56:b9:b7:a3:33:27:
0d:87:2c:eb:43:b6:11:68:94:39:3d:ce:2b:57:f0:74:ab:33:
b2:ee:3a:1e:df:00:7b:28:5b:4e:78:49:78:37:04:91:0c:ae:
37:57:e6:61:93:2d:e2:f6:4a:5c:0e:4c:6b:f2:9d:b4:2a:27:
6c:03:9f:dd:ee:e4:17:07:f1:dc:73:29:bb:1a:bc:5d:73:0d:
d0:2a:35:5f:b4:8d:6d:38:9f:aa:e1:15:50:29:53:fb:87:01:
45:94:9a:09:f4:c8:93:2c:24:78:02:2e:2c:4d:ea:1d:2a:85:
52:2d:79:34:08:a1:a4:2f:e5:be:1d:b7:1b:65:b0:78:1e:75:
bd:92:c5:75:d8:0e:d9:b1:5c:91:21:f9:b7:dc:d2:a2:dd:3c:
67:28:e9:00:92:4a:48:e5:89:a2:a1:c3:e3:95:38:cf:14:37:
6b:9b:4e:ff:a9:a6:73:50:64:70:2a:26:4c:54:52:b6:81:c2:
78:78:77:e4:51:d1:53:40:0c:ed:fd:08:a9:3c:b9:c3:e6:f0:
2b:fc:7c:61:01:ba:2b:de:e2:07:3e:e0:e5:e5:ee:94:d8:c6:
3a:08:b8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:31:08 2025 by rpki-client