Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3131312e302f32342d3234203d3e20323635393530.roa
File: 3136342e3136332e3131312e302f32342d3234203d3e20323635393530.roa (raw, json)
Hash identifier: XIzlGjs6A2Y5Ty/kF/VzGr5lsqUaks6/WaEzGFNNT/I=
Subject key identifier: 28:E2:FC:55:99:27:FB:86:04:64:8F:3D:AE:E2:35:30:71:DF:27:0B
Certificate issuer: /CN=C6D32F231785FEA26541B55E3CF768D365266570
Certificate serial: 29322102CAFDF886EA5A7C5A1DD822BB91E99AB1
Authority key identifier: C6:D3:2F:23:17:85:FE:A2:65:41:B5:5E:3C:F7:68:D3:65:26:65:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6D32F231785FEA26541B55E3CF768D365266570.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3131312e302f32342d3234203d3e20323635393530.roa
Signing time: Sat 04 Jan 2025 12:06:25 +0000
ROA not before: Sat 04 Jan 2025 12:01:25 +0000
ROA not after: Sat 03 Jan 2026 12:06:25 +0000
asID: 265950
IP address blocks: 164.163.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/C6D32F231785FEA26541B55E3CF768D365266570.crl
rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/C6D32F231785FEA26541B55E3CF768D365266570.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6D32F231785FEA26541B55E3CF768D365266570.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 04:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:32:21:02:ca:fd:f8:86:ea:5a:7c:5a:1d:d8:22:bb:91:e9:9a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6D32F231785FEA26541B55E3CF768D365266570
Validity
Not Before: Jan 4 12:01:25 2025 GMT
Not After : Jan 3 12:06:25 2026 GMT
Subject: CN=28E2FC559927FB8604648F3DAEE2353071DF270B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:c0:3d:4c:e7:c8:60:05:15:35:95:0d:83:
51:11:f1:77:62:4f:93:52:6b:93:e7:06:3d:ba:1d:
44:51:6d:77:3e:5a:c8:3e:47:13:ee:fb:a3:85:d8:
28:5c:31:28:58:81:d8:76:14:68:76:dd:bd:e6:e5:
7f:31:c8:23:8f:0a:57:2b:84:99:62:74:ea:2d:08:
b6:49:52:e4:4a:02:6c:9b:93:3b:06:14:4f:69:40:
6f:48:71:8a:70:f0:84:cc:c8:61:e9:e2:82:77:8a:
ea:03:81:e4:0d:4a:f3:44:8e:d9:08:60:a5:68:bd:
b6:cd:85:ae:71:73:c9:00:4d:93:c9:48:0e:b8:8a:
79:48:70:cc:60:de:35:02:b5:b2:43:66:4f:99:5e:
f4:83:46:0f:e0:b7:fa:82:10:f9:87:38:c8:a4:6f:
78:ea:85:d7:2f:f7:13:55:66:bc:ae:a6:c3:11:3e:
23:39:c1:ad:fe:10:d2:76:1c:93:ca:46:f8:61:51:
82:bd:1f:5d:b9:81:f8:99:a7:ad:03:e1:09:ed:42:
1c:1e:46:2f:1a:40:95:28:61:db:b1:72:a6:36:f5:
f8:1b:1a:07:1f:ef:66:7b:fd:48:d7:82:f2:57:ce:
a3:38:d1:27:68:5d:fb:e0:c4:11:21:aa:2b:09:e1:
a0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E2:FC:55:99:27:FB:86:04:64:8F:3D:AE:E2:35:30:71:DF:27:0B
X509v3 Authority Key Identifier:
keyid:C6:D3:2F:23:17:85:FE:A2:65:41:B5:5E:3C:F7:68:D3:65:26:65:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/C6D32F231785FEA26541B55E3CF768D365266570.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6D32F231785FEA26541B55E3CF768D365266570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3131312e302f32342d3234203d3e20323635393530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.111.0/24
Signature Algorithm: sha256WithRSAEncryption
86:dd:71:52:79:f4:02:8b:28:00:10:73:7b:a1:d5:5b:2e:1e:
ae:30:ba:af:41:db:24:98:44:17:0e:6a:ce:d9:84:6f:23:5c:
bc:b4:96:0c:19:21:07:f9:b6:da:c0:8a:e2:4d:ca:c2:86:72:
7e:6a:6f:28:ee:77:7f:fb:f0:bc:5d:2a:3c:1d:27:67:e4:4e:
18:53:ff:e0:87:ef:ca:ca:99:f8:91:88:ed:95:3f:23:38:b1:
4b:b9:74:bd:97:8f:67:fc:b4:02:a4:8f:4c:98:c5:5f:f3:c2:
c2:85:83:62:a9:e4:cc:dc:d7:72:9c:db:a7:2b:9f:6a:f8:cc:
b4:e5:5a:c3:57:69:21:43:00:38:82:7a:a7:f1:a9:62:38:b2:
12:7e:cf:60:85:ba:a3:d8:1f:66:dc:a9:03:15:7a:a8:89:05:
94:0c:89:32:34:5a:6f:e1:74:7b:cc:86:da:87:ab:56:a6:d1:
56:b3:f4:e7:be:35:7b:0e:22:a6:99:06:12:75:c3:08:8a:c5:
74:57:ca:ef:c4:98:f2:90:c0:19:10:89:39:90:04:73:3d:67:
91:49:f9:be:a7:b1:2d:7e:db:8b:02:4c:3a:55:44:b8:38:e4:
b6:51:6e:31:cc:05:4a:41:37:02:65:45:4c:ee:64:25:c0:f3:
40:39:d7:42
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKTIhAsr9+IbqWnxaHdgiu5HpmrEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZEMzJGMjMxNzg1RkVBMjY1NDFCNTVFM0NGNzY4RDM2
NTI2NjU3MDAeFw0yNTAxMDQxMjAxMjVaFw0yNjAxMDMxMjA2MjVaMDMxMTAvBgNV
BAMTKDI4RTJGQzU1OTkyN0ZCODYwNDY0OEYzREFFRTIzNTMwNzFERjI3MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA5sA9TOfIYAUVNZUNg1ER8Xdi
T5NSa5PnBj26HURRbXc+Wsg+RxPu+6OF2ChcMShYgdh2FGh23b3m5X8xyCOPClcr
hJlidOotCLZJUuRKAmybkzsGFE9pQG9IcYpw8ITMyGHp4oJ3iuoDgeQNSvNEjtkI
YKVovbbNha5xc8kATZPJSA64inlIcMxg3jUCtbJDZk+ZXvSDRg/gt/qCEPmHOMik
b3jqhdcv9xNVZryupsMRPiM5wa3+ENJ2HJPKRvhhUYK9H125gfiZp60D4QntQhwe
Ri8aQJUoYduxcqY29fgbGgcf72Z7/UjXgvJXzqM40SdoXfvgxBEhqisJ4aATAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKOL8VZkn+4YEZI89ruI1MHHfJwswHwYDVR0j
BBgwFoAUxtMvIxeF/qJlQbVePPdo02UmZXAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnk1UTlDOUx3ZnJlU0xrSzhYc01GN3hBanc1aDlLcWp5Ym1OVnZQd2c0
dUMvMC9DNkQzMkYyMzE3ODVGRUEyNjU0MUI1NUUzQ0Y3NjhEMzY1MjY2NTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M2RDMyRjIzMTc4NUZFQTI2
NTQxQjU1RTNDRjc2OEQzNjUyNjY1NzAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ5NVE5QzlMd2ZyZVNMa0s4WHNNRjd4QWp3NWg5S3FqeWJtTlZ2UHdnNHVDLzAv
MzEzNjM0MmUzMTM2MzMyZTMxMzEzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM5MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKSjbzANBgkqhkiG9w0BAQsFAAOCAQEAht1x
Unn0AosoABBze6HVWy4erjC6r0HbJJhEFw5qztmEbyNcvLSWDBkhB/m22sCK4k3K
woZyfmpvKO53f/vwvF0qPB0nZ+ROGFP/4IfvysqZ+JGI7ZU/IzixS7l0vZePZ/y0
AqSPTJjFX/PCwoWDYqnkzNzXcpzbpyufavjMtOVaw1dpIUMAOIJ6p/GpYjiyEn7P
YIW6o9gfZtypAxV6qIkFlAyJMjRab+F0e8yG2oerVqbRVrP05741ew4ippkGEnXD
CIrFdFfK78SY8pDAGRCJOZAEcz1nkUn5vqexLX7biwJMOlVEuDjktlFuMcwFSkE3
AmVFTO5kJcDzQDnXQg==
-----END CERTIFICATE-----
Generated at Sun Apr 13 11:33:36 2025 by rpki-client