Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/3137302e37392e39362e302f32322d3234203d3e20323635303636.roa
File: 3137302e37392e39362e302f32322d3234203d3e20323635303636.roa (raw, json)
Hash identifier: w8cfdwBIX02TOcj+rNWAF5hKOOVy84SAzN+LDgZiVmE=
Subject key identifier: B3:6B:6A:9E:AC:E5:3C:86:52:6F:A4:7D:85:11:56:4C:00:16:14:27
Certificate issuer: /CN=F1884EF6E788EB8A39510CE0A51DB48C6523379E
Certificate serial: 15B2CC055D23AC6F3E83D043480E62CCED9B8DF5
Authority key identifier: F1:88:4E:F6:E7:88:EB:8A:39:51:0C:E0:A5:1D:B4:8C:65:23:37:9E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/3137302e37392e39362e302f32322d3234203d3e20323635303636.roa
Signing time: Thu 06 Mar 2025 08:03:53 +0000
ROA not before: Thu 06 Mar 2025 07:58:53 +0000
ROA not after: Thu 05 Mar 2026 08:03:53 +0000
asID: 265066
IP address blocks: 170.79.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.crl
rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 10 Apr 2025 17:20:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:b2:cc:05:5d:23:ac:6f:3e:83:d0:43:48:0e:62:cc:ed:9b:8d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1884EF6E788EB8A39510CE0A51DB48C6523379E
Validity
Not Before: Mar 6 07:58:53 2025 GMT
Not After : Mar 5 08:03:53 2026 GMT
Subject: CN=B36B6A9EACE53C86526FA47D8511564C00161427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:1d:df:58:43:50:47:e5:63:b1:0a:ce:65:
1f:bf:4f:1e:eb:b2:25:17:38:f3:55:f5:93:8d:46:
d5:8c:1f:82:c2:8d:88:4d:02:76:e8:b7:88:70:15:
c2:1f:ac:b7:28:3c:0e:5e:aa:03:85:1e:df:f3:c6:
f1:e7:e8:2c:a3:35:40:d7:2a:2b:4e:40:ac:f1:de:
99:2b:65:e4:a3:67:6c:05:65:a3:4c:69:71:d5:61:
12:75:ae:fb:3e:58:41:73:b0:a2:2b:46:11:a2:82:
f9:41:38:ba:4b:31:2a:22:60:13:7c:d1:a7:27:bd:
a1:59:de:c7:db:6f:8f:a3:20:4f:8c:e2:43:62:32:
f8:51:f5:a6:3c:6b:d0:2e:e8:2a:41:4b:b9:77:94:
d0:f9:cc:e5:60:9f:fb:c7:a3:42:d8:30:65:91:ae:
fe:19:da:87:eb:04:cc:71:53:40:0e:84:ec:6a:35:
30:a5:69:2e:7f:a8:ae:0c:22:b6:99:73:68:37:77:
ac:c7:4a:1c:d5:2e:d7:1f:d0:03:d9:fb:06:bb:32:
a6:56:68:dc:ef:c8:14:23:4d:7c:c8:65:99:49:9e:
22:60:e3:5b:31:1f:e6:e3:8d:c6:07:16:ec:39:bb:
22:a5:9b:57:5e:1d:32:4c:84:4d:ab:99:9a:a3:8e:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6B:6A:9E:AC:E5:3C:86:52:6F:A4:7D:85:11:56:4C:00:16:14:27
X509v3 Authority Key Identifier:
keyid:F1:88:4E:F6:E7:88:EB:8A:39:51:0C:E0:A5:1D:B4:8C:65:23:37:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/3137302e37392e39362e302f32322d3234203d3e20323635303636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.96.0/22
Signature Algorithm: sha256WithRSAEncryption
01:67:8f:62:1e:8c:82:31:ea:30:2a:61:df:a9:2b:df:50:6e:
6b:d3:37:6a:fa:53:b9:fe:a3:62:b5:5f:8d:ed:80:4f:ad:af:
e5:79:8b:a7:82:d4:30:10:53:57:0c:b6:02:18:36:0c:05:36:
a6:46:13:12:a3:3a:29:53:4b:dd:a9:76:67:6c:05:7b:36:23:
4c:29:8b:c7:6f:09:b7:78:df:42:7d:63:88:ed:d0:42:c3:65:
05:6f:be:11:0a:e0:35:a9:9c:ad:94:33:54:f3:74:f9:5d:4e:
b7:d5:17:83:26:bd:03:75:70:2e:3e:16:03:d1:59:2a:ef:14:
e4:da:68:18:8d:bb:bf:d4:7b:cb:ac:0d:bf:e3:f5:6d:39:d9:
06:c1:97:7c:93:dd:bf:95:51:e5:84:83:82:75:65:a3:43:f7:
55:bb:80:61:be:1f:70:24:6a:75:a1:42:6d:2f:55:cc:7b:5a:
f2:bf:02:9d:81:fd:1e:f1:16:91:35:e7:57:30:31:f8:b0:12:
94:37:e7:36:da:b6:8b:f3:01:7a:48:b4:d1:83:46:1c:66:43:
96:2b:86:f0:a7:9f:90:13:15:75:61:46:b5:19:d0:e2:af:2d:
c0:3b:13:4b:07:31:1c:fe:a1:01:f6:51:ac:bd:06:ba:12:9e:
e4:30:a2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:14:16 2025 by rpki-client