Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/3137302e38332e31382e302f32332d3233203d3e20323636343636.roa
File: 3137302e38332e31382e302f32332d3233203d3e20323636343636.roa (raw, json)
Hash identifier: nov1lP/vN8JqbFUcdMKbz+ujjCYyRoyVUC/+Q68XOWk=
Subject key identifier: 94:3A:59:A8:7C:4D:28:8D:55:2E:0B:E4:60:DF:E6:78:75:78:7F:9D
Certificate issuer: /CN=64024652CD71CE0D3988DAA5555337E88EA6AE45
Certificate serial: 78D46FF6495D8E53DB2FBEB14DE88A4B03EA0021
Authority key identifier: 64:02:46:52:CD:71:CE:0D:39:88:DA:A5:55:53:37:E8:8E:A6:AE:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64024652CD71CE0D3988DAA5555337E88EA6AE45.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/3137302e38332e31382e302f32332d3233203d3e20323636343636.roa
Signing time: Fri 17 Jan 2025 11:45:03 +0000
ROA not before: Fri 17 Jan 2025 11:40:03 +0000
ROA not after: Fri 16 Jan 2026 11:45:03 +0000
asID: 266466
IP address blocks: 170.83.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/64024652CD71CE0D3988DAA5555337E88EA6AE45.crl
rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/64024652CD71CE0D3988DAA5555337E88EA6AE45.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64024652CD71CE0D3988DAA5555337E88EA6AE45.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 08:33:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:d4:6f:f6:49:5d:8e:53:db:2f:be:b1:4d:e8:8a:4b:03:ea:00:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64024652CD71CE0D3988DAA5555337E88EA6AE45
Validity
Not Before: Jan 17 11:40:03 2025 GMT
Not After : Jan 16 11:45:03 2026 GMT
Subject: CN=943A59A87C4D288D552E0BE460DFE67875787F9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:7f:72:cc:a5:4e:f7:3b:f8:22:23:7f:98:
c3:29:05:f9:4f:80:54:e8:69:24:51:44:55:ce:f2:
14:4a:f3:89:fe:18:ed:7a:3b:73:f4:d1:54:04:12:
68:19:da:48:49:2e:dc:d1:92:69:69:ff:97:00:5c:
e9:54:17:50:93:7b:dc:9e:40:86:46:6e:57:0c:cc:
07:bc:b3:fb:41:73:5d:a8:3d:01:6b:fb:10:d3:9b:
5d:a4:64:d7:17:ab:4a:9f:80:f1:2d:69:8d:1e:e2:
1a:b6:32:74:cd:09:e4:ae:07:77:0b:39:11:93:e3:
0a:ad:be:70:43:e6:a9:32:8c:78:e1:9e:02:73:60:
af:b5:83:ae:60:83:8e:66:49:ed:f4:13:72:20:84:
b7:10:41:2c:dc:c9:ba:f4:19:9e:c0:9a:a2:a4:bf:
c5:52:3f:ee:16:ee:e3:74:7f:5b:22:4f:0f:c6:bb:
41:d8:12:26:cb:57:6f:1b:7d:71:b2:ca:7e:34:c9:
fe:85:2e:cc:05:c9:a8:3b:5d:94:f3:ee:e4:7e:09:
bb:53:eb:e8:a4:f2:90:24:5b:b6:ed:68:e8:10:cd:
d2:b8:e3:0d:1e:74:68:8a:c3:4d:ad:9a:07:59:a1:
0b:08:5a:ed:27:84:ce:01:73:d4:3d:af:16:14:c5:
23:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3A:59:A8:7C:4D:28:8D:55:2E:0B:E4:60:DF:E6:78:75:78:7F:9D
X509v3 Authority Key Identifier:
keyid:64:02:46:52:CD:71:CE:0D:39:88:DA:A5:55:53:37:E8:8E:A6:AE:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/64024652CD71CE0D3988DAA5555337E88EA6AE45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64024652CD71CE0D3988DAA5555337E88EA6AE45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/3137302e38332e31382e302f32332d3233203d3e20323636343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.18.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:3d:41:e4:0a:f2:86:19:1a:f3:9a:64:5e:90:dc:83:f7:7c:
3d:be:21:b4:d6:9d:c0:07:eb:a4:a1:2d:6b:42:e6:1d:97:f7:
cb:4f:9f:ce:90:4a:73:a9:a1:5d:15:85:59:e2:cf:6a:f7:5e:
c1:a3:d3:37:76:64:74:d2:5d:cd:12:42:cd:4a:e5:ff:30:3a:
76:c1:69:05:8a:61:76:e5:02:83:5c:af:c9:d1:ea:2d:78:5f:
42:89:6f:b0:3f:ca:73:51:04:4c:b9:bb:d2:61:9e:d0:0c:58:
5a:85:e4:43:f0:aa:b7:bf:0a:25:70:e4:02:00:31:4d:fb:ed:
62:40:f2:19:5c:45:ff:27:88:2e:72:bb:d5:3b:31:95:3b:ae:
ae:92:98:21:aa:ec:a9:1d:a5:35:35:a6:95:ea:9a:9d:a8:57:
34:10:8a:4f:41:53:a5:79:fe:6b:60:14:33:8e:19:f6:d6:c2:
f0:bc:21:2c:bb:73:6e:de:ed:af:47:f3:ed:e5:fc:5d:91:31:
1f:fb:a7:66:58:05:23:88:5d:a6:56:ad:87:72:45:f3:4d:f4:
74:f1:ec:15:ec:66:48:f8:d9:6c:22:19:68:24:f5:3a:ae:5f:
72:6c:d2:ea:26:3e:30:89:19:fa:c7:2e:02:e0:20:d3:ae:b7:
52:39:3c:62
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUeNRv9kldjlPbL76xTeiKSwPqACEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQwMjQ2NTJDRDcxQ0UwRDM5ODhEQUE1NTU1MzM3RTg4
RUE2QUU0NTAeFw0yNTAxMTcxMTQwMDNaFw0yNjAxMTYxMTQ1MDNaMDMxMTAvBgNV
BAMTKDk0M0E1OUE4N0M0RDI4OEQ1NTJFMEJFNDYwREZFNjc4NzU3ODdGOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQConn9yzKVO9zv4IiN/mMMpBflP
gFToaSRRRFXO8hRK84n+GO16O3P00VQEEmgZ2khJLtzRkmlp/5cAXOlUF1CTe9ye
QIZGblcMzAe8s/tBc12oPQFr+xDTm12kZNcXq0qfgPEtaY0e4hq2MnTNCeSuB3cL
ORGT4wqtvnBD5qkyjHjhngJzYK+1g65gg45mSe30E3IghLcQQSzcybr0GZ7AmqKk
v8VSP+4W7uN0f1siTw/Gu0HYEibLV28bfXGyyn40yf6FLswFyag7XZTz7uR+CbtT
6+ik8pAkW7btaOgQzdK44w0edGiKw02tmgdZoQsIWu0nhM4Bc9Q9rxYUxSMvAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUlDpZqHxNKI1VLgvkYN/meHV4f50wHwYDVR0j
BBgwFoAUZAJGUs1xzg05iNqlVVM36I6mrkUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby83VUtaUWdZNEh6ZDlCWjl6S1RXa3FWcVNMeDQ4UWJwVjhVYmI4RVc1SEg2
LzAvNjQwMjQ2NTJDRDcxQ0UwRDM5ODhEQUE1NTU1MzM3RTg4RUE2QUU0NS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82NDAyNDY1MkNENzFDRTBEMzk4
OERBQTU1NTUzMzdFODhFQTZBRTQ1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83
VUtaUWdZNEh6ZDlCWjl6S1RXa3FWcVNMeDQ4UWJwVjhVYmI4RVc1SEg2LzAvMzEz
NzMwMmUzODMzMmUzMTM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM2MzQz
NjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBqlMSMA0GCSqGSIb3DQEBCwUAA4IBAQBqPUHkCvKGGRrz
mmRekNyD93w9viG01p3AB+ukoS1rQuYdl/fLT5/OkEpzqaFdFYVZ4s9q917Bo9M3
dmR00l3NEkLNSuX/MDp2wWkFimF25QKDXK/J0eoteF9CiW+wP8pzUQRMubvSYZ7Q
DFhaheRD8Kq3vwolcOQCADFN++1iQPIZXEX/J4gucrvVOzGVO66ukpghquypHaU1
NaaV6pqdqFc0EIpPQVOlef5rYBQzjhn21sLwvCEsu3Nu3u2vR/Pt5fxdkTEf+6dm
WAUjiF2mVq2HckXzTfR08ewV7GZI+NlsIhloJPU6rl9ybNLqJj4wiRn6xy4C4CDT
rrdSOTxi
-----END CERTIFICATE-----
Generated at Sun Apr 13 18:54:50 2025 by rpki-client