Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/3138372e38372e32382e302f32322d3234203d3e203631363130.roa
File: 3138372e38372e32382e302f32322d3234203d3e203631363130.roa (raw, json)
Hash identifier: yPua/Ofud6POhXVBl+Vv3ibZEIZGIKOcu8JE11PZEDQ=
Subject key identifier: 4B:6A:E2:D4:F0:31:15:F5:54:F3:24:25:ED:1C:5E:4D:DD:6B:59:D6
Certificate issuer: /CN=5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2
Certificate serial: 77BA840EBE364A4BD72D578984C365B8F054D3F1
Authority key identifier: 5A:68:B8:8E:02:7E:5A:12:DC:69:EA:EA:AC:20:11:ED:1D:28:25:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/3138372e38372e32382e302f32322d3234203d3e203631363130.roa
Signing time: Thu 06 Mar 2025 00:20:41 +0000
ROA not before: Thu 06 Mar 2025 00:15:41 +0000
ROA not after: Thu 05 Mar 2026 00:20:41 +0000
asID: 61610
IP address blocks: 187.87.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.crl
rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 15:51:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ba:84:0e:be:36:4a:4b:d7:2d:57:89:84:c3:65:b8:f0:54:d3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2
Validity
Not Before: Mar 6 00:15:41 2025 GMT
Not After : Mar 5 00:20:41 2026 GMT
Subject: CN=4B6AE2D4F03115F554F32425ED1C5E4DDD6B59D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:16:78:46:37:bc:98:f2:c4:55:32:70:f1:f6:
88:bd:c9:b8:05:39:92:97:f4:86:6a:c3:53:b6:af:
29:3c:e7:a0:06:f9:08:10:d0:94:0c:8f:82:a4:7e:
cc:42:59:32:77:76:28:fa:a8:3e:be:d3:73:cc:49:
a4:2d:a6:d0:33:85:89:d8:bc:ae:45:86:3c:0d:ed:
64:07:40:ae:c2:3c:69:a5:30:45:37:b3:c8:e6:a0:
56:bc:f4:89:37:d2:7a:4a:86:f8:48:66:db:a4:a2:
6d:5d:af:c3:df:0e:7d:57:52:77:c2:1e:74:08:2a:
ee:cf:ad:26:67:20:0e:fd:e8:ab:d7:4b:e8:c2:fe:
79:40:1d:71:a4:cc:d4:b0:40:39:ac:00:1b:65:45:
fa:f6:57:cf:7b:18:6d:7c:bf:61:21:58:da:0d:2a:
55:33:26:f0:92:37:ae:10:9b:9a:c2:c3:c0:70:42:
f9:b3:20:e7:36:a6:24:5e:41:56:a5:b9:21:d7:b7:
ee:23:3c:9d:f7:23:06:2f:f2:b4:36:b8:d8:84:28:
1b:72:99:18:7e:b9:fc:ec:3e:f5:0d:cf:fe:07:37:
5b:4e:17:3a:fe:0e:98:ba:3d:15:52:b8:93:d0:85:
76:69:1c:36:c2:ff:70:b0:28:21:01:78:46:70:cd:
63:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6A:E2:D4:F0:31:15:F5:54:F3:24:25:ED:1C:5E:4D:DD:6B:59:D6
X509v3 Authority Key Identifier:
keyid:5A:68:B8:8E:02:7E:5A:12:DC:69:EA:EA:AC:20:11:ED:1D:28:25:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/3138372e38372e32382e302f32322d3234203d3e203631363130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.87.28.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:c5:45:26:4f:7c:0e:37:9c:ae:a9:54:73:e2:4d:67:83:06:
b3:e6:8d:25:b4:a8:c4:16:c3:c9:47:65:9d:b5:9a:71:bb:40:
9b:d5:59:27:34:00:08:ea:7b:50:cc:c2:a7:0d:59:d6:93:6e:
58:79:eb:ac:84:90:00:14:23:f2:b5:a0:b5:5f:15:d7:67:b4:
0c:b6:ef:0a:7f:33:72:66:ee:fb:75:24:c0:b7:24:0a:a6:2d:
b8:24:86:da:56:75:2c:eb:6b:03:8e:be:4e:db:6c:bc:bf:aa:
92:53:f7:a4:3a:be:85:30:75:1c:d7:99:2d:1c:01:ba:97:9c:
15:ee:ab:c1:b5:9e:a0:b6:01:ec:3a:44:9a:16:bb:54:01:b8:
1b:9a:d6:77:28:b1:c9:61:b9:12:16:b3:ce:b9:a7:74:ae:e3:
7c:2f:21:d8:05:a2:8a:d1:f7:c9:bf:4e:99:ef:0d:c7:4e:2b:
43:b3:7e:70:a4:b6:d3:64:ff:03:74:15:68:1b:28:2d:71:b5:
bf:b8:b8:8f:1a:d7:40:1a:2d:54:12:3e:e7:50:55:56:0e:71:
6f:00:c6:b1:f4:23:82:55:d0:7d:06:f4:65:3b:9b:94:c0:70:
4a:5a:09:23:f4:cf:1d:d3:a4:f1:ce:a1:d5:ab:eb:18:26:85:
64:7b:92:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:10:04 2025 by rpki-client