Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/3137372e3232312e3232342e302f32302d3234203d3e203533303232.roa
File: 3137372e3232312e3232342e302f32302d3234203d3e203533303232.roa (raw, json)
Hash identifier: zlh6AdXRODp514rKvJ5dWndDVFs4jW5ONsG2pe078w4=
Subject key identifier: 16:98:5F:58:4B:44:0B:98:06:D3:FD:41:58:FF:BF:C1:47:6A:3E:6E
Certificate issuer: /CN=93E4BA76EC60DA98DE98103D4C88131B429F3326
Certificate serial: 45CAD265CDA3E42F3DF752656A49EB50F344FF8F
Authority key identifier: 93:E4:BA:76:EC:60:DA:98:DE:98:10:3D:4C:88:13:1B:42:9F:33:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/3137372e3232312e3232342e302f32302d3234203d3e203533303232.roa
Signing time: Thu 06 Mar 2025 10:36:52 +0000
ROA not before: Thu 06 Mar 2025 10:31:52 +0000
ROA not after: Thu 05 Mar 2026 10:36:52 +0000
asID: 53022
IP address blocks: 177.221.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.crl
rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 10 Apr 2025 22:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ca:d2:65:cd:a3:e4:2f:3d:f7:52:65:6a:49:eb:50:f3:44:ff:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93E4BA76EC60DA98DE98103D4C88131B429F3326
Validity
Not Before: Mar 6 10:31:52 2025 GMT
Not After : Mar 5 10:36:52 2026 GMT
Subject: CN=16985F584B440B9806D3FD4158FFBFC1476A3E6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:54:df:13:63:b8:e9:d7:ca:6b:40:99:00:
c3:a7:bc:f8:e9:48:f3:d3:c0:6d:b4:39:3d:23:ad:
f0:49:6d:f7:77:38:bc:2b:66:d3:94:65:cb:50:19:
4b:52:8d:28:d3:cc:10:75:67:25:bf:23:88:38:e1:
28:10:98:80:56:0d:82:57:6b:2d:61:eb:e6:e8:fb:
95:da:db:8d:8a:0b:74:90:3e:8d:8c:8b:88:9c:49:
9c:ce:17:4a:7b:22:88:dd:f8:a7:69:32:f6:bb:c6:
8e:3a:9b:3a:6b:0c:37:6b:0d:f4:b7:b9:32:3e:73:
00:74:c1:5d:9f:e1:78:ca:c0:4d:a9:48:a2:63:9c:
eb:c3:e2:a8:af:17:39:89:33:08:be:06:7b:5a:cd:
d1:2a:41:53:e7:c4:e9:a9:89:27:4f:16:85:2a:02:
f6:3a:5f:cf:de:1e:cf:fb:ac:15:67:34:32:c8:2a:
5a:e2:f6:f6:66:35:32:35:66:95:4b:5b:29:77:06:
7a:9e:4f:48:2f:9d:7b:c2:62:1c:f3:68:ed:33:33:
cf:e2:f8:72:79:63:f2:aa:61:27:5a:b6:f9:1e:89:
f2:ca:5f:88:a1:22:3e:47:1a:f0:24:5a:55:0e:b2:
b4:0b:87:09:cf:50:92:38:a5:76:43:3a:cc:2d:16:
b8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:98:5F:58:4B:44:0B:98:06:D3:FD:41:58:FF:BF:C1:47:6A:3E:6E
X509v3 Authority Key Identifier:
keyid:93:E4:BA:76:EC:60:DA:98:DE:98:10:3D:4C:88:13:1B:42:9F:33:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/3137372e3232312e3232342e302f32302d3234203d3e203533303232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.221.224.0/20
Signature Algorithm: sha256WithRSAEncryption
22:63:af:5e:1d:f8:ff:38:d4:46:a4:0a:92:66:12:c9:ce:a4:
1c:1f:f9:f2:70:39:2d:46:6e:e5:18:df:28:92:65:ee:47:40:
fb:71:ef:48:b0:8b:7d:f4:81:bd:98:67:c3:8d:09:ed:dc:a3:
3e:f4:a8:29:81:69:a7:fb:ba:96:af:61:55:2c:8b:7f:3a:a8:
a4:cd:bd:64:1f:e4:d6:50:29:5f:0b:f9:5d:2c:3f:4d:e6:67:
5d:85:af:7f:29:af:fa:9f:bb:53:c4:a5:36:4f:65:4e:9b:7a:
11:81:86:56:d2:aa:05:b8:26:02:5e:39:11:b1:1f:27:4d:9c:
32:6a:ac:c7:1a:91:2f:9f:50:f0:b1:36:b6:20:c4:c2:ab:e8:
66:30:c0:e6:e4:36:19:bf:34:92:57:7e:c1:56:2e:cb:21:2d:
52:b4:90:91:96:a2:70:2c:28:23:08:25:bb:40:2c:b0:65:03:
2b:50:9c:22:87:82:93:60:ec:45:5f:9c:c7:aa:61:0d:d2:32:
58:18:82:9f:c3:58:e7:ab:9c:a9:90:fa:8e:9e:df:79:cb:10:
13:74:a5:ce:07:d0:bd:b1:4d:b2:89:7f:dc:c8:95:0a:fb:0f:
f1:2e:1d:c6:c5:c2:82:36:d9:c3:db:71:b4:24:6a:92:2e:02:
fc:54:8e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:38:31 2025 by rpki-client