Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e322e302f32342d3234203d3e2032373136.roa
File: 3230302e3133322e322e302f32342d3234203d3e2032373136.roa (raw, json)
Hash identifier: yOBMDiVwQ+N9or7T8jXHVfpsAi2Uex+tGPL0do+uhEM=
Subject key identifier: 61:D0:78:EB:85:E7:CE:7A:7F:8E:29:38:7B:C1:22:38:35:06:6A:18
Certificate issuer: /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial: 60CD9192C66B71DF7623FE0E09C93924BF2DA8C4
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e322e302f32342d3234203d3e2032373136.roa
Signing time: Wed 05 Mar 2025 19:00:02 +0000
ROA not before: Wed 05 Mar 2025 18:55:02 +0000
ROA not after: Wed 04 Mar 2026 19:00:02 +0000
asID: 2716
IP address blocks: 200.132.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 15 Apr 2025 03:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:cd:91:92:c6:6b:71:df:76:23:fe:0e:09:c9:39:24:bf:2d:a8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
Validity
Not Before: Mar 5 18:55:02 2025 GMT
Not After : Mar 4 19:00:02 2026 GMT
Subject: CN=3082010A0282010100D817E051DD8AAA298B2250F6236A842C7FC9BAA5B7D7E273B5BC1A1FA26AC476784C13E746C5F8E0A0F1EB163470FCF283FF1094FF46B8C24CCAFE9AE2A7EC6225A6F1F6DE2D2295E101B87FD2A5A4814505F5232D2DE377DEF5973C01C689F636C1F085B7EDFEFC1796B1CF8B336CE55BB55E3A49B0F900664B6BD3BBC516FE48C6D26CCC272EDEDB0DFACEB1776239EA670B87ED5821F51FA43300B08441FA9CE5C28A148CC72D9A608C423A53C63BCB56E9A49C3A804FC1D2CE26962FB658D0A62182C3349C5184520F00B90988DA2F7FF1CB851070A33E55B271F8E72D8C76995C03642C456AE68C67F84A7EB696D96B7641D788E0F38B27E2F19BA6916B0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:17:e0:51:dd:8a:aa:29:8b:22:50:f6:23:6a:
84:2c:7f:c9:ba:a5:b7:d7:e2:73:b5:bc:1a:1f:a2:
6a:c4:76:78:4c:13:e7:46:c5:f8:e0:a0:f1:eb:16:
34:70:fc:f2:83:ff:10:94:ff:46:b8:c2:4c:ca:fe:
9a:e2:a7:ec:62:25:a6:f1:f6:de:2d:22:95:e1:01:
b8:7f:d2:a5:a4:81:45:05:f5:23:2d:2d:e3:77:de:
f5:97:3c:01:c6:89:f6:36:c1:f0:85:b7:ed:fe:fc:
17:96:b1:cf:8b:33:6c:e5:5b:b5:5e:3a:49:b0:f9:
00:66:4b:6b:d3:bb:c5:16:fe:48:c6:d2:6c:cc:27:
2e:de:db:0d:fa:ce:b1:77:62:39:ea:67:0b:87:ed:
58:21:f5:1f:a4:33:00:b0:84:41:fa:9c:e5:c2:8a:
14:8c:c7:2d:9a:60:8c:42:3a:53:c6:3b:cb:56:e9:
a4:9c:3a:80:4f:c1:d2:ce:26:96:2f:b6:58:d0:a6:
21:82:c3:34:9c:51:84:52:0f:00:b9:09:88:da:2f:
7f:f1:cb:85:10:70:a3:3e:55:b2:71:f8:e7:2d:8c:
76:99:5c:03:64:2c:45:6a:e6:8c:67:f8:4a:7e:b6:
96:d9:6b:76:41:d7:88:e0:f3:8b:27:e2:f1:9b:a6:
91:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D0:78:EB:85:E7:CE:7A:7F:8E:29:38:7B:C1:22:38:35:06:6A:18
X509v3 Authority Key Identifier:
keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e322e302f32342d3234203d3e2032373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.132.2.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:12:51:e7:bb:9e:29:3a:69:b2:d4:d6:f2:d2:4f:8a:f7:b7:
97:c1:35:b5:b7:5e:4c:47:11:e2:93:a6:c4:71:03:6d:bb:8f:
7d:a3:21:be:35:e4:64:93:d2:70:f2:9a:9d:06:8c:b7:fd:7e:
56:b1:42:c7:4a:db:2a:83:81:ed:71:1e:f9:4f:85:1a:6f:e3:
3a:7e:55:b6:51:d7:08:be:1d:2e:7e:0c:44:b9:b2:d5:1a:1d:
b1:bb:d6:22:60:f4:a9:06:2c:be:b8:68:d6:65:f3:e3:50:78:
6d:4c:a3:c3:10:ed:6a:f5:b9:06:12:39:b5:c2:96:32:2f:9b:
08:19:18:79:60:ce:ae:5e:53:b6:bb:33:96:57:13:aa:07:a8:
52:4f:49:ef:86:7f:2c:b3:3d:6a:37:4d:95:5a:87:b5:16:8c:
ea:35:bc:1e:91:82:49:5e:5e:e6:1d:72:53:a2:03:fd:6b:f6:
a6:80:21:51:a1:5c:96:f1:61:5a:bd:64:f6:03:3b:9e:8d:b2:
8b:e1:ab:20:12:e1:0d:1c:7e:9c:5c:3c:52:2f:39:d5:94:0e:
4d:17:4f:7e:26:68:a2:97:f4:1f:8c:e4:ca:93:e4:39:e0:6c:
34:27:4d:da:31:93:17:cb:e9:61:7c:d5:06:10:49:04:aa:e0:
58:be:c0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:38:22 2025 by rpki-client