Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8UjXThheEFAzxj81QqrweWeEXuVRrBcG4BmiCUygNeEj/0/3138312e3233332e38302e302f32322d3332203d3e20323731343832.roa
File: 3138312e3233332e38302e302f32322d3332203d3e20323731343832.roa (raw, json)
Hash identifier: aNlupnzSD6jMwVAcSuU252JNnUZU0HrXOUky5HSlJ9s=
Subject key identifier: 00:D0:B3:E0:B2:5B:BC:34:23:6A:4A:4A:84:51:A6:13:76:A3:B6:91
Certificate issuer: /CN=D206D2808B17CDECE745E043859E7B638B427132
Certificate serial: 1EEBE057D34B4A51B74B6634CBE17FD039D59A34
Authority key identifier: D2:06:D2:80:8B:17:CD:EC:E7:45:E0:43:85:9E:7B:63:8B:42:71:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D206D2808B17CDECE745E043859E7B638B427132.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8UjXThheEFAzxj81QqrweWeEXuVRrBcG4BmiCUygNeEj/0/3138312e3233332e38302e302f32322d3332203d3e20323731343832.roa
Signing time: Fri 14 Mar 2025 18:53:37 +0000
ROA not before: Fri 14 Mar 2025 18:48:37 +0000
ROA not after: Fri 13 Mar 2026 18:53:37 +0000
asID: 271482
IP address blocks: 181.233.80.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8UjXThheEFAzxj81QqrweWeEXuVRrBcG4BmiCUygNeEj/0/D206D2808B17CDECE745E043859E7B638B427132.crl
rsync://rpki-repo.registro.br/repo/8UjXThheEFAzxj81QqrweWeEXuVRrBcG4BmiCUygNeEj/0/D206D2808B17CDECE745E043859E7B638B427132.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D206D2808B17CDECE745E043859E7B638B427132.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 04:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:eb:e0:57:d3:4b:4a:51:b7:4b:66:34:cb:e1:7f:d0:39:d5:9a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D206D2808B17CDECE745E043859E7B638B427132
Validity
Not Before: Mar 14 18:48:37 2025 GMT
Not After : Mar 13 18:53:37 2026 GMT
Subject: CN=00D0B3E0B25BBC34236A4A4A8451A61376A3B691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e4:3e:9e:12:61:aa:87:de:4a:02:1b:b1:f8:
b8:dd:d9:b6:71:74:9c:f9:99:b1:e7:85:b5:3c:a1:
d1:e0:d1:15:0e:93:8f:1b:8d:9b:84:63:a2:2a:e1:
1c:da:e0:88:98:b8:61:24:ff:b6:be:c6:49:af:7a:
b9:99:5b:4a:97:14:9d:a0:05:51:e5:bc:91:ab:ff:
20:7d:61:ca:7b:49:6b:f5:8a:99:da:4d:9c:d9:56:
ef:b8:50:ca:3e:cf:e2:7e:8d:d7:a9:a0:d4:68:0b:
73:6e:1d:80:51:ef:f7:ae:08:14:e1:ee:c0:e9:30:
ce:9e:21:84:42:71:96:ab:98:1a:76:e8:5b:c8:8a:
e3:56:85:e0:63:29:54:63:41:5a:1a:f1:97:41:28:
7e:2e:b9:8e:60:6e:29:6b:f0:24:d7:2b:6a:39:13:
94:9b:fa:99:c8:25:d8:5e:92:3f:90:58:3f:81:cb:
84:3f:25:da:e8:7b:a2:14:92:82:41:cb:f2:79:57:
41:d3:61:58:80:75:10:84:69:93:fe:35:1c:6f:93:
c0:11:36:e2:bf:49:0c:72:fc:bd:4e:23:5c:3c:db:
69:e1:dd:61:f3:cd:e5:ad:3c:ba:18:e3:24:d2:ef:
e5:07:11:d2:4f:17:0f:0f:88:c0:62:d4:e7:fb:6a:
93:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D0:B3:E0:B2:5B:BC:34:23:6A:4A:4A:84:51:A6:13:76:A3:B6:91
X509v3 Authority Key Identifier:
keyid:D2:06:D2:80:8B:17:CD:EC:E7:45:E0:43:85:9E:7B:63:8B:42:71:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8UjXThheEFAzxj81QqrweWeEXuVRrBcG4BmiCUygNeEj/0/D206D2808B17CDECE745E043859E7B638B427132.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D206D2808B17CDECE745E043859E7B638B427132.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UjXThheEFAzxj81QqrweWeEXuVRrBcG4BmiCUygNeEj/0/3138312e3233332e38302e302f32322d3332203d3e20323731343832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.233.80.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:97:3c:6d:73:6c:6c:e4:36:63:fa:85:b4:1e:2b:c7:5f:72:
3b:2c:4c:5f:95:ca:e8:34:ad:1c:71:d0:2c:a8:db:e1:16:66:
22:b4:74:2c:18:4b:fc:d9:bc:5c:e9:79:60:62:95:8b:07:ad:
86:4f:43:53:43:75:2c:99:21:b4:2d:81:72:5b:7c:72:de:05:
1d:51:c2:56:31:87:72:66:27:7f:f7:62:58:91:6c:29:c1:bf:
53:10:51:3d:b7:e6:d9:35:ff:0b:4b:0f:85:88:4d:19:c7:36:
d8:65:1e:2f:63:c8:0f:e1:5f:f0:a0:50:ad:4c:74:d6:cb:dd:
9b:01:3f:a6:6f:ce:77:a9:c2:f8:76:a4:26:31:ea:ab:e7:28:
01:6d:9d:57:df:01:39:8b:19:4e:94:49:ff:f7:7b:4e:0c:99:
3c:a4:81:96:e7:3b:4b:b1:72:4f:c1:0d:bc:72:02:05:d6:44:
24:e9:b2:fc:54:3d:27:d1:a5:36:84:03:e3:1e:d1:86:8a:43:
26:4d:c1:4e:f2:47:2f:3b:5c:9e:d3:c8:0f:b0:7e:0a:57:b4:
f7:d8:d0:bd:4b:5c:9d:3c:43:a6:7e:9a:8d:13:f9:fe:8a:1b:
56:d7:7d:7e:e4:4f:95:97:d0:9b:4e:ee:5d:02:e7:0c:0f:47:
51:f1:8b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 12:35:06 2025 by rpki-client