Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33362e302f32332d3233203d3e20323633333437.roa
File: 3139312e33372e33362e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier: qO9GJyZ20fExpug6N2X5s2ccNuU7L92cuhyXyZUlVDg=
Subject key identifier: 59:AB:DB:BF:A8:B6:2E:5A:EF:0E:80:64:8E:90:C9:5B:81:C0:D1:A3
Certificate issuer: /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial: 4B285CDEF753043D529756DDF43BC6713411D797
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33362e302f32332d3233203d3e20323633333437.roa
Signing time: Fri 13 Sep 2024 11:56:25 +0000
ROA not before: Fri 13 Sep 2024 11:51:25 +0000
ROA not after: Fri 12 Sep 2025 11:56:25 +0000
asID: 263347
IP address blocks: 191.37.36.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 16:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:28:5c:de:f7:53:04:3d:52:97:56:dd:f4:3b:c6:71:34:11:d7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Validity
Not Before: Sep 13 11:51:25 2024 GMT
Not After : Sep 12 11:56:25 2025 GMT
Subject: CN=59ABDBBFA8B62E5AEF0E80648E90C95B81C0D1A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d7:28:0c:3d:fa:2b:58:27:c0:e5:13:9e:09:
23:43:f1:51:70:b4:13:7a:45:dd:58:7e:cb:16:c7:
d7:4a:82:f1:7a:6f:55:04:4e:4a:34:06:78:80:b8:
d9:61:37:4b:94:54:ad:db:29:fe:72:d5:d3:e3:6a:
f3:93:9a:f3:b6:14:46:2a:a0:2b:f6:15:3b:f8:d7:
79:44:a4:d4:e0:d2:7f:76:8f:7d:d5:24:70:6e:15:
48:34:9a:bb:80:42:47:52:88:0f:4b:4d:a6:f0:1a:
9b:5c:c1:e5:3c:04:cf:a8:52:ce:f2:42:5e:cb:a0:
40:b1:ab:71:a1:16:e7:33:e6:1b:78:e5:a2:95:15:
fe:61:e3:ae:d9:ca:93:5a:6f:86:09:d4:46:a0:a2:
be:a8:88:7b:e8:24:41:44:07:9f:4c:fc:f6:be:9f:
f3:07:dc:ca:9c:f4:52:cc:f2:a5:36:20:15:a7:fb:
89:bc:cd:05:28:bd:7f:cb:c0:1f:0e:de:20:df:66:
21:3c:6b:95:ec:3c:10:5f:be:7b:0e:3e:2c:bd:63:
93:c1:e5:eb:7a:65:54:67:b8:81:84:65:c1:bb:50:
67:62:ae:13:da:94:31:ea:24:92:25:3c:ae:4b:7f:
2c:38:82:6a:33:48:b5:4c:c9:08:60:3c:d9:8a:a4:
43:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AB:DB:BF:A8:B6:2E:5A:EF:0E:80:64:8E:90:C9:5B:81:C0:D1:A3
X509v3 Authority Key Identifier:
keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33362e302f32332d3233203d3e20323633333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.37.36.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:7f:90:02:20:22:45:af:dd:7f:7f:f9:99:aa:49:a2:da:86:
45:76:da:58:4e:71:50:b9:00:72:3e:14:c2:e9:b4:97:85:54:
af:68:42:cc:67:cd:fd:10:65:a4:61:9b:d3:c4:63:fe:8d:e3:
35:61:70:a1:b9:83:b9:c5:00:62:91:ad:9b:66:e5:8c:15:f5:
2e:4e:4b:3c:d3:28:3d:e3:4d:13:ca:90:68:9d:f7:6a:85:67:
1e:55:3d:72:43:e8:7f:43:75:8c:8f:9b:74:85:ee:49:ba:ea:
22:7a:8e:ef:85:83:2c:24:b5:f7:c8:0a:27:8d:d2:79:62:8a:
85:5e:63:56:cb:95:ea:e7:cb:aa:60:9c:73:d3:52:57:f9:06:
08:a4:c1:4c:84:84:7a:8e:8c:da:8b:ab:47:f3:1f:dd:27:73:
d5:19:16:f8:18:4f:4b:4c:9f:f9:1b:50:6f:ac:db:28:66:a7:
37:6d:b1:04:73:ac:c3:b8:24:b8:75:7f:47:32:d0:b0:b1:92:
82:7a:f9:a8:2f:da:23:1b:12:3e:b5:b9:97:77:43:9d:bb:10:
45:b3:15:ac:5a:4e:a4:d6:20:cf:7e:01:26:e9:17:43:d2:81:
2f:bb:c8:77:90:35:06:6e:2c:76:75:1a:f3:ce:86:d7:7c:4b:
1f:72:79:9e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSyhc3vdTBD1Sl1bd9DvGcTQR15cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMwOTE2Njk3Q0M3N0ExQTg3NkU0ODY1QkUwMkY1NUE4
RUZGOUJGMjAeFw0yNDA5MTMxMTUxMjVaFw0yNTA5MTIxMTU2MjVaMDMxMTAvBgNV
BAMTKDU5QUJEQkJGQThCNjJFNUFFRjBFODA2NDhFOTBDOTVCODFDMEQxQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC81ygMPforWCfA5ROeCSND8VFw
tBN6Rd1YfssWx9dKgvF6b1UETko0BniAuNlhN0uUVK3bKf5y1dPjavOTmvO2FEYq
oCv2FTv413lEpNTg0n92j33VJHBuFUg0mruAQkdSiA9LTabwGptcweU8BM+oUs7y
Ql7LoECxq3GhFucz5ht45aKVFf5h467ZypNab4YJ1Eagor6oiHvoJEFEB59M/Pa+
n/MH3Mqc9FLM8qU2IBWn+4m8zQUovX/LwB8O3iDfZiE8a5XsPBBfvnsOPiy9Y5PB
5et6ZVRnuIGEZcG7UGdirhPalDHqJJIlPK5Lfyw4gmozSLVMyQhgPNmKpEPPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWavbv6i2LlrvDoBkjpDJW4HA0aMwHwYDVR0j
BBgwFoAUAwkWaXzHehqHbkhlvgL1Wo7/m/IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMS8wMzA5MTY2OTdDQzc3QTFBODc2RTQ4NjVCRTAyRjU1QThFRkY5QkYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMDkxNjY5N0NDNzdBMUE4
NzZFNDg2NUJFMDJGNTVBOEVGRjlCRjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzEv
MzEzOTMxMmUzMzM3MmUzMzM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMz
MzMzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBvyUkMA0GCSqGSIb3DQEBCwUAA4IBAQBuf5ACICJF
r91/f/mZqkmi2oZFdtpYTnFQuQByPhTC6bSXhVSvaELMZ839EGWkYZvTxGP+jeM1
YXChuYO5xQBika2bZuWMFfUuTks80yg9400TypBonfdqhWceVT1yQ+h/Q3WMj5t0
he5Juuoieo7vhYMsJLX3yAonjdJ5YoqFXmNWy5Xq58uqYJxz01JX+QYIpMFMhIR6
jozai6tH8x/dJ3PVGRb4GE9LTJ/5G1BvrNsoZqc3bbEEc6zDuCS4dX9HMtCwsZKC
evmoL9ojGxI+tbmXd0OduxBFsxWsWk6k1iDPfgEm6RdD0oEvu8h3kDUGbix2dRrz
zobXfEsfcnme
-----END CERTIFICATE-----
Generated at Sun Apr 13 22:56:07 2025 by rpki-client