Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/3137392e3130372e31312e302f32342d3234203d3e20323633323635.roa
File: 3137392e3130372e31312e302f32342d3234203d3e20323633323635.roa (raw, json)
Hash identifier: FrQUfyIsBKQ14hmz9VnRQb1f9iBUaQYQLXVWs8pk94E=
Subject key identifier: 5C:D3:27:84:CC:B1:50:D1:4C:CF:99:66:91:54:5A:18:98:F3:5D:05
Certificate issuer: /CN=CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E
Certificate serial: 5F916E6202968708CDEC44DEFD354F5653BF5E91
Authority key identifier: CB:59:E2:41:FF:AA:C5:9F:A0:BA:1D:08:D9:8F:B8:1A:87:C5:D1:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/3137392e3130372e31312e302f32342d3234203d3e20323633323635.roa
Signing time: Wed 05 Mar 2025 19:00:18 +0000
ROA not before: Wed 05 Mar 2025 18:55:18 +0000
ROA not after: Wed 04 Mar 2026 19:00:18 +0000
asID: 263265
IP address blocks: 179.107.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.crl
rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 12 Apr 2025 03:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:91:6e:62:02:96:87:08:cd:ec:44:de:fd:35:4f:56:53:bf:5e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E
Validity
Not Before: Mar 5 18:55:18 2025 GMT
Not After : Mar 4 19:00:18 2026 GMT
Subject: CN=5CD32784CCB150D14CCF996691545A1898F35D05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:bd:11:0c:da:f6:80:f0:b5:3b:b4:8f:c8:
c7:95:cb:3e:06:24:bf:f7:8a:1f:bc:45:20:c3:33:
78:7d:e2:52:fd:f6:2f:44:d8:a0:1a:66:9f:9a:53:
2b:2c:90:72:3f:a6:6f:fe:d3:10:25:1a:3f:93:f5:
bf:99:f1:fa:b4:50:0b:e1:9d:d0:4f:98:be:a6:ed:
fe:3f:46:fb:59:1e:2f:b4:7e:11:7d:0f:11:ac:4e:
a5:45:44:e3:c0:92:47:ef:58:58:53:d7:b6:23:49:
24:af:f2:7a:67:20:f9:e0:47:70:fd:c9:8f:de:4d:
d8:64:7f:6c:9f:eb:5b:7c:58:9c:0c:7d:06:89:e4:
4f:f9:6f:34:4d:bb:62:95:7e:83:58:ae:6e:fb:06:
9d:c8:94:18:7b:7d:c3:3c:88:d9:b3:c4:ad:7d:30:
9c:0c:74:68:64:4b:47:26:9f:22:81:7d:ce:e4:ca:
6b:04:37:23:ff:a0:fa:f8:34:85:40:c0:f2:ac:83:
c3:96:41:20:09:25:3c:43:95:e1:47:1f:ad:ef:a2:
51:ea:21:fa:f5:dd:b7:a7:9a:1b:ed:99:09:52:aa:
db:7e:0d:4a:73:25:df:c9:58:67:d1:fc:5a:30:ac:
b8:71:3c:7b:ca:ab:80:5f:b5:a1:bb:c8:d4:64:33:
dd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D3:27:84:CC:B1:50:D1:4C:CF:99:66:91:54:5A:18:98:F3:5D:05
X509v3 Authority Key Identifier:
keyid:CB:59:E2:41:FF:AA:C5:9F:A0:BA:1D:08:D9:8F:B8:1A:87:C5:D1:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/3137392e3130372e31312e302f32342d3234203d3e20323633323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.107.11.0/24
Signature Algorithm: sha256WithRSAEncryption
63:d7:cf:47:cf:8e:66:49:d9:a6:c1:c3:a5:7a:58:ce:39:f1:
25:a4:f0:b3:02:02:b6:dc:01:7e:16:1a:bc:a6:8b:d7:ec:bb:
96:dc:c2:ac:38:6f:3b:94:b1:87:63:60:ab:7d:2b:9f:2b:48:
01:bf:e2:45:33:18:b8:11:d8:ca:c3:34:ab:49:fa:78:e6:c4:
d8:7d:98:d7:09:a0:f8:40:da:04:2e:dd:2e:50:ab:33:3a:00:
84:6f:c2:84:de:ce:8f:ea:fd:72:e4:76:ef:5f:e0:7e:ab:a1:
03:8b:8f:1e:bd:da:0a:63:c0:a9:9e:6f:c6:48:26:1d:05:5b:
08:20:44:55:d6:55:42:82:ea:91:18:4f:4e:61:8d:df:00:d6:
eb:df:ba:70:b6:5a:80:80:d0:90:33:2a:75:b7:f3:3b:a2:7e:
3b:94:7c:9d:e3:d0:46:a0:86:3d:a4:16:2a:c0:7b:e4:d9:4f:
3b:0d:d8:94:27:24:27:6a:3d:79:b8:86:1b:41:b5:db:55:24:
cb:5c:b5:f8:1f:48:e3:f1:52:f8:d8:32:8b:01:92:33:fd:ce:
ad:58:1c:78:a2:3b:37:67:9a:77:e0:61:1b:89:9f:59:e5:ff:
bf:49:94:52:76:f4:b7:ea:ff:bc:f0:27:20:2a:3d:1c:24:c5:
cd:74:03:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:21:07 2025 by rpki-client