Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e3133372e33322e302f32302d3230203d3e203238323130.roa
File: 3137372e3133372e33322e302f32302d3230203d3e203238323130.roa (raw, json)
Hash identifier: PJPJ1ZEtBsJ+uP7GhLdZpj/rh33xqqXWuTRwjCkVWIU=
Subject key identifier: 0D:E5:E3:FA:D4:CA:A6:54:34:41:07:B4:DC:2F:8D:BB:B2:0E:77:4B
Certificate issuer: /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial: 10B62160717B24B32E338124142B4D6068B16073
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e3133372e33322e302f32302d3230203d3e203238323130.roa
Signing time: Thu 06 Mar 2025 04:42:09 +0000
ROA not before: Thu 06 Mar 2025 04:37:09 +0000
ROA not after: Thu 05 Mar 2026 04:42:09 +0000
asID: 28210
IP address blocks: 177.137.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 18:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:b6:21:60:71:7b:24:b3:2e:33:81:24:14:2b:4d:60:68:b1:60:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Validity
Not Before: Mar 6 04:37:09 2025 GMT
Not After : Mar 5 04:42:09 2026 GMT
Subject: CN=0DE5E3FAD4CAA654344107B4DC2F8DBBB20E774B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:69:13:e8:16:c9:f3:7b:2c:85:92:e8:63:e4:
bf:af:71:e7:54:c3:12:81:d7:51:28:a5:13:5a:83:
29:e0:bc:aa:2d:7b:2d:85:81:62:fc:e9:42:e9:2f:
47:63:55:c1:0d:2f:b9:f1:3f:ed:0b:64:62:41:91:
c5:46:76:2d:db:d4:04:65:c8:15:ed:8e:fe:95:4b:
26:a2:c5:3e:77:92:0d:af:27:fc:24:80:36:95:9f:
ac:bd:f2:8e:21:9f:26:99:16:10:cf:fd:37:29:49:
5f:7c:fa:ec:b8:ad:5f:cf:af:71:af:1a:eb:76:e1:
c6:95:8e:4d:97:df:f3:f7:6b:e6:a8:bd:e8:9c:37:
67:66:f6:ee:44:56:3b:26:c0:09:c9:33:45:41:18:
e4:b5:0e:65:65:f1:c6:46:a0:03:d3:89:b4:25:bc:
16:80:64:60:6f:06:fa:4d:14:2e:ea:e5:98:69:11:
8a:8b:bd:96:fa:73:93:8f:b4:33:24:83:cc:f9:6c:
76:10:46:7c:e9:e7:02:33:4c:f1:f8:67:d6:94:5c:
a7:eb:82:b3:c2:50:42:30:5c:2b:a0:1c:23:98:72:
9a:80:c9:78:5e:dc:77:50:fd:ec:0d:c6:12:60:5f:
d1:a5:21:3c:17:42:4c:61:a9:f4:11:8e:3c:dc:fd:
a0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E5:E3:FA:D4:CA:A6:54:34:41:07:B4:DC:2F:8D:BB:B2:0E:77:4B
X509v3 Authority Key Identifier:
keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e3133372e33322e302f32302d3230203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.137.32.0/20
Signature Algorithm: sha256WithRSAEncryption
29:c4:36:12:6a:95:c2:f7:58:1f:e8:16:d6:c7:58:16:47:e4:
58:3c:a9:3a:f7:b4:f7:f2:06:83:2f:94:fa:16:bf:9a:6a:93:
92:5f:05:00:d8:5f:8d:57:ba:2e:9a:e6:e3:f5:c4:c0:1b:e4:
8a:f8:d3:e7:4f:e0:ca:48:7c:43:72:cb:17:fc:15:d9:e4:4a:
76:eb:50:fe:4c:f1:0c:f0:ca:b8:15:c4:c6:b0:7a:b6:60:e3:
5b:10:02:80:7f:29:3c:9d:b4:62:c1:c2:9d:a2:60:73:44:a1:
9f:c8:9e:f3:63:23:43:ab:d8:46:7c:da:45:3b:ac:d0:60:f1:
4d:7a:06:70:96:dc:69:73:84:b0:1c:11:37:64:f6:0d:48:e4:
1d:6a:d6:6a:32:ed:e3:82:07:7f:da:9b:5e:d0:5c:61:2f:59:
ad:a4:81:cd:7b:31:31:f6:d0:67:a5:77:8e:ab:4d:5c:79:91:
78:0a:00:d1:c1:6c:be:69:4e:bf:50:01:a4:31:44:3a:e9:0a:
8a:ba:76:19:53:3e:23:6d:18:05:0f:07:e9:c0:07:05:26:70:
fb:c2:59:ca:ed:96:fd:00:a3:75:24:bd:f7:2a:09:bb:35:23:
86:d4:64:56:eb:4b:e3:75:56:34:f2:8d:51:07:13:5a:ee:f2:
54:95:5a:f8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUELYhYHF7JLMuM4EkFCtNYGixYHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYxQ0FCNjVCQURBRDc1RkY0OUNGOENFNTRBRTc1NzM3
MUQxQzRBQTAeFw0yNTAzMDYwNDM3MDlaFw0yNjAzMDUwNDQyMDlaMDMxMTAvBgNV
BAMTKDBERTVFM0ZBRDRDQUE2NTQzNDQxMDdCNERDMkY4REJCQjIwRTc3NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwaRPoFsnzeyyFkuhj5L+vcedU
wxKB11EopRNagyngvKotey2FgWL86ULpL0djVcENL7nxP+0LZGJBkcVGdi3b1ARl
yBXtjv6VSyaixT53kg2vJ/wkgDaVn6y98o4hnyaZFhDP/TcpSV98+uy4rV/Pr3Gv
Gut24caVjk2X3/P3a+aoveicN2dm9u5EVjsmwAnJM0VBGOS1DmVl8cZGoAPTibQl
vBaAZGBvBvpNFC7q5ZhpEYqLvZb6c5OPtDMkg8z5bHYQRnzp5wIzTPH4Z9aUXKfr
grPCUEIwXCugHCOYcpqAyXhe3HdQ/ewNxhJgX9GlITwXQkxhqfQRjjzc/aAnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDeXj+tTKplQ0QQe03C+Nu7IOd0swHwYDVR0j
BBgwFoAUphyrZbra11/0nPjOVK51c3HRxKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn
YVYvMS9BNjFDQUI2NUJBREFENzVGRjQ5Q0Y4Q0U1NEFFNzU3MzcxRDFDNEFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MUNBQjY1QkFEQUQ3NUZG
NDlDRjhDRTU0QUU3NTczNzFEMUM0QUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlRZnhScnRoRVd3bTF3N1lTZllFOVdkNjQxVjFuYVhka3VLa0F0QzhxZ2FWLzEv
MzEzNzM3MmUzMTMzMzcyZTMzMzIyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM4
MzIzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEsYkgMA0GCSqGSIb3DQEBCwUAA4IBAQApxDYSapXC
91gf6BbWx1gWR+RYPKk697T38gaDL5T6Fr+aapOSXwUA2F+NV7oumubj9cTAG+SK
+NPnT+DKSHxDcssX/BXZ5Ep261D+TPEM8Mq4FcTGsHq2YONbEAKAfyk8nbRiwcKd
omBzRKGfyJ7zYyNDq9hGfNpFO6zQYPFNegZwltxpc4SwHBE3ZPYNSOQdatZqMu3j
ggd/2pte0FxhL1mtpIHNezEx9tBnpXeOq01ceZF4CgDRwWy+aU6/UAGkMUQ66QqK
unYZUz4jbRgFDwfpwAcFJnD7wlnK7Zb9AKN1JL33Kgm7NSOG1GRW60vjdVY08o1R
BxNa7vJUlVr4
-----END CERTIFICATE-----
Generated at Sun Apr 13 23:33:48 2025 by rpki-client