Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/3133312e3235352e3230342e302f32322d3234203d3e20323633353832.roa
File: 3133312e3235352e3230342e302f32322d3234203d3e20323633353832.roa (raw, json)
Hash identifier: hm3uGP+sqMT7YL6h5NVjn1Y25CaqenSBBJIEaErp57Q=
Subject key identifier: D7:17:6B:6B:28:EB:3F:FE:A1:2C:63:59:C7:ED:D8:00:8C:BE:F1:3B
Certificate issuer: /CN=4373021A1019537C2A9D84FF03720B0ECF4EBB52
Certificate serial: 41BF58A5E91227DCDDE604DA5D34BF085BD7C0D7
Authority key identifier: 43:73:02:1A:10:19:53:7C:2A:9D:84:FF:03:72:0B:0E:CF:4E:BB:52
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/3133312e3235352e3230342e302f32322d3234203d3e20323633353832.roa
Signing time: Thu 06 Mar 2025 12:03:24 +0000
ROA not before: Thu 06 Mar 2025 11:58:24 +0000
ROA not after: Thu 05 Mar 2026 12:03:24 +0000
asID: 263582
IP address blocks: 131.255.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.crl
rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 12 Apr 2025 01:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:bf:58:a5:e9:12:27:dc:dd:e6:04:da:5d:34:bf:08:5b:d7:c0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4373021A1019537C2A9D84FF03720B0ECF4EBB52
Validity
Not Before: Mar 6 11:58:24 2025 GMT
Not After : Mar 5 12:03:24 2026 GMT
Subject: CN=D7176B6B28EB3FFEA12C6359C7EDD8008CBEF13B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:6d:d5:80:6e:12:96:2a:34:e6:c2:ff:64:
83:88:62:0e:4b:95:9a:24:b0:7f:e2:c0:46:42:5f:
cb:1a:f4:6e:17:36:e1:7e:70:cc:20:cf:cc:5d:0c:
b1:21:7a:6b:0a:62:67:6a:9c:36:71:9c:a0:b4:80:
3f:5f:03:5e:52:91:49:e8:86:38:27:fd:88:88:e3:
28:e8:af:79:c4:35:d7:88:5f:08:59:7b:89:b2:f9:
40:b2:91:bb:71:fb:08:4a:3d:4c:d2:04:a2:52:f5:
23:fe:60:56:31:85:cb:1d:8e:eb:58:df:ed:9b:be:
87:a6:0e:93:87:cc:91:1b:c8:03:7d:7e:3e:82:e6:
18:08:11:0d:10:f4:58:b2:cf:db:e8:82:c2:55:b6:
28:ca:cd:ec:50:4e:29:b4:02:99:cd:2d:56:94:2f:
48:0f:6d:eb:08:8b:33:6d:ce:91:85:7e:0f:e5:8f:
f6:1c:e8:09:c6:ad:d1:74:7f:be:e9:32:51:e7:91:
63:a7:6c:b9:22:14:71:16:86:3a:9e:23:34:4a:b8:
80:7b:d1:0d:e8:8f:81:e1:44:c1:28:3e:c3:8c:8e:
22:5c:86:2f:2d:a5:75:36:6d:f3:fb:5c:1c:ee:cb:
7b:d7:2f:d4:a3:88:e9:00:00:23:b5:78:3d:a6:a7:
c1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:17:6B:6B:28:EB:3F:FE:A1:2C:63:59:C7:ED:D8:00:8C:BE:F1:3B
X509v3 Authority Key Identifier:
keyid:43:73:02:1A:10:19:53:7C:2A:9D:84:FF:03:72:0B:0E:CF:4E:BB:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/3133312e3235352e3230342e302f32322d3234203d3e20323633353832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.204.0/22
Signature Algorithm: sha256WithRSAEncryption
85:4c:1d:f4:67:aa:7b:2b:ba:b5:fa:53:c3:94:7e:1a:f5:8a:
c0:dc:2f:e9:45:d3:98:b5:69:fb:b0:54:5e:e9:fd:86:c4:2d:
03:19:66:b4:f4:2a:18:45:56:9d:3d:1a:4c:6c:74:19:d4:fc:
41:39:91:04:c6:2a:52:26:d5:af:d9:1a:33:20:cb:be:35:03:
ff:93:bb:21:f4:84:d4:83:4b:bf:f9:ac:53:a8:f6:97:c3:d1:
f0:7b:4f:4c:db:ab:d3:e7:43:60:3b:68:58:b8:a9:0c:52:8f:
c3:38:b6:30:08:47:f9:d4:b9:fb:04:80:24:65:0e:d3:40:44:
32:07:c6:bd:ae:92:66:ea:b4:9b:d1:b3:73:05:b3:88:0e:ec:
08:b9:af:49:3a:82:fe:f1:36:6a:53:77:73:89:64:6f:ca:05:
96:aa:39:d5:e1:55:10:cc:79:73:fe:54:0f:ef:f7:a3:35:df:
51:ce:0d:00:a0:b4:6f:5f:90:9d:d4:39:d3:d0:13:a7:ac:3c:
cb:05:bb:8d:43:26:cc:e8:52:c6:f5:26:8e:c7:de:a1:50:6f:
84:7b:74:81:f4:6f:31:39:15:0b:bc:02:0d:a6:74:47:47:66:
ac:9a:88:79:fc:e8:95:8c:a1:ca:2c:16:73:0f:7e:a4:95:2f:
1e:bb:08:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:32:45 2025 by rpki-client