Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e39362e302f32332d3233203d3e20323633363038.roa
File: 3137372e3133362e39362e302f32332d3233203d3e20323633363038.roa (raw, json)
Hash identifier: H7872XN27qHVcaGLm+/FdIjBH1BX3e2zDgkUxszUipg=
Subject key identifier: 36:20:AB:4A:00:B8:50:EE:ED:EF:35:25:88:BE:74:23:72:7B:EA:54
Certificate issuer: /CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
Certificate serial: 750F11474D25D0FED83BD302DBFC8B2470433773
Authority key identifier: F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e39362e302f32332d3233203d3e20323633363038.roa
Signing time: Mon 23 Dec 2024 13:19:01 +0000
ROA not before: Mon 23 Dec 2024 13:14:01 +0000
ROA not after: Mon 22 Dec 2025 13:19:01 +0000
asID: 263608
IP address blocks: 177.136.96.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl
rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 03:56:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:0f:11:47:4d:25:d0:fe:d8:3b:d3:02:db:fc:8b:24:70:43:37:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
Validity
Not Before: Dec 23 13:14:01 2024 GMT
Not After : Dec 22 13:19:01 2025 GMT
Subject: CN=3620AB4A00B850EEEDEF352588BE7423727BEA54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4c:92:a2:22:2f:9b:23:8d:53:4b:0b:65:2d:
4e:bf:40:cc:34:62:93:e9:19:15:5f:0f:58:13:d4:
6e:b2:dc:2b:7d:bf:58:d9:5d:b9:3f:d8:83:da:12:
d4:0b:f6:29:41:1b:8c:64:a6:a4:7e:9a:d2:78:77:
03:37:2f:2f:8b:5c:0c:3c:41:9e:77:2f:71:21:be:
ef:bc:40:cd:4f:3e:b7:ed:b7:4f:45:0a:72:9c:67:
2f:ae:93:65:3e:ce:d8:95:d6:bb:9e:11:bf:03:28:
87:c2:46:14:fb:32:46:51:ab:36:70:6f:83:64:81:
0f:b9:dc:d8:33:a1:ec:d1:47:0d:20:41:bd:b1:58:
bd:b2:2b:98:59:01:e5:89:21:38:6c:ec:89:3a:a2:
19:3b:c4:44:64:27:68:91:df:bd:79:5c:31:3b:c0:
56:cb:f0:cb:3f:97:5b:fd:81:f2:86:d8:68:2a:b0:
a5:05:1c:22:16:34:84:59:ca:d0:bd:fa:a1:63:7f:
41:34:e8:d8:16:83:c4:33:6d:f9:c8:28:79:ee:10:
5b:94:20:dd:de:d8:a8:8b:6a:2c:73:ae:35:fc:4b:
e8:9d:29:1a:5a:5f:da:35:39:fb:eb:fa:ec:e8:16:
e4:e7:8c:04:34:c7:c0:d8:55:af:5a:70:0a:ca:be:
a0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:20:AB:4A:00:B8:50:EE:ED:EF:35:25:88:BE:74:23:72:7B:EA:54
X509v3 Authority Key Identifier:
keyid:F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e39362e302f32332d3233203d3e20323633363038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.136.96.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:80:19:12:da:21:d9:1e:ce:00:d1:1e:65:b3:13:e2:a6:98:
14:19:55:8f:75:ff:d1:ea:ac:4d:0c:f0:b1:32:33:ef:85:e7:
14:53:a0:20:5d:44:68:ee:6c:04:40:46:5c:bd:56:7a:a1:ca:
ee:35:76:62:ce:6f:af:df:47:cb:ba:2a:89:60:84:94:b8:6b:
7d:0b:ce:37:82:34:be:2d:68:91:74:bc:f8:c9:df:cd:2e:9e:
32:48:09:05:69:63:a1:58:45:76:b5:e1:b6:f7:af:68:4c:86:
9a:cd:3f:a0:65:0e:66:25:ca:aa:06:80:e1:71:ef:d0:35:5f:
a6:03:23:64:9e:8b:2a:b6:a5:b2:b0:c6:0d:c8:f7:01:97:94:
f6:46:2b:ee:fa:31:a4:84:61:34:c2:c5:b4:fb:9b:5b:cb:ea:
24:45:7e:f9:ca:2c:da:37:78:24:cf:bb:f2:db:41:ab:f3:7d:
95:b8:16:82:e4:aa:24:f4:9e:c1:05:72:58:df:b3:7b:6f:8c:
42:c5:e5:15:82:f0:dc:84:79:1d:12:a1:33:c9:77:2f:f4:d8:
73:49:f8:98:6a:36:a2:2c:0b:6b:8e:cf:25:19:7c:81:9c:59:
6f:38:12:6f:97:06:c2:06:f0:4f:8a:08:e5:94:db:ff:1d:22:
52:7f:54:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 16:43:06 2025 by rpki-client