Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/AS262691.roa
File: AS262691.roa (raw, json)
Hash identifier: knYIuqjXlYPgjIs61RFNY3rkTcBYk4470FfCr/44W/o=
Subject key identifier: A0:50:DE:B7:3F:52:87:ED:1A:AD:59:1F:16:33:F0:74:E3:49:50:DF
Certificate issuer: /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial: 7BBA175D85EFC3A91249BE9A3B2617FC87964D4E
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/AS262691.roa
Signing time: Mon 13 Jan 2025 11:47:21 +0000
ROA not before: Mon 13 Jan 2025 11:42:21 +0000
ROA not after: Mon 12 Jan 2026 11:47:21 +0000
asID: 262691
IP address blocks: 131.108.200.0/22 maxlen: 22
131.108.200.0/23 maxlen: 23
131.108.200.0/24 maxlen: 24
131.108.201.0/24 maxlen: 24
131.108.202.0/23 maxlen: 23
131.108.202.0/24 maxlen: 24
131.108.203.0/24 maxlen: 24
177.72.20.0/22 maxlen: 22
177.72.20.0/23 maxlen: 23
177.72.20.0/24 maxlen: 24
177.72.21.0/24 maxlen: 24
177.72.22.0/23 maxlen: 23
177.72.22.0/24 maxlen: 24
177.72.23.0/24 maxlen: 24
177.87.204.0/22 maxlen: 22
177.87.204.0/23 maxlen: 23
177.87.204.0/24 maxlen: 24
177.87.205.0/24 maxlen: 24
177.87.206.0/23 maxlen: 23
177.87.206.0/24 maxlen: 24
177.87.207.0/24 maxlen: 24
179.108.192.0/19 maxlen: 19
179.108.192.0/20 maxlen: 20
179.108.192.0/21 maxlen: 21
179.108.192.0/22 maxlen: 22
179.108.192.0/23 maxlen: 23
179.108.192.0/24 maxlen: 24
179.108.193.0/24 maxlen: 24
179.108.194.0/23 maxlen: 23
179.108.194.0/24 maxlen: 24
179.108.195.0/24 maxlen: 24
179.108.196.0/22 maxlen: 22
179.108.196.0/23 maxlen: 23
179.108.196.0/24 maxlen: 24
179.108.197.0/24 maxlen: 24
179.108.198.0/23 maxlen: 23
179.108.198.0/24 maxlen: 24
179.108.199.0/24 maxlen: 24
179.108.200.0/21 maxlen: 21
179.108.200.0/22 maxlen: 22
179.108.200.0/23 maxlen: 23
179.108.200.0/24 maxlen: 24
179.108.201.0/24 maxlen: 24
179.108.202.0/23 maxlen: 23
179.108.202.0/24 maxlen: 24
179.108.203.0/24 maxlen: 24
179.108.204.0/22 maxlen: 22
179.108.204.0/23 maxlen: 23
179.108.204.0/24 maxlen: 24
179.108.205.0/24 maxlen: 24
179.108.206.0/23 maxlen: 23
179.108.206.0/24 maxlen: 24
179.108.207.0/24 maxlen: 24
179.108.208.0/20 maxlen: 20
179.108.208.0/21 maxlen: 21
179.108.208.0/22 maxlen: 22
179.108.208.0/23 maxlen: 23
179.108.208.0/24 maxlen: 24
179.108.209.0/24 maxlen: 24
179.108.210.0/23 maxlen: 23
179.108.210.0/24 maxlen: 24
179.108.211.0/24 maxlen: 24
179.108.212.0/22 maxlen: 22
179.108.212.0/23 maxlen: 23
179.108.212.0/24 maxlen: 24
179.108.214.0/23 maxlen: 23
179.108.216.0/21 maxlen: 21
179.108.216.0/22 maxlen: 22
179.108.216.0/23 maxlen: 23
179.108.218.0/23 maxlen: 23
179.108.220.0/22 maxlen: 22
179.108.220.0/23 maxlen: 23
179.108.220.0/24 maxlen: 24
179.108.222.0/23 maxlen: 23
179.108.224.0/20 maxlen: 20
179.108.224.0/21 maxlen: 21
179.108.224.0/22 maxlen: 22
179.108.224.0/23 maxlen: 23
179.108.226.0/23 maxlen: 23
179.108.228.0/22 maxlen: 22
179.108.228.0/23 maxlen: 23
179.108.230.0/23 maxlen: 23
179.108.232.0/21 maxlen: 21
179.108.232.0/22 maxlen: 22
179.108.232.0/23 maxlen: 23
179.108.234.0/23 maxlen: 23
179.108.236.0/22 maxlen: 22
179.108.236.0/23 maxlen: 23
179.108.238.0/23 maxlen: 23
186.194.208.0/20 maxlen: 20
186.194.208.0/21 maxlen: 21
186.194.208.0/22 maxlen: 22
186.194.208.0/23 maxlen: 23
186.194.210.0/23 maxlen: 23
186.194.212.0/22 maxlen: 22
186.194.212.0/23 maxlen: 23
186.194.214.0/23 maxlen: 23
186.194.216.0/21 maxlen: 21
186.194.216.0/22 maxlen: 22
186.194.216.0/23 maxlen: 23
186.194.218.0/23 maxlen: 23
186.194.220.0/22 maxlen: 22
186.194.220.0/23 maxlen: 23
186.194.222.0/23 maxlen: 23
186.224.48.0/20 maxlen: 20
186.224.48.0/22 maxlen: 22
186.224.48.0/23 maxlen: 23
186.224.50.0/23 maxlen: 23
186.224.52.0/22 maxlen: 22
186.224.54.0/23 maxlen: 23
186.224.56.0/22 maxlen: 22
186.224.56.0/23 maxlen: 23
186.224.58.0/23 maxlen: 23
186.224.60.0/22 maxlen: 22
186.224.60.0/23 maxlen: 23
186.224.62.0/23 maxlen: 23
187.94.192.0/20 maxlen: 20
187.94.192.0/21 maxlen: 21
187.94.192.0/22 maxlen: 22
187.94.192.0/23 maxlen: 23
187.94.192.0/24 maxlen: 24
187.94.194.0/23 maxlen: 23
187.94.196.0/22 maxlen: 22
187.94.196.0/23 maxlen: 23
187.94.198.0/23 maxlen: 23
187.94.200.0/21 maxlen: 21
187.94.200.0/22 maxlen: 22
187.94.200.0/23 maxlen: 23
187.94.202.0/23 maxlen: 23
187.94.203.0/24 maxlen: 24
187.94.204.0/22 maxlen: 22
187.94.204.0/23 maxlen: 23
187.94.206.0/23 maxlen: 23
2804:1cd8::/32 maxlen: 32
2804:1cd8:3::/48 maxlen: 48
2804:1cd8:c000::/36 maxlen: 36
2804:1cd8:d000::/36 maxlen: 36
2804:1cd8:e000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl
rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 23 Apr 2025 03:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ba:17:5d:85:ef:c3:a9:12:49:be:9a:3b:26:17:fc:87:96:4d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Validity
Not Before: Jan 13 11:42:21 2025 GMT
Not After : Jan 12 11:47:21 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5d:ce:42:26:16:d7:b9:95:e2:61:ca:f2:b4:
7e:df:23:95:c9:3a:ae:8a:ad:cf:6f:1f:b2:84:6e:
b6:b9:9b:80:37:7f:09:4e:3d:de:9a:80:ed:d5:a7:
16:1a:71:f3:f8:15:e5:08:d7:9a:fb:37:40:d7:6f:
e4:db:0e:69:49:7c:a4:2e:27:e7:a3:d7:e5:15:07:
9c:a3:34:bd:8f:11:9b:74:58:ae:c8:2f:b7:ad:9b:
56:82:fb:c6:72:bc:17:e2:3b:1f:6a:dc:84:76:db:
89:a3:45:57:6f:73:c5:22:5d:a4:e9:8d:31:52:2e:
65:19:80:63:c2:65:85:ea:53:bf:4e:af:86:84:eb:
fb:09:2a:8b:10:3f:76:a3:23:3a:a3:ab:31:d5:b5:
5d:60:1a:9c:65:44:10:cb:45:3f:09:1a:3a:0f:14:
f7:98:2b:ab:26:ee:86:7f:78:3c:b1:76:2a:e5:3f:
3b:4e:10:be:26:73:63:48:e9:6a:a1:31:7b:37:52:
75:17:93:6e:58:19:44:69:17:89:49:cc:ed:df:92:
59:e6:45:fa:67:84:c9:a4:9c:8d:ad:e1:1b:0c:cc:
fe:d4:25:b1:de:22:f4:b0:2b:dc:b7:31:a2:45:7b:
f3:23:0d:fb:0c:92:87:8a:55:9c:05:c9:5d:0d:c4:
06:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:50:DE:B7:3F:52:87:ED:1A:AD:59:1F:16:33:F0:74:E3:49:50:DF
X509v3 Authority Key Identifier:
keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/AS262691.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.200.0/22
177.72.20.0/22
177.87.204.0/22
179.108.192.0-179.108.239.255
186.194.208.0/20
186.224.48.0/20
187.94.192.0/20
IPv6:
2804:1cd8::/32
Signature Algorithm: sha256WithRSAEncryption
33:42:0b:5a:a2:37:67:01:3f:21:80:eb:83:6b:f9:75:dd:ab:
ff:96:87:b1:59:69:8d:b3:92:3c:54:d5:cf:41:e1:63:ae:23:
51:02:55:53:1c:b9:78:81:37:8d:11:10:44:4d:77:83:7a:80:
9f:f4:3c:ce:fe:50:52:c9:79:0b:ac:91:7f:3d:2f:91:18:90:
f7:f1:8a:bf:55:08:3a:56:58:60:74:f8:1e:27:14:10:db:56:
09:4e:02:05:96:cc:5b:3d:d7:4e:f0:35:a7:9b:ab:24:6c:97:
b8:fa:d1:6f:b5:33:8b:f5:27:0f:97:39:cf:a7:c7:4c:25:2e:
33:2a:bb:26:0a:d0:5a:0a:11:b4:aa:2e:83:4d:e0:dd:62:96:
61:6d:16:9c:7b:f0:1a:24:dd:e9:ef:12:46:a3:5e:7b:ce:b4:
b9:7a:0b:8b:74:6a:aa:b7:31:d4:ff:4a:39:38:d6:28:68:3a:
f9:ac:b6:f7:0d:67:a9:b9:17:82:4a:02:d5:40:84:21:79:c2:
3f:64:41:cd:a6:b8:87:03:62:15:2f:7a:73:49:2f:a9:cb:0a:
25:15:91:c6:87:04:1e:9b:60:cd:ca:17:69:25:c4:02:8b:e0:
34:a4:75:4d:e9:21:19:3a:5f:42:f8:a5:e8:7f:d8:59:ce:35:
66:34:2e:92
-----BEGIN CERTIFICATE-----
MIIHSTCCBjGgAwIBAgIUe7oXXYXvw6kSSb6aOyYX/IeWTU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk1Nzg5RThBQ0RDMkQ1OTVCRTMzQjRBMEQyMUI2REEz
Q0E2MEI0QTAeFw0yNTAxMTMxMTQyMjFaFw0yNjAxMTIxMTQ3MjFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUM1RENFNDIyNjE2RDdCOTk1
RTI2MUNBRjJCNDdFREYyMzk1QzkzQUFFOEFBRENGNkYxRkIyODQ2RUI2Qjk5Qjgw
Mzc3RjA5NEUzRERFOUE4MEVERDVBNzE2MUE3MUYzRjgxNUU1MDhENzlBRkIzNzQw
RDc2RkU0REIwRTY5NDk3Q0E0MkUyN0U3QTNEN0U1MTUwNzlDQTMzNEJEOEYxMTlC
NzQ1OEFFQzgyRkI3QUQ5QjU2ODJGQkM2NzJCQzE3RTIzQjFGNkFEQzg0NzZEQjg5
QTM0NTU3NkY3M0M1MjI1REE0RTk4RDMxNTIyRTY1MTk4MDYzQzI2NTg1RUE1M0JG
NEVBRjg2ODRFQkZCMDkyQThCMTAzRjc2QTMyMzNBQTNBQjMxRDVCNTVENjAxQTlD
NjU0NDEwQ0I0NTNGMDkxQTNBMEYxNEY3OTgyQkFCMjZFRTg2N0Y3ODNDQjE3NjJB
RTUzRjNCNEUxMEJFMjY3MzYzNDhFOTZBQTEzMTdCMzc1Mjc1MTc5MzZFNTgxOTQ0
NjkxNzg5NDlDQ0VEREY5MjU5RTY0NUZBNjc4NEM5QTQ5QzhEQURFMTFCMENDQ0ZF
RDQyNUIxREUyMkY0QjAyQkRDQjczMUEyNDU3QkYzMjMwREZCMEM5Mjg3OEE1NTlD
MDVDOTVEMERDNDA2REIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA7F3OQiYW17mV4mHK8rR+3yOVyTquiq3Pbx+yhG62uZuAN38JTj3e
moDt1acWGnHz+BXlCNea+zdA12/k2w5pSXykLifno9flFQecozS9jxGbdFiuyC+3
rZtWgvvGcrwX4jsfatyEdtuJo0VXb3PFIl2k6Y0xUi5lGYBjwmWF6lO/Tq+GhOv7
CSqLED92oyM6o6sx1bVdYBqcZUQQy0U/CRo6DxT3mCurJu6Gf3g8sXYq5T87ThC+
JnNjSOlqoTF7N1J1F5NuWBlEaReJSczt35JZ5kX6Z4TJpJyNreEbDMz+1CWx3iL0
sCvctzGiRXvzIw37DJKHilWcBcldDcQG2wIDAQABo4ICVzCCAlMwHQYDVR0OBBYE
FKBQ3rc/UoftGq1ZHxYz8HTjSVDfMB8GA1UdIwQYMBaAFOlXieis3C1ZW+M7Sg0h
tto8pgtKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1
OTVCRTMzQjRBMEQyMUI2REEzQ0E2MEI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FOTU3ODlFOEFDREMyRDU5NUJFMzNCNEEwRDIxQjZEQTNDQTYw
QjRBLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuGXnJzeW5jOi8vcnBr
aS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWl3ZEE0Yno0dlhIZ2tnZkNoOUpqNVpN
YmRiTk1pVFhybjlnUE5OdFY0dkIvMS9BUzI2MjY5MS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBaBggrBgEFBQcBBwEB/wRLMEkwOAQCAAEwMgMEAoNsyAME
ArFIFAMEArFXzDAMAwQGs2zAAwQEs2zgAwQEusLQAwQEuuAwAwQEu17AMA0EAgAC
MAcDBQAoBBzYMA0GCSqGSIb3DQEBCwUAA4IBAQAzQgtaojdnAT8hgOuDa/l13av/
loexWWmNs5I8VNXPQeFjriNRAlVTHLl4gTeNERBETXeDeoCf9DzO/lBSyXkLrJF/
PS+RGJD38Yq/VQg6VlhgdPgeJxQQ21YJTgIFlsxbPddO8DWnm6skbJe4+tFvtTOL
9ScPlznPp8dMJS4zKrsmCtBaChG0qi6DTeDdYpZhbRace/AaJN3p7xJGo157zrS5
eguLdGqqtzHU/0o5ONYoaDr5rLb3DWepuReCSgLVQIQhecI/ZEHNpriHA2IVL3pz
SS+pywolFZHGhwQem2DNyhdpJcQCi+A0pHVN6SEZOl9C+KXof9hZzjVmNC6S
-----END CERTIFICATE-----
Generated at Tue Apr 22 16:54:59 2025 by rpki-client