Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/AS262691.roa
File: AS262691.roa (raw, json)
Hash identifier: +wUPIHWX66bUMJ2UdehHeV9QEbHa2aAD19bCwM7QU4w=
Subject key identifier: 8B:41:0D:6F:D5:8A:CC:2E:93:9E:E3:D0:5C:AD:58:99:33:E7:C4:B3
Certificate issuer: /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial: 5199D734DE4775386DB72F08961F5649B14E6EA8
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/AS262691.roa
Signing time: Thu 23 May 2024 12:07:26 +0000
ROA not before: Thu 23 May 2024 12:02:26 +0000
ROA not after: Thu 22 May 2025 12:07:26 +0000
asID: 262691
IP address blocks: 131.108.200.0/22 maxlen: 22
131.108.200.0/23 maxlen: 23
131.108.202.0/23 maxlen: 23
177.72.20.0/22 maxlen: 22
177.72.20.0/23 maxlen: 23
177.72.22.0/23 maxlen: 23
177.87.204.0/22 maxlen: 22
177.87.204.0/23 maxlen: 23
177.87.206.0/23 maxlen: 23
179.108.192.0/19 maxlen: 19
179.108.192.0/20 maxlen: 20
179.108.192.0/21 maxlen: 21
179.108.192.0/22 maxlen: 22
179.108.192.0/23 maxlen: 23
179.108.192.0/24 maxlen: 24
179.108.194.0/23 maxlen: 23
179.108.196.0/22 maxlen: 22
179.108.196.0/23 maxlen: 23
179.108.198.0/23 maxlen: 23
179.108.200.0/21 maxlen: 21
179.108.200.0/22 maxlen: 22
179.108.200.0/23 maxlen: 23
179.108.201.0/24 maxlen: 24
179.108.202.0/23 maxlen: 23
179.108.202.0/24 maxlen: 24
179.108.203.0/24 maxlen: 24
179.108.204.0/22 maxlen: 22
179.108.204.0/23 maxlen: 23
179.108.204.0/24 maxlen: 24
179.108.205.0/24 maxlen: 24
179.108.206.0/23 maxlen: 23
179.108.206.0/24 maxlen: 24
179.108.207.0/24 maxlen: 24
179.108.208.0/20 maxlen: 20
179.108.208.0/21 maxlen: 21
179.108.208.0/22 maxlen: 22
179.108.208.0/23 maxlen: 23
179.108.210.0/23 maxlen: 23
179.108.212.0/22 maxlen: 22
179.108.212.0/23 maxlen: 23
179.108.214.0/23 maxlen: 23
179.108.216.0/21 maxlen: 21
179.108.216.0/22 maxlen: 22
179.108.216.0/23 maxlen: 23
179.108.218.0/23 maxlen: 23
179.108.220.0/22 maxlen: 22
179.108.220.0/23 maxlen: 23
179.108.222.0/23 maxlen: 23
179.108.224.0/20 maxlen: 20
179.108.224.0/21 maxlen: 21
179.108.224.0/22 maxlen: 22
179.108.224.0/23 maxlen: 23
179.108.226.0/23 maxlen: 23
179.108.228.0/22 maxlen: 22
179.108.228.0/23 maxlen: 23
179.108.230.0/23 maxlen: 23
179.108.232.0/21 maxlen: 21
179.108.232.0/22 maxlen: 22
179.108.232.0/23 maxlen: 23
179.108.234.0/23 maxlen: 23
179.108.236.0/22 maxlen: 22
179.108.236.0/23 maxlen: 23
179.108.238.0/23 maxlen: 23
186.194.208.0/20 maxlen: 20
186.194.208.0/21 maxlen: 21
186.194.208.0/22 maxlen: 22
186.194.208.0/23 maxlen: 23
186.194.210.0/23 maxlen: 23
186.194.212.0/22 maxlen: 22
186.194.212.0/23 maxlen: 23
186.194.214.0/23 maxlen: 23
186.194.216.0/21 maxlen: 21
186.194.216.0/22 maxlen: 22
186.194.216.0/23 maxlen: 23
186.194.218.0/23 maxlen: 23
186.194.220.0/22 maxlen: 22
186.194.220.0/23 maxlen: 23
186.194.222.0/23 maxlen: 23
186.224.48.0/24 maxlen: 24
187.94.192.0/20 maxlen: 20
187.94.192.0/21 maxlen: 21
187.94.192.0/22 maxlen: 22
187.94.192.0/23 maxlen: 23
187.94.192.0/24 maxlen: 24
187.94.194.0/23 maxlen: 23
187.94.196.0/22 maxlen: 22
187.94.196.0/23 maxlen: 23
187.94.198.0/23 maxlen: 23
187.94.200.0/21 maxlen: 21
187.94.200.0/22 maxlen: 22
187.94.200.0/23 maxlen: 23
187.94.202.0/23 maxlen: 23
187.94.203.0/24 maxlen: 24
187.94.204.0/22 maxlen: 22
187.94.204.0/23 maxlen: 23
187.94.206.0/23 maxlen: 23
2804:1cd8::/32 maxlen: 32
2804:1cd8:c000::/36 maxlen: 36
2804:1cd8:d000::/36 maxlen: 36
2804:1cd8:e000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl
rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 29 Jun 2024 12:20:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:99:d7:34:de:47:75:38:6d:b7:2f:08:96:1f:56:49:b1:4e:6e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Validity
Not Before: May 23 12:02:26 2024 GMT
Not After : May 22 12:07:26 2025 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:4c:bd:d7:4d:e4:9a:9a:a8:48:3b:da:cf:
14:7c:df:5a:1f:c8:dd:46:8a:e6:5c:77:46:7b:99:
71:0a:02:62:20:02:7a:1c:bd:62:fe:6b:86:77:e7:
e3:da:59:8e:7c:02:7c:20:fb:46:aa:87:7f:af:75:
3b:f9:79:59:99:c3:f1:58:5a:89:a5:21:cb:80:6a:
d0:57:a8:6d:d5:ae:f3:3a:29:5a:11:16:a4:cc:7f:
9e:61:7a:35:45:ee:0d:70:ae:68:76:75:8e:bc:6f:
4b:65:15:c5:b6:0d:bf:46:d3:31:dc:a6:93:3c:d1:
64:17:81:a8:f4:dc:fb:a4:bf:9d:9d:ab:7f:25:76:
19:35:c2:af:cd:8a:09:69:4e:2c:2d:99:95:0c:78:
68:ea:e9:f8:b3:e8:3d:90:55:47:6f:ce:8c:a5:3b:
ed:7d:4b:c0:b6:2f:85:f8:1e:c9:df:c4:de:ce:b7:
fa:09:31:10:2b:52:5b:1b:6e:c1:5d:13:af:fa:c7:
30:1d:c6:bd:c9:c2:da:33:e3:0c:7a:a5:41:a8:71:
81:07:74:fc:7c:f2:69:13:ef:20:ab:de:66:6f:9c:
9a:97:82:64:4c:c9:e9:6e:d2:d3:db:06:4d:04:11:
8f:fb:07:ee:13:17:d4:7c:41:c9:5e:e2:84:24:5e:
1c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:41:0D:6F:D5:8A:CC:2E:93:9E:E3:D0:5C:AD:58:99:33:E7:C4:B3
X509v3 Authority Key Identifier:
keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/AS262691.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.200.0/22
177.72.20.0/22
177.87.204.0/22
179.108.192.0-179.108.239.255
186.194.208.0/20
186.224.48.0/24
187.94.192.0/20
IPv6:
2804:1cd8::/32
Signature Algorithm: sha256WithRSAEncryption
7b:29:53:78:00:9d:bf:a2:e6:ab:f9:9b:bf:22:de:dd:f3:01:
1c:4d:60:57:5c:38:7e:63:fd:b0:eb:7b:1d:ad:11:47:ce:01:
f3:b8:61:0b:46:b1:cf:e0:de:c7:4c:b0:09:dd:f8:f8:34:b8:
9e:dc:5a:ba:d9:76:13:02:d8:10:52:a5:db:6c:90:17:69:0c:
9d:70:85:89:a4:bf:36:0f:f8:f8:50:41:d7:97:5f:4a:22:fe:
bf:09:2d:e0:ad:b4:5d:f4:ca:5c:21:5b:9f:14:13:92:ea:68:
a2:40:16:6d:a7:eb:e5:53:96:df:37:2e:26:ee:4e:5d:ca:cb:
2e:00:31:57:0d:b8:9c:d0:90:15:4b:ae:f3:79:28:83:c1:72:
78:48:8d:3e:90:9d:89:71:f9:8b:20:ac:5b:cf:e5:e8:2c:16:
3d:e1:65:d7:23:e2:0d:d9:9b:1b:80:db:24:34:cb:49:f4:90:
cd:61:5e:5f:4b:1c:1d:a2:c1:ba:fa:bf:d0:47:4e:b6:db:d8:
a6:df:02:dc:90:3a:12:b1:4a:82:e6:cb:cc:59:7d:e7:ce:39:
b4:25:c0:81:75:b6:7f:90:bd:30:df:a3:b2:ef:7d:f5:70:af:
3b:73:2f:da:e1:17:e5:74:5f:3c:9e:53:5b:f2:e5:e6:32:80:
c7:b3:9f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:12 2024 by rpki-client on console-ams.rpki-client.org