Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3230312e3231362e3130342e302f32322d3332203d3e20323732363435.roa
File: 3230312e3231362e3130342e302f32322d3332203d3e20323732363435.roa (raw, json)
Hash identifier: gZaYlFtBaEw2oCdRSekp1gNFv/g+uyGOOpUwwyPpFTA=
Subject key identifier: 2A:12:DF:1A:97:83:18:CD:B2:17:E6:20:9E:00:B8:6B:0D:FC:DB:2A
Certificate issuer: /CN=1E71509DDAF040F68CB7D75B73108CE2284487D7
Certificate serial: 034B3D17FCFC82B7D2678D9D502F890E7E48F37D
Authority key identifier: 1E:71:50:9D:DA:F0:40:F6:8C:B7:D7:5B:73:10:8C:E2:28:44:87:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E71509DDAF040F68CB7D75B73108CE2284487D7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3230312e3231362e3130342e302f32322d3332203d3e20323732363435.roa
Signing time: Sun 02 Mar 2025 14:14:47 +0000
ROA not before: Sun 02 Mar 2025 14:09:47 +0000
ROA not after: Sun 01 Mar 2026 14:14:47 +0000
asID: 272645
IP address blocks: 201.216.104.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/1E71509DDAF040F68CB7D75B73108CE2284487D7.crl
rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/1E71509DDAF040F68CB7D75B73108CE2284487D7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E71509DDAF040F68CB7D75B73108CE2284487D7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 09:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:4b:3d:17:fc:fc:82:b7:d2:67:8d:9d:50:2f:89:0e:7e:48:f3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E71509DDAF040F68CB7D75B73108CE2284487D7
Validity
Not Before: Mar 2 14:09:47 2025 GMT
Not After : Mar 1 14:14:47 2026 GMT
Subject: CN=2A12DF1A978318CDB217E6209E00B86B0DFCDB2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4e:2b:ac:d3:07:cf:ca:ec:36:4d:e3:49:e5:
de:13:76:e7:dd:53:cd:83:6d:0d:c3:d0:85:60:f0:
45:06:fa:36:74:ba:af:f3:95:75:7c:e1:a7:bf:23:
1a:83:58:c5:7c:08:b6:26:b7:ab:f5:68:fe:05:7f:
01:c0:5a:32:31:a8:df:56:3a:a3:e8:d2:8a:d9:65:
d8:22:fe:56:a6:2c:04:d3:5e:cf:39:0f:9d:87:22:
ee:7e:6e:47:5f:49:e7:3e:5d:7d:ab:95:42:8c:4c:
2f:74:cc:9f:ec:96:a8:50:78:9d:4c:32:06:0f:c9:
cc:3b:dc:87:10:6e:c3:e0:ff:d7:86:88:0f:f1:91:
57:fa:1b:aa:d3:18:db:17:9e:ec:ce:9a:6b:35:6d:
49:ff:3f:d9:b9:fd:d9:46:20:dd:15:78:a5:92:b0:
ba:f4:ce:48:e8:25:dc:2a:35:58:08:55:da:24:03:
c4:9a:84:f2:cb:6f:35:83:6f:03:bf:7f:33:a1:62:
a9:33:3c:e6:5e:ba:d5:fa:d8:83:ea:4f:b7:f7:0c:
f2:86:3a:85:fb:43:6f:76:17:b1:b3:97:75:36:d8:
22:a1:7f:ce:f1:2d:1a:df:28:38:6e:56:90:d5:48:
57:b0:f8:24:db:b0:ed:cc:e6:a4:9f:23:78:2f:17:
88:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:12:DF:1A:97:83:18:CD:B2:17:E6:20:9E:00:B8:6B:0D:FC:DB:2A
X509v3 Authority Key Identifier:
keyid:1E:71:50:9D:DA:F0:40:F6:8C:B7:D7:5B:73:10:8C:E2:28:44:87:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/1E71509DDAF040F68CB7D75B73108CE2284487D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E71509DDAF040F68CB7D75B73108CE2284487D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3230312e3231362e3130342e302f32322d3332203d3e20323732363435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.216.104.0/22
Signature Algorithm: sha256WithRSAEncryption
59:1d:d8:b0:c6:f8:99:d1:94:57:2b:52:04:97:37:52:8b:7f:
a6:56:e4:6f:d7:5c:85:75:8f:d4:1d:f9:d1:f6:4d:0b:a4:e1:
5d:d1:59:70:eb:40:ce:3c:41:e9:4a:11:97:fe:ec:f6:aa:42:
6c:1b:3c:e1:c4:ac:55:7f:f2:ed:8d:98:b4:e7:a0:c0:e9:70:
bd:4c:66:d0:29:fe:37:c8:8f:43:e9:f5:19:6f:7d:63:b0:e9:
8a:c5:ef:32:58:b0:ae:4b:2a:33:23:5c:85:c7:97:53:ef:14:
5b:c3:a1:f4:2b:0b:c9:78:8b:44:87:10:18:c5:fd:7d:46:d4:
19:12:0f:77:03:64:06:e7:9b:28:45:2d:93:c9:88:bd:21:bd:
fe:4a:e3:a4:54:0f:6e:23:43:33:f1:36:99:c1:7f:c2:e6:be:
d1:4c:8b:bb:f4:e1:7c:54:4d:7f:a2:77:bd:52:32:f6:c5:39:
9e:2a:e6:b6:75:4f:25:cb:d0:b9:a8:59:12:f9:2c:65:00:b2:
b2:d6:86:7d:1f:a1:42:c8:d6:1e:a0:48:5a:be:34:93:a1:57:
a2:aa:66:c6:a2:56:8a:dc:69:43:c9:6b:43:28:27:f6:73:ad:
64:73:24:45:64:82:9f:2c:49:67:e3:09:1a:dd:4d:5f:6a:f6:
89:f1:35:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:37:16 2025 by rpki-client