Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31362e302f32332d3233203d3e20323633303232.roa
File: 3138362e3234392e31362e302f32332d3233203d3e20323633303232.roa (raw, json)
Hash identifier: 23O6JYPEmUAOy+JqpCN+UO5DD1jtlLi18ehB1exk55g=
Subject key identifier: 4C:97:8B:DE:CF:CC:55:16:ED:B4:07:41:DA:B2:8F:36:A4:0F:8F:28
Certificate issuer: /CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Certificate serial: 6EA425E6FD781794D052751716E1347042AF00F5
Authority key identifier: BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31362e302f32332d3233203d3e20323633303232.roa
Signing time: Tue 08 Apr 2025 20:10:52 +0000
ROA not before: Tue 08 Apr 2025 20:05:52 +0000
ROA not after: Tue 07 Apr 2026 20:10:52 +0000
asID: 263022
IP address blocks: 186.249.16.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl
rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 15 Apr 2025 06:34:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:a4:25:e6:fd:78:17:94:d0:52:75:17:16:e1:34:70:42:af:00:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Validity
Not Before: Apr 8 20:05:52 2025 GMT
Not After : Apr 7 20:10:52 2026 GMT
Subject: CN=4C978BDECFCC5516EDB40741DAB28F36A40F8F28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:02:a9:c4:0a:3e:97:46:78:d2:a0:75:2a:16:
e8:07:66:4a:32:11:ef:b5:d5:40:83:11:fa:39:9a:
51:13:4c:e0:62:5b:78:13:d0:89:67:14:a4:4c:c7:
03:12:f9:74:a2:26:79:4e:45:d2:cf:64:9b:f0:5c:
d5:10:0b:68:96:56:32:8d:0b:65:4e:5d:87:bc:69:
46:fd:8f:65:b7:05:b6:c7:ec:39:94:8c:d5:c6:7c:
04:0d:b5:3e:16:75:bd:f8:81:a4:f7:10:f1:b3:46:
f3:c8:fb:14:a4:aa:7a:87:bc:40:10:0f:e3:81:4e:
0e:da:99:a2:0e:50:52:be:66:dd:81:01:ff:00:50:
ae:eb:59:8e:04:2b:d7:15:92:9a:07:92:3c:c4:37:
f6:8f:37:21:14:76:2a:28:56:51:d7:7a:d5:95:02:
ab:2c:62:a1:e2:5c:5b:bf:f6:9a:fb:79:6e:0d:cd:
0b:16:2a:a6:d0:8b:24:47:b8:a9:d3:00:dd:66:98:
76:1d:2b:6a:1d:2f:8b:b3:8f:91:2e:26:67:e1:21:
31:bd:04:28:74:31:88:af:49:1f:c6:82:9a:90:39:
30:1c:66:a4:54:c8:11:ef:a3:ae:31:92:4b:99:8d:
0d:8f:69:2b:2d:33:ec:9e:9c:2c:4e:f9:64:78:ff:
b6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:97:8B:DE:CF:CC:55:16:ED:B4:07:41:DA:B2:8F:36:A4:0F:8F:28
X509v3 Authority Key Identifier:
keyid:BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31362e302f32332d3233203d3e20323633303232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.249.16.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:f0:d2:a9:2c:dd:fc:2d:4d:7e:f1:24:92:86:05:a9:00:0f:
85:96:b3:98:15:2c:f1:65:56:34:c4:39:2a:a2:8b:90:15:23:
35:2a:b6:30:56:8d:1d:e7:3b:91:7d:d2:26:60:70:e4:6d:a9:
7a:fa:d4:3a:c0:19:f4:c7:6e:a9:a9:64:67:8c:cb:1f:46:3d:
19:0e:31:b8:38:9f:47:a5:b3:92:30:16:84:a1:92:61:71:ae:
1a:b3:7d:9f:24:8e:3c:93:4b:81:3a:85:09:03:56:4e:56:5f:
87:22:f0:84:d4:af:89:37:0f:52:5c:13:15:2d:04:52:8c:77:
5f:52:b1:ca:29:ff:2b:9e:a1:15:01:7f:04:bd:59:e0:2e:b5:
ca:dc:a1:a7:b9:18:a5:b9:7c:0e:b5:80:7a:30:f4:6d:21:45:
ed:12:71:32:1d:fd:06:b3:fd:b0:ae:4f:f5:bb:f0:53:fa:20:
df:c4:74:ec:aa:3c:db:0b:7f:c2:34:bd:0c:8a:dc:7e:88:a8:
23:1f:14:34:ca:92:82:87:25:4f:cd:69:40:51:2d:bd:2a:f7:
38:4b:3b:63:3b:89:d6:b0:55:65:1d:cc:b1:14:91:01:bb:3a:
49:9f:e2:f0:c7:4e:46:db:a3:65:6c:d1:cf:d9:2a:6d:29:a1:
fd:05:5e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:39:28 2025 by rpki-client