Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137372e3232312e37322e302f32312d3234203d3e203238323031.roa
File: 3137372e3232312e37322e302f32312d3234203d3e203238323031.roa (raw, json)
Hash identifier: +k6V2zakxEqKXnm2J1S6QOS0slDyYjo0G2wsrAFHL/Y=
Subject key identifier: 80:FD:AD:F5:43:1E:61:BA:1C:DF:33:2F:30:A9:D2:19:B1:63:0A:2F
Certificate issuer: /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial: 187FD69864344EAFDD82F4791C4B5508AF8825B5
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137372e3232312e37322e302f32312d3234203d3e203238323031.roa
Signing time: Wed 12 Mar 2025 13:33:18 +0000
ROA not before: Wed 12 Mar 2025 13:28:18 +0000
ROA not after: Wed 11 Mar 2026 13:33:18 +0000
asID: 28201
IP address blocks: 177.221.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 11 Apr 2025 21:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:7f:d6:98:64:34:4e:af:dd:82:f4:79:1c:4b:55:08:af:88:25:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Validity
Not Before: Mar 12 13:28:18 2025 GMT
Not After : Mar 11 13:33:18 2026 GMT
Subject: CN=80FDADF5431E61BA1CDF332F30A9D219B1630A2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:fe:91:5d:d9:c5:12:2d:90:85:45:c6:6a:
63:a4:94:87:76:a1:c0:d1:d8:db:ea:56:35:66:eb:
bf:13:5b:6a:df:da:0a:93:12:76:18:97:32:76:43:
16:d5:12:bd:71:af:31:4c:db:6b:8c:0f:0d:d0:34:
2d:dd:2f:bd:97:bd:ec:6b:6a:1d:8b:98:e5:e2:13:
69:a2:b3:4a:35:0e:a0:eb:7e:40:62:62:a1:e3:5f:
e7:9c:d4:b2:b0:c6:8c:0e:26:d6:c4:57:7b:b2:fb:
0a:fc:0e:32:aa:2b:22:31:f4:2c:8d:96:89:0d:3f:
74:64:cc:3a:95:c3:f7:83:86:a3:58:bd:7a:bd:02:
02:bd:ff:e0:cd:1e:7c:b7:72:70:4c:bb:ee:98:60:
25:02:c9:58:80:cf:6b:91:4c:9b:c9:85:fd:58:55:
02:e6:91:ed:36:fd:d1:d3:7a:88:ff:3a:b7:cc:8a:
81:aa:71:ec:2a:5b:03:8d:58:4f:a6:93:dd:8a:51:
8b:b2:24:0a:8d:32:68:78:4a:eb:eb:93:27:68:3d:
b3:ba:d5:64:55:00:86:9a:5c:20:ac:a4:48:6a:87:
16:87:b7:37:c5:ce:5b:4d:81:27:c2:05:be:6d:7a:
ab:d3:3a:a9:15:f7:3e:5f:1e:82:a7:29:39:29:c0:
d1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FD:AD:F5:43:1E:61:BA:1C:DF:33:2F:30:A9:D2:19:B1:63:0A:2F
X509v3 Authority Key Identifier:
keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137372e3232312e37322e302f32312d3234203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.221.72.0/21
Signature Algorithm: sha256WithRSAEncryption
ab:f3:d2:0b:8a:72:75:d4:c4:50:93:07:d3:1e:18:fb:cd:14:
40:ea:73:ac:cc:f3:fb:d5:45:e4:c8:57:eb:75:7a:72:77:15:
91:c2:1f:a9:71:56:f5:4d:6a:60:c4:35:9b:f9:2d:88:64:ec:
29:1a:81:e3:dc:28:76:e5:dc:07:97:61:e1:a4:7f:eb:58:62:
b7:a9:6a:89:1b:40:5f:93:2f:7b:67:2d:29:30:b3:46:57:b6:
7a:8e:95:be:b5:6b:de:32:62:56:d4:ba:41:01:38:fb:72:85:
68:3c:02:2b:19:51:c0:5e:75:24:97:57:78:d4:b5:e5:15:f7:
e7:7f:7a:0e:fd:47:82:a4:d0:16:d0:21:ec:c1:14:95:84:7c:
d4:19:5b:c4:f1:7a:86:7a:47:fb:ab:cb:f6:cf:e7:74:38:e4:
a3:d3:83:05:13:58:5d:72:e5:09:07:4e:e0:56:32:01:29:da:
37:19:70:5f:93:91:4b:54:6a:bc:c7:bf:9a:7e:54:a7:f3:a3:
52:99:d9:dd:1d:a9:ad:c1:88:ab:b2:50:9c:05:23:d2:14:76:
aa:21:ef:3f:80:aa:cb:4c:cd:81:15:d4:2a:18:ee:c1:4b:41:
dc:4f:91:ac:cd:ae:69:d0:97:b4:14:8c:6c:18:b0:3b:63:46:
0b:9a:f1:aa
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGH/WmGQ0Tq/dgvR5HEtVCK+IJbUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUMxRkU5Mzg3NjQwQTc3N0I3M0Q5NDIxMUQ0QzhGRkE1
QzY2OTMwNDAeFw0yNTAzMTIxMzI4MThaFw0yNjAzMTExMzMzMThaMDMxMTAvBgNV
BAMTKDgwRkRBREY1NDMxRTYxQkExQ0RGMzMyRjMwQTlEMjE5QjE2MzBBMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxL/6RXdnFEi2QhUXGamOklId2
ocDR2NvqVjVm678TW2rf2gqTEnYYlzJ2QxbVEr1xrzFM22uMDw3QNC3dL72Xvexr
ah2LmOXiE2mis0o1DqDrfkBiYqHjX+ec1LKwxowOJtbEV3uy+wr8DjKqKyIx9CyN
lokNP3RkzDqVw/eDhqNYvXq9AgK9/+DNHny3cnBMu+6YYCUCyViAz2uRTJvJhf1Y
VQLmke02/dHTeoj/OrfMioGqcewqWwONWE+mk92KUYuyJAqNMmh4SuvrkydoPbO6
1WRVAIaaXCCspEhqhxaHtzfFzltNgSfCBb5teqvTOqkV9z5fHoKnKTkpwNGJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgP2t9UMeYboc3zMvMKnSGbFjCi8wHwYDVR0j
BBgwFoAUrB/pOHZAp3e3PZQhHUyP+lxmkwQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXRnSEZyWXFvdGtucnpHTkhBMjJxUFhBcmJUMjJVc3BUR2NacmlETjZm
Z1UvMC9BQzFGRTkzODc2NDBBNzc3QjczRDk0MjExRDRDOEZGQTVDNjY5MzA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDMUZFOTM4NzY0MEE3NzdC
NzNEOTQyMTFENEM4RkZBNUM2NjkzMDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl0Z0hGcllxb3RrbnJ6R05IQTIycVBYQXJiVDIyVXNwVEdjWnJpRE42ZmdVLzAv
MzEzNzM3MmUzMjMyMzEyZTM3MzIyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4
MzIzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsd1IMA0GCSqGSIb3DQEBCwUAA4IBAQCr89ILinJ1
1MRQkwfTHhj7zRRA6nOszPP71UXkyFfrdXpydxWRwh+pcVb1TWpgxDWb+S2IZOwp
GoHj3Ch25dwHl2HhpH/rWGK3qWqJG0Bfky97Zy0pMLNGV7Z6jpW+tWveMmJW1LpB
ATj7coVoPAIrGVHAXnUkl1d41LXlFffnf3oO/UeCpNAW0CHswRSVhHzUGVvE8XqG
ekf7q8v2z+d0OOSj04MFE1hdcuUJB07gVjIBKdo3GXBfk5FLVGq8x7+aflSn86NS
mdndHamtwYirslCcBSPSFHaqIe8/gKrLTM2BFdQqGO7BS0HcT5Gsza5p0Je0FIxs
GLA7Y0YLmvGq
-----END CERTIFICATE-----
Generated at Fri Apr 11 10:47:37 2025 by rpki-client