Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/1/3137302e3234342e3230342e302f32322d3234203d3e20323636353039.roa
File: 3137302e3234342e3230342e302f32322d3234203d3e20323636353039.roa (raw, json)
Hash identifier: QE5Dn7OhDKRYrdpnlhfw/lSGp01UN275vDOORq2Lus4=
Subject key identifier: 99:67:8E:FF:09:71:47:2C:0B:FA:26:95:6E:00:7F:8E:C9:4E:EF:4F
Certificate issuer: /CN=0A231FBDB78730CFA863854B96AD42C4BFDBA45A
Certificate serial: 7468B26EDEACA19A7E506EBA6812189D9C5E9634
Authority key identifier: 0A:23:1F:BD:B7:87:30:CF:A8:63:85:4B:96:AD:42:C4:BF:DB:A4:5A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A231FBDB78730CFA863854B96AD42C4BFDBA45A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/1/3137302e3234342e3230342e302f32322d3234203d3e20323636353039.roa
Signing time: Wed 05 Mar 2025 22:43:40 +0000
ROA not before: Wed 05 Mar 2025 22:38:40 +0000
ROA not after: Wed 04 Mar 2026 22:43:40 +0000
asID: 266509
IP address blocks: 170.244.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/1/0A231FBDB78730CFA863854B96AD42C4BFDBA45A.crl
rsync://rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/1/0A231FBDB78730CFA863854B96AD42C4BFDBA45A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A231FBDB78730CFA863854B96AD42C4BFDBA45A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 13 Apr 2025 13:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:68:b2:6e:de:ac:a1:9a:7e:50:6e:ba:68:12:18:9d:9c:5e:96:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A231FBDB78730CFA863854B96AD42C4BFDBA45A
Validity
Not Before: Mar 5 22:38:40 2025 GMT
Not After : Mar 4 22:43:40 2026 GMT
Subject: CN=99678EFF0971472C0BFA26956E007F8EC94EEF4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f7:f0:72:50:a2:a7:cf:bd:51:c6:dc:05:08:
76:35:ae:f3:6d:a7:8a:72:98:64:e6:c6:05:f4:5c:
c1:c6:22:81:f6:e1:d0:8d:9d:a9:c7:56:df:6f:53:
2b:1f:b9:1a:6a:ce:58:e2:64:00:e8:96:ee:6e:30:
bf:35:55:7c:da:5a:22:93:c8:e6:9b:2e:54:f9:fd:
7d:3d:de:bd:1b:3c:e9:f0:85:2f:b6:18:6a:fe:2e:
51:ba:bc:39:30:02:aa:54:9f:cc:60:bf:14:26:18:
fc:a4:15:26:2c:e9:ec:e9:27:7a:07:ce:17:15:13:
c2:73:ab:44:19:a5:df:fd:88:b3:8e:b8:11:dd:12:
d9:10:d0:0a:36:41:87:bc:72:8c:c5:c0:4a:7d:9c:
dc:aa:bf:0a:e0:c3:1b:a0:dd:a5:57:29:91:86:f5:
dd:44:a5:6e:3e:26:b6:78:61:33:89:37:7e:33:9a:
40:60:19:15:ea:60:58:3e:54:77:69:64:8d:9a:a7:
cf:f8:f6:2e:f3:b0:15:32:27:77:ef:43:59:ef:38:
a5:f1:66:57:50:0c:71:73:85:af:04:42:18:6e:eb:
f9:16:b8:0a:49:1b:08:dc:34:e0:7f:8e:fb:22:52:
2c:30:99:86:a4:6c:0c:97:10:d4:f9:84:a5:a5:6a:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:67:8E:FF:09:71:47:2C:0B:FA:26:95:6E:00:7F:8E:C9:4E:EF:4F
X509v3 Authority Key Identifier:
keyid:0A:23:1F:BD:B7:87:30:CF:A8:63:85:4B:96:AD:42:C4:BF:DB:A4:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/1/0A231FBDB78730CFA863854B96AD42C4BFDBA45A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A231FBDB78730CFA863854B96AD42C4BFDBA45A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/1/3137302e3234342e3230342e302f32322d3234203d3e20323636353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.204.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:c9:64:db:2e:d0:74:69:2d:8d:1e:19:34:2c:27:43:2f:2b:
fe:6e:68:fb:b6:82:a4:13:26:8b:c2:ee:6c:b7:79:15:1a:24:
1c:1d:73:28:27:34:ad:fe:6b:2a:41:f1:84:30:0d:70:3a:3d:
88:7b:54:a5:b4:de:66:e6:9f:71:7c:5f:9d:64:af:54:38:cf:
43:e7:6c:d2:c1:bd:47:74:a1:ce:d6:9e:08:ae:91:e9:cb:f3:
f6:d9:72:b7:44:b4:79:16:f9:57:29:47:9f:bd:0c:c0:37:9a:
e7:8e:db:67:bf:59:5d:d4:26:11:d6:d0:b6:db:2e:3a:36:ca:
de:b2:01:55:62:48:e4:d6:81:de:8c:cd:85:fc:78:04:15:ae:
14:5b:eb:89:9f:59:19:dc:3e:95:65:5a:30:52:60:41:a3:04:
b4:b4:72:cd:20:8d:9b:f0:0d:ec:77:0c:c6:ee:c5:bd:2a:5b:
d9:cc:67:e1:8f:80:28:66:82:90:c1:a4:a4:de:cc:63:79:86:
23:db:94:3d:49:c7:af:33:ba:8a:ed:66:a7:d8:41:df:aa:09:
14:7f:f1:df:43:90:8e:3b:bc:1f:fd:84:d6:59:98:6c:a1:0c:
6c:2d:ec:bb:6f:9d:21:18:fb:ad:0d:6e:50:94:a2:17:4c:7b:
14:70:92:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:16:38 2025 by rpki-client