Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138362e3233352e3137362e302f32312d3231203d3e203238313339.roa
File: 3138362e3233352e3137362e302f32312d3231203d3e203238313339.roa (raw, json)
Hash identifier: TwZVk7QJsgiCimCQmLhzIgq+GSLBcdhDOgA6ePoHf9c=
Subject key identifier: EC:E8:69:8F:98:5E:9C:67:42:7D:1D:CA:C6:0E:41:C0:E2:05:10:78
Certificate issuer: /CN=8DCB7831617AC9209CC97DB36614C6B05759A03B
Certificate serial: 010FB76DA5AACB8989F6595C9DA02C68F30B530B
Authority key identifier: 8D:CB:78:31:61:7A:C9:20:9C:C9:7D:B3:66:14:C6:B0:57:59:A0:3B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DCB7831617AC9209CC97DB36614C6B05759A03B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138362e3233352e3137362e302f32312d3231203d3e203238313339.roa
Signing time: Mon 31 Mar 2025 18:51:00 +0000
ROA not before: Mon 31 Mar 2025 18:46:00 +0000
ROA not after: Mon 30 Mar 2026 18:51:00 +0000
asID: 28139
IP address blocks: 186.235.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/8DCB7831617AC9209CC97DB36614C6B05759A03B.crl
rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/8DCB7831617AC9209CC97DB36614C6B05759A03B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DCB7831617AC9209CC97DB36614C6B05759A03B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 21 Apr 2025 23:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0f:b7:6d:a5:aa:cb:89:89:f6:59:5c:9d:a0:2c:68:f3:0b:53:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DCB7831617AC9209CC97DB36614C6B05759A03B
Validity
Not Before: Mar 31 18:46:00 2025 GMT
Not After : Mar 30 18:51:00 2026 GMT
Subject: CN=ECE8698F985E9C67427D1DCAC60E41C0E2051078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:70:d0:c4:4a:0e:9d:8b:32:5a:d6:6e:53:4e:
32:e2:e1:66:48:74:de:26:05:8d:a2:8d:59:4b:fa:
09:a5:ed:91:ec:4f:bd:e6:48:f4:9c:df:d7:26:b8:
05:e5:f8:1c:8d:87:2f:b9:50:20:6e:90:25:7e:4f:
bf:79:86:26:88:65:8b:3f:2c:87:d5:06:80:b5:e5:
7e:3b:01:c7:51:93:ab:92:07:9c:96:64:a1:7d:d7:
ad:cd:b0:19:d7:3c:f5:8a:1e:85:31:dd:56:d7:1e:
3e:6d:74:fb:b3:e9:d5:34:df:31:75:72:a8:1d:71:
d8:b0:f2:40:09:ae:81:95:fe:27:2e:3e:ff:c6:16:
c4:a9:72:0d:ba:25:65:9d:c1:2d:70:2c:3b:29:38:
83:3c:f2:22:ae:29:b2:9c:1f:d2:07:4f:57:08:13:
bf:aa:8a:53:b8:ba:e9:aa:18:ca:df:93:94:f9:ef:
b2:e3:54:24:7a:a3:03:bd:89:e6:89:b1:44:40:0f:
b0:65:ef:65:62:d0:ce:2b:8a:6d:c8:e1:07:a7:ba:
6b:e9:cf:3d:d8:cd:ea:da:d6:a1:31:45:0e:3d:71:
84:fb:f1:f5:fd:d4:c1:70:7d:e5:e9:b4:24:9d:59:
87:2b:22:c7:14:f6:b3:0f:3d:c5:80:04:94:db:f4:
9b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E8:69:8F:98:5E:9C:67:42:7D:1D:CA:C6:0E:41:C0:E2:05:10:78
X509v3 Authority Key Identifier:
keyid:8D:CB:78:31:61:7A:C9:20:9C:C9:7D:B3:66:14:C6:B0:57:59:A0:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/8DCB7831617AC9209CC97DB36614C6B05759A03B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DCB7831617AC9209CC97DB36614C6B05759A03B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138362e3233352e3137362e302f32312d3231203d3e203238313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.235.176.0/21
Signature Algorithm: sha256WithRSAEncryption
97:50:df:45:6b:fb:b7:35:e7:ac:16:9b:9c:e7:04:2e:26:46:
4c:ba:c7:28:30:18:1c:33:4e:04:d4:d6:cb:90:7c:20:e3:14:
5d:f2:55:f4:13:60:b3:c7:76:42:e4:72:7d:ea:e3:89:ab:31:
13:f4:96:9c:fd:7d:3f:7e:c6:22:5b:52:f8:79:15:f5:59:5e:
88:d2:81:fa:d1:06:93:a5:13:be:86:22:02:c2:04:ef:43:c0:
8d:20:43:d4:da:3e:13:f0:04:25:93:68:2e:2b:45:7e:e6:63:
5c:e7:d4:26:1f:64:db:46:ef:34:c3:76:bd:e0:c6:71:2a:60:
5b:84:40:8f:36:95:2e:1f:23:f9:c2:a4:90:d7:ec:be:8d:f5:
b1:69:40:3a:f4:88:ac:6c:e2:7b:b0:b7:1d:ed:09:a8:29:13:
3d:1a:c1:db:32:de:65:1e:aa:2f:33:3f:f9:7c:39:ac:51:8a:
99:7e:28:35:83:d0:4e:ea:d6:9c:b1:0b:9b:24:25:a7:3b:c9:
7c:9a:eb:80:35:67:81:8e:76:3e:c5:29:ef:49:16:30:2c:99:
c0:2c:d2:f0:2b:95:78:b5:97:b3:c5:54:6c:37:6b:08:20:52:
45:6f:e7:e8:bf:0e:d0:0f:54:33:4b:aa:93:68:ac:6c:10:ec:
5b:e6:51:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 14:02:25 2025 by rpki-client