Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232322e302f32342d3234203d3e20323633393934.roa
File: 3133382e3235352e3232322e302f32342d3234203d3e20323633393934.roa (raw, json)
Hash identifier: rUA2p8XCtJ6rr6DcjJLPqRDbL93mf7G7+Rto4dptglM=
Subject key identifier: 12:9E:7F:E3:46:F7:7C:B6:86:74:63:DD:DE:4F:63:F0:D4:65:F2:55
Certificate issuer: /CN=6933A3E9616B92D4A6606885C3C206355CC19035
Certificate serial: 36E490A723398EF7119CDF762538366DA4B6081E
Authority key identifier: 69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232322e302f32342d3234203d3e20323633393934.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 263994
IP address blocks: 138.255.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl
rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 15 Apr 2025 01:18:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:e4:90:a7:23:39:8e:f7:11:9c:df:76:25:38:36:6d:a4:b6:08:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6933A3E9616B92D4A6606885C3C206355CC19035
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject: CN=129E7FE346F77CB6867463DDDE4F63F0D465F255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:45:04:03:bb:58:be:25:f6:52:e8:15:12:c6:
f4:4b:b0:ce:ed:4c:c0:23:40:1f:71:4f:10:a1:d7:
94:b5:f7:8b:fb:bb:77:38:4f:3b:15:21:07:50:ad:
c0:9b:90:96:ad:9a:22:65:8a:5f:79:ba:8b:ca:d3:
15:59:bb:41:ff:6a:dd:40:4c:23:dc:1c:3d:cf:91:
0b:cb:a0:9c:90:19:bf:c1:17:88:e9:e2:0a:0f:1d:
19:b5:7f:f7:93:29:ea:e6:72:2b:a8:1d:f0:dd:ef:
e7:ae:a2:eb:5b:60:a5:08:cb:7d:e8:b1:0d:ee:df:
46:02:df:cf:8c:fa:89:94:7f:10:15:97:3f:9d:0a:
fc:a8:ba:52:a9:5a:23:4c:2b:a5:e4:79:96:76:8d:
34:63:07:6c:3b:c0:c0:c9:5d:15:41:81:c5:c2:76:
0e:a3:6c:f9:c7:9e:ed:b0:9f:a3:86:1e:51:45:6d:
95:a4:6f:28:24:82:e0:77:39:ce:41:6a:c1:e4:a0:
b8:ec:e6:47:6e:0a:82:e4:ea:90:3a:d4:6e:57:00:
29:b2:8c:32:11:88:8b:b1:a1:6d:b0:fc:f6:c9:71:
4c:b2:88:8d:b7:bd:61:f1:8f:61:4b:58:71:1e:4d:
53:2b:7a:47:17:84:ee:e7:76:d9:94:f6:a6:6e:fb:
ce:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9E:7F:E3:46:F7:7C:B6:86:74:63:DD:DE:4F:63:F0:D4:65:F2:55
X509v3 Authority Key Identifier:
keyid:69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232322e302f32342d3234203d3e20323633393934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.222.0/24
Signature Algorithm: sha256WithRSAEncryption
09:31:22:df:60:eb:d6:18:c2:5b:33:56:c8:23:6d:a7:10:ab:
cf:b7:23:9c:a4:69:6b:e2:56:55:07:b6:01:8b:33:a9:53:89:
e3:6a:f0:91:09:cb:2a:5f:ee:17:f5:14:21:68:e6:a0:89:2a:
5f:ec:0b:db:d9:b0:06:28:64:ec:bd:2c:8d:d5:f4:8a:73:b5:
8f:27:6e:d7:c5:0d:b4:ca:97:7b:7f:f6:2d:d1:92:2a:61:8a:
9a:a7:b0:a4:43:ac:6e:36:8e:a0:ee:50:0b:8b:78:01:ee:5a:
46:20:f7:1f:f7:4c:32:96:c5:a7:92:97:8f:33:72:a0:38:c2:
75:a6:cb:25:29:24:38:bb:0c:5b:02:85:d8:cf:9a:f5:2c:0a:
19:89:f9:27:28:87:96:bc:00:2c:62:98:ce:91:f1:73:6e:18:
68:19:37:f1:22:a4:79:d8:e0:3d:23:94:d8:51:d3:0a:d8:d4:
17:c5:5d:4c:a8:85:45:da:b1:fd:a2:1d:a6:d2:46:de:91:19:
64:ae:71:a3:63:a0:f1:af:9e:55:66:5c:ac:3d:f5:4e:06:84:
2d:c6:11:f3:7d:6b:67:18:b1:62:a4:6e:c6:48:42:a5:52:7d:
82:01:ad:56:6c:43:53:df:b0:6c:0c:0d:0d:9c:e2:24:3c:eb:
48:cd:24:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 05:53:09 2025 by rpki-client