Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3138302e302f32332d3234203d3e20323637343834.roa
File: 3138392e3132362e3138302e302f32332d3234203d3e20323637343834.roa (raw, json)
Hash identifier: xN6lm4h2Sjdbnj4bRCyo4ppBkVUjH3nAF0fx3LYGsv8=
Subject key identifier: 6E:ED:8E:E3:82:69:7E:25:E2:89:E6:D5:0C:CB:97:65:9A:AD:5C:4E
Certificate issuer: /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial: 60F9A8702A3EEF7A6AAAD12F961EE7086A541056
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3138302e302f32332d3234203d3e20323637343834.roa
Signing time: Mon 10 Feb 2025 14:35:54 +0000
ROA not before: Mon 10 Feb 2025 14:30:54 +0000
ROA not after: Mon 09 Feb 2026 14:35:54 +0000
asID: 267484
IP address blocks: 189.126.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 24 Apr 2025 09:10:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:f9:a8:70:2a:3e:ef:7a:6a:aa:d1:2f:96:1e:e7:08:6a:54:10:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Validity
Not Before: Feb 10 14:30:54 2025 GMT
Not After : Feb 9 14:35:54 2026 GMT
Subject: CN=6EED8EE382697E25E289E6D50CCB97659AAD5C4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:76:32:43:2c:96:ef:f4:c7:03:07:7b:7f:33:
63:6a:19:85:7f:ea:c3:ef:32:56:68:1a:85:9c:b3:
16:b8:30:58:b5:f0:72:91:78:63:45:27:9e:88:6b:
d9:c4:46:6c:fa:bb:72:15:49:b3:73:65:5a:2e:b2:
e2:92:e0:ce:79:a7:b7:fd:e0:f3:e7:e2:9c:89:16:
0a:19:fe:c5:8e:01:15:bc:77:db:db:e3:b5:2c:83:
0e:8f:e7:28:6e:32:5a:fc:0e:31:75:d4:e3:c4:6a:
69:f6:8f:99:4e:d8:0a:23:19:f1:c6:a0:6b:cf:68:
ae:cb:81:c3:11:38:57:03:b6:4e:3f:0d:8d:f0:26:
ae:dd:86:e8:40:0d:5e:f8:99:fb:d7:73:f2:d6:ce:
29:35:c8:6b:81:71:a5:40:92:4f:b4:15:a7:e3:fa:
35:52:0c:27:5a:0f:07:77:d0:dc:40:9f:f7:d0:f1:
7f:70:74:5d:de:35:eb:fb:bd:8d:0f:66:58:3f:a6:
39:18:4e:4a:6b:41:cb:d0:8f:4d:6e:b5:8c:b3:19:
8f:11:1f:31:21:75:41:38:95:f1:81:aa:3e:2b:2b:
39:bd:37:0a:e0:90:58:1b:83:10:f5:0e:e1:ce:c3:
61:fc:f0:ee:1c:12:86:fa:3e:fa:38:1f:7f:8f:bb:
62:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:ED:8E:E3:82:69:7E:25:E2:89:E6:D5:0C:CB:97:65:9A:AD:5C:4E
X509v3 Authority Key Identifier:
keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3138302e302f32332d3234203d3e20323637343834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.126.180.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:f0:62:71:7d:32:06:e3:44:9e:a1:0d:fa:e9:bf:8a:73:fb:
a6:6e:93:f0:50:bc:8e:ee:af:cd:45:01:9e:97:3e:9a:b1:09:
f1:d6:75:d7:df:34:b4:e9:a0:42:01:f3:6b:41:b5:0b:66:42:
0d:9a:2e:68:52:79:eb:19:a1:e2:1f:82:87:28:2c:a8:78:d0:
c8:7f:fc:86:5c:c2:52:f8:d8:49:57:9b:65:db:3b:66:77:ae:
f7:f2:12:90:c5:ea:41:94:8e:c9:d3:0a:cb:91:9a:77:8a:7d:
17:75:b5:64:80:de:28:4a:a0:85:9e:d1:67:ad:9a:33:eb:44:
0b:f3:bf:c4:4e:58:39:1c:4e:8c:cb:c3:5f:0d:2e:42:73:4c:
3e:96:83:d5:52:7c:e2:1c:7f:86:f5:77:b0:03:08:93:69:42:
96:02:5e:49:18:67:0d:f0:2b:d3:ff:b1:ed:b4:fc:ae:1c:14:
61:a7:b4:05:59:0d:27:d6:13:8f:ca:85:ba:c8:4b:44:8a:7f:
5a:d1:c4:4b:f1:6e:e1:94:65:1f:90:9a:6e:a2:43:e6:c6:b0:
6d:12:ee:19:e8:af:13:f4:83:51:c2:97:2f:b0:ee:cd:24:66:
8e:e7:29:18:53:42:61:7b:31:57:d0:e1:28:6b:28:60:4b:86:
9a:0b:4a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 00:38:12 2025 by rpki-client