Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233322e302f32312d3231203d3e20323633343834.roa
File: 3139312e3234322e3233322e302f32312d3231203d3e20323633343834.roa (raw, json)
Hash identifier: j+P9+grjK7cGrgWMVdXxA1l9N9qMcddW1sz5ChlWz0c=
Subject key identifier: E9:5C:75:0A:72:3C:FD:7F:71:B4:C3:E4:25:02:CE:DC:2D:3D:79:A8
Certificate issuer: /CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
Certificate serial: 589509A0C9EDF042B126AE037EBAFF14511F07E6
Authority key identifier: 77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233322e302f32312d3231203d3e20323633343834.roa
Signing time: Thu 03 Apr 2025 13:48:35 +0000
ROA not before: Thu 03 Apr 2025 13:43:35 +0000
ROA not after: Thu 02 Apr 2026 13:48:35 +0000
asID: 263484
IP address blocks: 191.242.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl
rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 05:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:95:09:a0:c9:ed:f0:42:b1:26:ae:03:7e:ba:ff:14:51:1f:07:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
Validity
Not Before: Apr 3 13:43:35 2025 GMT
Not After : Apr 2 13:48:35 2026 GMT
Subject: CN=E95C750A723CFD7F71B4C3E42502CEDC2D3D79A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:81:cd:f4:fc:0e:43:87:8d:31:31:ee:a8:a3:
81:d6:1f:ad:7e:ec:18:49:b4:98:37:f5:49:aa:ed:
91:b2:34:52:a2:19:7f:ba:dc:4a:45:29:59:9f:c9:
14:94:16:cc:e4:b3:77:ff:96:c1:16:5f:e6:34:fb:
36:e7:7d:9f:9f:ef:69:0f:be:c4:84:98:05:9a:fd:
1f:f0:c7:2e:c5:0f:e6:f7:ef:44:76:47:48:83:42:
2a:d0:21:5b:75:95:07:a8:46:8a:7a:80:2f:b2:5d:
0f:ae:48:a7:1b:1e:ce:e0:20:33:0d:17:2f:cf:19:
a6:a0:43:d7:40:56:09:22:fa:e5:e4:36:cf:84:6b:
5e:b6:3f:ae:a5:1e:c0:8f:62:bf:40:57:52:54:e9:
c5:1f:69:9b:e2:51:18:08:8c:9a:56:b4:5f:df:06:
ce:98:e8:62:2b:6e:01:0b:52:ae:df:08:e8:7c:a0:
34:79:72:78:5f:2e:55:23:dd:12:3e:68:3f:12:be:
6a:86:d0:14:5d:7b:21:1e:f3:d9:b5:ae:4b:c8:fc:
cb:7b:62:09:bf:8b:e1:79:40:b3:7b:05:c5:34:99:
6c:80:3f:48:f7:52:34:77:89:52:4d:f4:5d:f6:5e:
3e:fa:ae:ed:f1:3e:93:5a:97:e1:f1:f1:60:b4:f8:
17:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5C:75:0A:72:3C:FD:7F:71:B4:C3:E4:25:02:CE:DC:2D:3D:79:A8
X509v3 Authority Key Identifier:
keyid:77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233322e302f32312d3231203d3e20323633343834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.242.232.0/21
Signature Algorithm: sha256WithRSAEncryption
11:f6:5f:4e:20:32:57:04:b0:66:49:2c:35:4b:ed:0a:a2:12:
b8:a7:65:f7:c3:7c:24:05:e2:80:28:d8:15:59:90:c0:6e:ad:
f0:1f:dc:7e:62:23:c5:87:63:81:e2:4c:43:f0:a0:5e:5f:26:
b1:c2:12:19:8b:14:0d:f6:66:a4:16:21:f8:7c:bf:80:be:df:
a8:76:75:36:28:a9:77:82:1b:56:85:b7:b4:62:c0:c7:c0:10:
2a:15:5f:9e:e8:15:0f:ab:61:20:c5:43:a1:cc:c4:32:e9:b9:
cf:f3:d2:d3:af:a8:7c:4f:64:7a:23:4c:8b:e1:c5:48:ad:00:
cc:0f:34:9f:fc:2b:12:02:b2:a5:e0:33:b7:88:57:cd:a6:41:
98:a1:99:27:a4:7a:e0:da:e0:68:9d:f3:4b:89:4f:a6:6d:7d:
d3:9f:9a:01:cf:cf:15:b8:5d:d9:64:c7:ce:27:25:c4:85:71:
bd:ee:9e:d6:05:81:7f:77:50:a6:7a:cb:bd:61:be:58:03:a4:
ea:a2:a5:90:42:e0:a0:23:89:3d:e7:01:ec:2d:48:bc:f7:f1:
89:f7:fd:10:e0:46:6c:b0:30:fe:35:c2:e7:65:cd:8e:d0:32:
ad:06:0d:1b:1e:32:95:56:8e:96:f6:57:72:27:6f:10:89:5e:
25:0c:19:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:26:05 2025 by rpki-client