Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137322e302f32322d3232203d3e20323730323739.roa
File: 3230302e3132342e3137322e302f32322d3232203d3e20323730323739.roa (raw, json)
Hash identifier: G21rYQorQc2vMjNSJNaeitlhvIhWXGxuqhbE6L3iV9I=
Subject key identifier: B9:51:37:5B:78:90:64:8F:C6:1F:C7:10:65:06:C8:A4:C8:CC:95:85
Certificate issuer: /CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
Certificate serial: 1B8BA2D46BBA3E78FC0BB4B813BC00FFEC1EE702
Authority key identifier: CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137322e302f32322d3232203d3e20323730323739.roa
Signing time: Wed 05 Mar 2025 19:00:25 +0000
ROA not before: Wed 05 Mar 2025 18:55:25 +0000
ROA not after: Wed 04 Mar 2026 19:00:25 +0000
asID: 270279
IP address blocks: 200.124.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl
rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 02:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:8b:a2:d4:6b:ba:3e:78:fc:0b:b4:b8:13:bc:00:ff:ec:1e:e7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
Validity
Not Before: Mar 5 18:55:25 2025 GMT
Not After : Mar 4 19:00:25 2026 GMT
Subject: CN=B951375B7890648FC61FC7106506C8A4C8CC9585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c4:41:f7:47:91:f3:da:4a:ac:0d:31:6c:4b:
ad:51:64:7a:88:f5:9d:3f:9d:61:50:75:21:80:b2:
bd:9f:60:e2:53:50:19:3a:ff:33:ed:01:4f:3d:3e:
cf:bf:72:75:99:41:ca:7b:59:4e:2a:9a:2e:9c:c8:
55:fc:2e:10:6b:8a:a7:c0:61:ef:60:20:06:95:11:
1f:0c:48:3b:b0:3f:7b:97:b5:cb:c9:4b:d4:10:be:
e5:66:22:bd:47:3e:6e:8e:b1:21:69:44:4c:70:d8:
c5:81:cf:65:5e:f3:ec:11:11:8f:4b:e2:22:33:f8:
91:75:50:4d:84:c3:74:3e:13:f6:41:af:3c:10:f2:
0a:d4:c3:cc:bd:58:01:75:1e:b1:fa:41:d7:63:dd:
cb:6a:5f:23:13:41:1c:64:f2:d2:cc:6d:83:d7:bd:
98:71:17:b8:d1:1b:e4:23:48:d8:d3:b4:32:65:55:
72:fe:bb:04:55:45:95:01:fa:5b:b2:24:ec:5e:83:
5e:d1:06:5e:a8:cf:09:49:9e:3d:ca:a7:40:73:62:
a6:35:0e:44:99:11:b4:a9:0d:f4:30:3f:ab:ca:3d:
15:0d:8b:2b:3f:da:cb:1c:cc:31:13:29:27:da:e5:
9d:9e:71:9e:e9:cb:94:e6:1e:12:36:41:f1:6e:80:
6b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:51:37:5B:78:90:64:8F:C6:1F:C7:10:65:06:C8:A4:C8:CC:95:85
X509v3 Authority Key Identifier:
keyid:CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137322e302f32322d3232203d3e20323730323739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.124.172.0/22
Signature Algorithm: sha256WithRSAEncryption
34:bf:d0:06:4b:f1:4a:d8:82:63:e0:52:49:90:96:96:1a:4b:
93:c3:70:02:52:ef:af:2a:1a:d3:16:a2:7c:49:5e:1f:60:5e:
1f:b7:9a:42:0e:33:12:93:39:3c:3f:6d:1c:d5:f3:7e:b5:7f:
b5:77:00:20:c3:fe:35:2e:25:aa:8c:6f:0d:b3:3b:e2:66:bd:
11:d2:de:13:da:02:fa:7e:26:46:10:5b:26:af:6d:e4:67:7f:
b4:71:15:ab:b6:a0:b6:8a:2f:5e:29:99:0c:26:8e:46:0f:1b:
a8:4a:0a:cd:ff:e1:b4:55:05:33:29:88:d7:e0:38:8d:13:3d:
d6:72:ce:7e:b3:77:04:a4:82:38:6d:be:37:b9:82:ea:63:5c:
92:92:b4:e0:53:29:25:88:9a:b9:96:e3:3d:10:ee:4d:f8:74:
d5:4a:c5:4d:e4:90:f2:da:fd:67:39:df:5c:49:14:bd:a0:43:
44:de:3f:69:05:1c:f9:d0:23:9b:a0:fa:a9:c8:93:d9:49:44:
59:e3:f2:8c:1e:29:fb:a8:e4:53:29:fa:32:a4:58:8f:aa:40:
e7:88:eb:e7:87:28:6d:c8:30:48:3f:3e:93:7f:b1:95:9b:36:
1f:5a:ec:46:46:ce:60:3f:ae:18:ce:9d:ec:62:b9:c9:f1:09:
27:d5:8d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:59:15 2025 by rpki-client