Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e3234362e3138382e302f32342d3234203d3e20323634303031.roa
File: 3137302e3234362e3138382e302f32342d3234203d3e20323634303031.roa (raw, json)
Hash identifier: BTv/Cpagf7W0mF0E57ytoRy7WVFPWUBNmfu+4GC0h6w=
Subject key identifier: 90:D0:82:84:A8:B7:42:25:FD:8C:A3:42:87:03:07:45:9D:E5:F5:C2
Certificate issuer: /CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
Certificate serial: 03876139E3B176E36279F944D892D53ADA969276
Authority key identifier: E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e3234362e3138382e302f32342d3234203d3e20323634303031.roa
Signing time: Thu 06 Mar 2025 11:17:51 +0000
ROA not before: Thu 06 Mar 2025 11:12:51 +0000
ROA not after: Thu 05 Mar 2026 11:17:51 +0000
asID: 264001
IP address blocks: 170.246.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl
rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 11 Apr 2025 03:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:87:61:39:e3:b1:76:e3:62:79:f9:44:d8:92:d5:3a:da:96:92:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
Validity
Not Before: Mar 6 11:12:51 2025 GMT
Not After : Mar 5 11:17:51 2026 GMT
Subject: CN=90D08284A8B74225FD8CA342870307459DE5F5C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:a8:60:d2:f5:d1:1d:6c:cb:cf:b6:9b:d4:
79:7e:1f:9e:8e:0d:f8:5f:a4:6a:d8:2c:f2:06:61:
80:d7:df:d7:1b:29:02:36:f2:57:b6:83:e0:2b:21:
86:bc:fe:78:36:83:15:ca:e0:38:7c:63:f6:38:15:
f8:ae:d8:81:ca:51:ac:fc:48:c1:c4:70:59:5b:2d:
d1:18:af:81:49:47:a0:c1:a9:0a:88:16:8c:47:c9:
67:40:4a:c7:9e:bd:27:96:2b:f2:de:56:4f:c4:6e:
90:19:a7:bf:f4:47:a2:73:19:a4:d0:82:d0:c1:aa:
b1:1e:d0:9e:3a:7a:91:0c:08:a9:19:a0:43:bd:af:
f3:4e:79:1a:69:cf:ab:28:4c:22:5f:f5:25:7c:68:
e2:97:14:a3:ee:ac:3d:5d:32:0b:63:58:99:26:ee:
a6:d5:a9:e0:cf:70:ac:30:22:93:89:b9:ab:fe:06:
8c:e7:37:90:1d:18:8f:d9:b8:1b:82:0f:c4:c2:62:
18:f1:8c:a7:62:e7:8c:21:f3:a5:ee:e1:91:34:36:
1d:09:e3:8f:b2:a4:cb:79:62:0f:e6:60:c6:41:14:
ff:d3:a7:80:27:e5:1b:9b:51:af:1b:9b:8e:a0:56:
9e:9e:cb:ac:cc:53:31:f0:8b:01:b5:e4:3f:27:f7:
a3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D0:82:84:A8:B7:42:25:FD:8C:A3:42:87:03:07:45:9D:E5:F5:C2
X509v3 Authority Key Identifier:
keyid:E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e3234362e3138382e302f32342d3234203d3e20323634303031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.188.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:4f:ad:40:df:61:7f:04:d9:10:1e:8b:39:f1:5a:e6:05:a1:
fd:db:7b:78:95:56:fa:ce:16:0e:4b:67:ca:46:63:c8:c9:90:
cf:bf:ff:f0:f9:b5:1f:f2:6e:d4:ab:54:a9:06:aa:15:6c:9e:
0f:10:43:cf:8f:92:02:c1:4b:a1:40:85:18:4d:76:83:96:0b:
c5:f3:d0:ce:f9:8c:8e:ea:aa:fe:ac:e8:62:a8:c3:a3:50:74:
b3:bc:14:2b:8c:0f:2f:2e:c1:b5:6c:d9:6e:96:16:10:f0:69:
90:f3:13:24:a3:b6:36:57:d5:f5:cf:48:1d:ba:80:41:01:ea:
13:4f:7a:db:ac:93:59:df:6c:c7:20:2e:9b:37:d7:67:ed:46:
cd:9b:ab:ea:0f:2a:5b:c6:8f:71:85:22:2f:54:c5:f0:91:bb:
74:68:6b:6b:3d:50:f9:4d:82:80:62:87:e3:b3:43:94:aa:7f:
f7:b5:00:d3:47:c7:8e:a1:fb:00:4f:30:28:c0:65:0a:8b:0b:
f7:78:6f:ec:a2:b9:93:21:97:e7:6e:fd:9c:d9:e2:fd:c6:ba:
21:bf:3b:6a:f9:46:72:0a:06:73:b2:21:a7:44:61:77:c9:c0:
b8:e4:11:63:a7:cd:f2:32:59:19:4e:0c:a3:ef:1a:95:7e:cd:
62:fb:b1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:22:02 2025 by rpki-client