
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3132322e31362e302f32322d3232203d3e20323733333039.roa
File: 3133382e3132322e31362e302f32322d3232203d3e20323733333039.roa (raw, json)
Hash identifier: e2bmDKi3gDjVr8kFGgkW+9GWxZtt0OJTzu9rrXaI2Oo=
Subject key identifier: FD:40:EE:53:46:86:B8:26:EA:27:FD:6A:70:33:65:A2:14:11:34:FF
Certificate issuer: /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial: 42E17FADEA3BE7AA3C7609BD3A204CF16020C36C
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3132322e31362e302f32322d3232203d3e20323733333039.roa
Signing time: Wed 09 Apr 2025 13:53:39 +0000
ROA not before: Wed 09 Apr 2025 13:48:39 +0000
ROA not after: Wed 08 Apr 2026 13:53:39 +0000
asID: 273309
IP address blocks: 138.122.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 12:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:e1:7f:ad:ea:3b:e7:aa:3c:76:09:bd:3a:20:4c:f1:60:20:c3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Validity
Not Before: Apr 9 13:48:39 2025 GMT
Not After : Apr 8 13:53:39 2026 GMT
Subject: CN=FD40EE534686B826EA27FD6A703365A2141134FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:13:e1:e8:cf:de:ac:9c:b3:ef:3c:2f:1b:a9:
74:35:78:9d:40:21:a8:07:9a:b4:a4:53:cf:39:41:
b4:6a:57:9b:c6:68:6b:ea:0a:54:03:3a:32:68:f5:
53:b5:f7:dd:27:8f:ce:23:09:4c:79:11:43:e1:cc:
b9:da:62:13:af:1f:6a:8d:70:2e:88:fc:2a:0f:3a:
84:a1:22:9a:25:91:09:9d:47:e4:6a:1b:84:7e:32:
92:0a:f4:60:4a:eb:03:f3:92:f7:23:8e:c8:cc:51:
9b:76:24:38:60:0e:d5:b6:9b:1e:ae:48:b0:96:19:
95:ad:52:51:3b:f8:26:cd:c9:09:62:d6:8b:71:5f:
87:34:33:fb:e1:7e:60:98:06:5a:ed:d7:ed:86:1c:
ed:37:4c:b3:ab:55:ce:51:17:08:84:9a:fd:f3:28:
cf:e3:83:d7:19:49:a2:31:94:dc:f0:31:f2:46:05:
6a:4a:cd:19:32:cd:21:50:0d:5b:6d:3e:14:32:c1:
cc:aa:b7:69:29:51:d7:74:4e:98:37:9f:98:a0:57:
5f:78:05:09:c6:4c:45:5d:d4:97:7a:ca:dd:83:39:
3c:52:f0:d4:da:b1:5b:d8:b3:78:f7:73:8c:71:41:
91:31:7a:11:1a:3e:c4:55:78:19:7f:7f:f1:a5:b5:
73:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:40:EE:53:46:86:B8:26:EA:27:FD:6A:70:33:65:A2:14:11:34:FF
X509v3 Authority Key Identifier:
keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3132322e31362e302f32322d3232203d3e20323733333039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.16.0/22
Signature Algorithm: sha256WithRSAEncryption
34:e3:53:da:7c:c5:30:a5:4f:aa:10:59:2a:a9:76:d4:fe:e2:
31:e0:50:f9:9e:32:6a:c5:41:1e:e3:52:40:f5:80:aa:f0:5d:
17:d7:bb:a3:87:27:ea:13:39:b5:02:36:d2:08:98:b2:a8:77:
6d:df:7a:49:74:d6:5e:96:af:e7:a4:8b:eb:fb:91:a5:b9:ce:
82:3e:23:e2:63:3d:47:55:e4:5b:79:3f:b3:11:da:8e:42:40:
b4:5a:e3:54:64:f1:75:d8:20:0e:a5:ee:11:64:fa:39:6d:02:
24:ea:ce:f4:f3:0f:88:cd:a9:7d:be:12:56:7f:fd:07:61:04:
3e:08:12:3e:ac:71:c4:ec:1c:dc:14:78:88:e0:8a:28:9e:d8:
e6:04:43:23:49:75:29:f0:5b:38:32:ab:9a:90:56:a2:75:b2:
1a:c7:b1:2c:3f:54:83:b2:b5:71:62:8d:2e:ca:dc:70:c1:71:
31:2a:7a:20:fa:61:66:83:d6:ad:7a:29:43:e3:ee:03:80:70:
88:76:b8:66:cb:89:ba:00:4c:9a:91:22:4c:4f:7f:85:33:c4:
05:1f:df:7d:9c:9a:78:95:2c:8f:1b:00:9a:ff:4e:c6:db:83:
c9:1f:c8:2c:d0:68:c6:5e:bb:68:e8:36:cf:7a:0c:48:8a:7e:
24:a6:ba:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 19:13:21 2025 by rpki-client