Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35362e302f32342d3234203d3e20323636333132.roa
File: 3137302e3233382e35362e302f32342d3234203d3e20323636333132.roa (raw, json)
Hash identifier: Tt7zrfnTr46Tw6B99TYxvgXg2wVXBpHJfLjZluMbDCU=
Subject key identifier: 1D:47:19:4D:DD:3E:43:17:34:E5:6C:68:A2:AE:09:A8:D0:EF:4D:20
Certificate issuer: /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial: 03ED7B9BEECDE0235423B47CDA39400C32D9ED92
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35362e302f32342d3234203d3e20323636333132.roa
Signing time: Thu 20 Mar 2025 00:00:38 +0000
ROA not before: Wed 19 Mar 2025 23:55:38 +0000
ROA not after: Thu 19 Mar 2026 00:00:38 +0000
asID: 266312
IP address blocks: 170.238.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl
rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 11 Apr 2025 22:48:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:ed:7b:9b:ee:cd:e0:23:54:23:b4:7c:da:39:40:0c:32:d9:ed:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Validity
Not Before: Mar 19 23:55:38 2025 GMT
Not After : Mar 19 00:00:38 2026 GMT
Subject: CN=1D47194DDD3E431734E56C68A2AE09A8D0EF4D20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bc:53:ba:6d:34:cd:f0:98:20:45:7f:46:5c:
11:16:1f:45:2a:60:48:42:56:f1:d5:6e:90:e0:6f:
90:24:a5:fb:1e:ee:89:6f:f1:7d:15:a4:b6:0b:d6:
97:e7:1d:fa:97:66:c7:3a:5e:fb:2c:a9:02:81:ab:
a6:b1:17:cb:76:63:7d:6e:8d:9e:36:e7:98:09:30:
38:92:af:04:99:8f:b4:93:5d:9a:14:6e:b3:e9:5d:
34:31:36:48:3f:e1:98:a6:6d:8c:4a:67:a4:b5:81:
62:28:01:ff:2f:18:fe:17:d7:80:b6:de:66:5d:bc:
6d:7c:f9:47:c8:37:3d:8e:07:2b:a8:6c:da:b5:f0:
47:f6:04:a6:41:e4:2e:ca:5e:28:93:2e:24:b7:09:
02:23:5d:69:8c:c1:ee:f8:ec:0a:7c:c2:1e:16:ec:
53:8b:cc:a4:a5:cc:19:19:fa:01:33:75:9c:a0:f2:
d9:01:46:1d:70:2a:25:2a:73:96:b1:f8:24:bd:91:
b3:c7:79:79:fa:81:24:e2:00:8d:e9:19:24:e3:eb:
41:01:08:67:c8:38:53:b8:0c:7d:25:0d:5f:11:13:
51:45:15:2b:f6:61:14:aa:58:bc:61:e4:80:6c:82:
53:51:9a:5a:76:de:0b:29:b3:71:99:9a:c5:c1:16:
ef:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:47:19:4D:DD:3E:43:17:34:E5:6C:68:A2:AE:09:A8:D0:EF:4D:20
X509v3 Authority Key Identifier:
keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35362e302f32342d3234203d3e20323636333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.56.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:21:bd:8d:2e:49:e5:bb:71:58:f1:5d:99:5e:b5:80:f3:1f:
47:a1:74:ae:9a:e7:c1:c2:6e:9a:21:59:39:b9:b6:d7:f7:12:
aa:6e:d4:c0:6b:96:9e:4d:09:31:c5:de:46:c7:dd:b0:f8:f7:
db:b0:51:f6:a0:e1:d9:a3:4e:37:60:01:d0:a7:6f:f0:31:c3:
80:bf:32:f5:c1:d3:9e:ff:d2:dc:9c:75:5f:b4:01:81:6b:25:
2d:36:95:15:3d:8d:af:72:ed:57:1d:e5:4e:01:86:5c:82:3c:
ba:75:45:07:d7:00:1f:0c:45:6f:53:f3:36:11:b2:4f:d3:58:
b1:43:65:a2:fd:17:6c:92:56:78:ea:ee:d7:ba:70:dd:d1:67:
2a:dd:1d:cd:89:5a:b2:e9:62:5a:ee:32:a2:76:6c:70:de:2e:
86:58:00:e8:06:3f:18:79:eb:8c:95:5a:06:88:a8:aa:c9:63:
37:30:fe:f7:3d:9a:15:95:4f:15:27:e6:c2:be:22:0c:fe:66:
f2:1b:ed:46:8c:a6:4a:d8:94:cc:c4:98:1b:d2:38:93:07:43:
63:87:e5:c7:83:39:37:19:04:7f:4d:ae:a4:43:02:21:55:de:
38:7e:87:5d:cf:f6:14:bf:99:ec:30:25:d8:2c:90:f8:74:a0:
51:7b:57:8f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUA+17m+7N4CNUI7R82jlADDLZ7ZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEyREM5RjU5MUQzMjU5OUMzQUIwNTYxQ0I4REVGNTlD
Mzk2QzA1NTAeFw0yNTAzMTkyMzU1MzhaFw0yNjAzMTkwMDAwMzhaMDMxMTAvBgNV
BAMTKDFENDcxOTREREQzRTQzMTczNEU1NkM2OEEyQUUwOUE4RDBFRjREMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUvFO6bTTN8JggRX9GXBEWH0Uq
YEhCVvHVbpDgb5Akpfse7olv8X0VpLYL1pfnHfqXZsc6XvssqQKBq6axF8t2Y31u
jZ4255gJMDiSrwSZj7STXZoUbrPpXTQxNkg/4ZimbYxKZ6S1gWIoAf8vGP4X14C2
3mZdvG18+UfINz2OByuobNq18Ef2BKZB5C7KXiiTLiS3CQIjXWmMwe747Ap8wh4W
7FOLzKSlzBkZ+gEzdZyg8tkBRh1wKiUqc5ax+CS9kbPHeXn6gSTiAI3pGSTj60EB
CGfIOFO4DH0lDV8RE1FFFSv2YRSqWLxh5IBsglNRmlp23gsps3GZmsXBFu9JAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHUcZTd0+Qxc05Wxooq4JqNDvTSAwHwYDVR0j
BBgwFoAUCi3J9ZHTJZnDqwVhy43vWcOWwFUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGRQQkpGNXZTMWl0eEZMUXh6OTlYeXVKVkFaeWFYUHpzVUU5Ykh3Mzdh
M24vMS8wQTJEQzlGNTkxRDMyNTk5QzNBQjA1NjFDQjhERUY1OUMzOTZDMDU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBMkRDOUY1OTFEMzI1OTlD
M0FCMDU2MUNCOERFRjU5QzM5NkMwNTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RkUEJKRjV2UzFpdHhGTFF4ejk5WHl1SlZBWnlhWFB6c1VFOWJIdzM3YTNuLzEv
MzEzNzMwMmUzMjMzMzgyZTM1MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq7jgwDQYJKoZIhvcNAQELBQADggEBAH4hvY0u
SeW7cVjxXZletYDzH0ehdK6a58HCbpohWTm5ttf3Eqpu1MBrlp5NCTHF3kbH3bD4
99uwUfag4dmjTjdgAdCnb/Axw4C/MvXB057/0tycdV+0AYFrJS02lRU9ja9y7Vcd
5U4BhlyCPLp1RQfXAB8MRW9T8zYRsk/TWLFDZaL9F2ySVnjq7te6cN3RZyrdHc2J
WrLpYlruMqJ2bHDeLoZYAOgGPxh564yVWgaIqKrJYzcw/vc9mhWVTxUn5sK+Igz+
ZvIb7UaMpkrYlMzEmBvSOJMHQ2OH5ceDOTcZBH9NrqRDAiFV3jh+h13P9hS/meww
JdgskPh0oFF7V48=
-----END CERTIFICATE-----
Generated at Fri Apr 11 04:39:15 2025 by rpki-client