Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3139302e3132302e33332e302f32342d3234203d3e20323730363930.roa
File: 3139302e3132302e33332e302f32342d3234203d3e20323730363930.roa (raw, json)
Hash identifier: Q8fT0X0GWM0hUQiYXkk2teK4Zmhm+tiJhQOBJv4JZPA=
Subject key identifier: 97:FC:83:48:3C:A4:0B:CE:DF:20:21:60:62:BE:0F:1E:E4:D0:4F:72
Certificate issuer: /CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
Certificate serial: 6383960B9701E405B110330DB0A25F8C56293445
Authority key identifier: 29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3139302e3132302e33332e302f32342d3234203d3e20323730363930.roa
Signing time: Thu 03 Apr 2025 13:56:41 +0000
ROA not before: Thu 03 Apr 2025 13:51:41 +0000
ROA not after: Thu 02 Apr 2026 13:56:41 +0000
asID: 270690
IP address blocks: 190.120.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl
rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 25 Apr 2025 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:83:96:0b:97:01:e4:05:b1:10:33:0d:b0:a2:5f:8c:56:29:34:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
Validity
Not Before: Apr 3 13:51:41 2025 GMT
Not After : Apr 2 13:56:41 2026 GMT
Subject: CN=97FC83483CA40BCEDF20216062BE0F1EE4D04F72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3e:96:a9:4a:fe:53:f2:2c:e8:62:c7:28:a2:
0a:d0:8c:07:9d:63:da:d8:64:27:fc:04:50:17:3c:
07:f8:aa:89:3f:9e:24:b4:af:28:a9:7e:5c:ac:83:
a6:63:07:7d:b0:55:dc:98:71:9c:1b:71:a8:6f:67:
4e:48:0f:76:ca:49:54:7e:31:20:c0:20:fc:10:d3:
f3:3a:b9:07:89:79:9b:86:e2:c7:9c:46:fc:1d:c0:
d3:aa:84:f6:fd:18:7b:4c:e3:f1:d8:0f:c0:d6:6e:
26:c1:2c:a9:9c:a5:01:52:94:62:4e:92:b3:7f:88:
6d:b5:eb:74:d7:96:8d:21:ab:8a:d4:8d:a2:1b:65:
8b:b6:69:d6:13:e9:d6:51:26:4f:8b:96:78:71:72:
c4:b2:18:91:e6:32:7a:47:1c:6a:e4:83:fd:29:f2:
12:0d:3e:13:2f:36:86:eb:86:5d:71:f5:73:a2:4f:
36:82:2b:0c:f1:5b:50:d9:99:00:5b:20:01:ba:2b:
6b:8c:8c:fd:ec:2b:39:83:1b:f5:fd:80:b7:61:0f:
77:3c:9d:e6:fc:fc:0c:ee:37:4e:db:47:4f:aa:53:
61:f1:66:23:9f:36:74:cb:42:67:66:9a:af:8d:d6:
13:6c:0d:41:53:77:a5:7f:f1:d7:3f:f2:3a:f5:f5:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FC:83:48:3C:A4:0B:CE:DF:20:21:60:62:BE:0F:1E:E4:D0:4F:72
X509v3 Authority Key Identifier:
keyid:29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3139302e3132302e33332e302f32342d3234203d3e20323730363930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.120.33.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ac:23:8f:59:e2:ad:8a:79:18:6b:46:36:39:2f:4f:a7:62:
ac:a8:cf:3e:32:e3:90:6f:5e:56:ea:6b:c7:0d:26:45:81:95:
85:b3:67:b9:89:58:23:a4:ad:05:21:1f:c3:58:5b:4b:41:6d:
49:bc:43:4a:64:91:71:3d:f2:61:41:2d:5b:ae:2e:9a:90:16:
6e:35:fb:c2:8a:4d:4b:d1:fe:0b:da:fe:59:fb:62:80:84:fe:
25:bc:a4:08:62:26:5c:e9:31:86:b5:7a:64:26:59:df:21:11:
4c:38:5e:b1:4f:e4:0a:ea:9a:53:0c:fd:62:59:1f:1f:4e:79:
00:09:d2:4b:32:88:7e:d5:65:46:1d:5b:c9:8f:f2:b5:ec:e9:
74:55:02:3e:ba:da:bb:e7:35:bd:78:ed:94:c5:32:f7:05:d3:
d1:23:29:b9:a9:d5:6c:c9:ff:73:65:ba:fc:c8:d8:7f:64:cb:
6c:09:5b:6f:93:a1:3b:4d:b6:48:8c:9b:1e:93:50:ce:d8:ee:
fd:bc:08:6f:8c:8b:1b:c4:41:f1:6b:1a:fa:c6:94:04:61:91:
7b:c5:91:d3:43:20:a6:92:c9:8b:22:0f:99:51:d6:c8:7e:14:
bb:6e:7c:d3:7d:08:e4:db:85:98:e9:72:d7:9c:f1:d1:7a:55:
78:57:aa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:51:22 2025 by rpki-client