Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/3137372e36372e33382e302f32342d3234203d3e20323633393438.roa
File: 3137372e36372e33382e302f32342d3234203d3e20323633393438.roa (raw, json)
Hash identifier: vIPR7tZHr+dotECJFLbX0Dl6iWjnJN59MLnTEMsBUzg=
Subject key identifier: 1B:FF:3F:B5:08:C1:DD:E1:11:1C:51:B4:A4:D1:F0:D3:D4:FB:B3:50
Certificate issuer: /CN=9C7F75A4B29AA7ECE436A69A356827489DE646F7
Certificate serial: 6563DECEBF9752FF0D7606878F34BEBF70DDD54E
Authority key identifier: 9C:7F:75:A4:B2:9A:A7:EC:E4:36:A6:9A:35:68:27:48:9D:E6:46:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C7F75A4B29AA7ECE436A69A356827489DE646F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/3137372e36372e33382e302f32342d3234203d3e20323633393438.roa
Signing time: Mon 17 Mar 2025 20:58:21 +0000
ROA not before: Mon 17 Mar 2025 20:53:21 +0000
ROA not after: Mon 16 Mar 2026 20:58:21 +0000
asID: 263948
IP address blocks: 177.67.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/9C7F75A4B29AA7ECE436A69A356827489DE646F7.crl
rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/9C7F75A4B29AA7ECE436A69A356827489DE646F7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C7F75A4B29AA7ECE436A69A356827489DE646F7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 01:44:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:63:de:ce:bf:97:52:ff:0d:76:06:87:8f:34:be:bf:70:dd:d5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C7F75A4B29AA7ECE436A69A356827489DE646F7
Validity
Not Before: Mar 17 20:53:21 2025 GMT
Not After : Mar 16 20:58:21 2026 GMT
Subject: CN=1BFF3FB508C1DDE1111C51B4A4D1F0D3D4FBB350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:a3:d9:b2:83:73:3f:49:64:63:d6:f9:ed:
a4:19:f3:3d:14:cb:d6:00:81:54:1e:7f:6b:b1:f3:
23:bd:83:ca:ee:25:63:90:02:9b:e5:f8:e0:cd:41:
f0:43:e5:95:d9:c0:94:08:55:9c:b7:f0:20:a3:5a:
95:7d:8a:11:f4:75:77:e9:79:12:02:70:1d:2a:ec:
58:95:01:45:3b:0d:33:a1:d6:28:70:f4:3f:8e:67:
ff:62:ad:41:41:1d:43:e8:4a:74:a2:98:a5:1d:62:
f4:93:4c:af:57:7a:27:c6:c8:73:76:2c:16:6b:b2:
53:24:23:27:2b:74:f3:fb:41:e5:a5:9d:9a:03:33:
d3:13:78:56:64:b6:4d:71:65:73:d8:02:87:74:ab:
c4:2e:0b:2a:3f:b7:84:e6:78:cd:42:78:b1:4c:9c:
ac:16:3b:9b:2d:fc:de:7f:35:36:9e:b0:c7:08:92:
73:6d:30:1a:cc:6a:83:38:86:66:bb:13:82:62:6a:
64:74:a5:01:2a:1d:86:c6:f4:4a:e1:76:94:fe:29:
39:30:45:5a:f1:4a:25:63:0a:da:79:31:ca:e0:5c:
8e:5f:ea:0b:b8:6a:a8:dd:fe:69:d7:d8:32:b8:eb:
55:82:b1:44:ea:9b:32:0b:5e:d1:55:aa:4d:57:2c:
9e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FF:3F:B5:08:C1:DD:E1:11:1C:51:B4:A4:D1:F0:D3:D4:FB:B3:50
X509v3 Authority Key Identifier:
keyid:9C:7F:75:A4:B2:9A:A7:EC:E4:36:A6:9A:35:68:27:48:9D:E6:46:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/9C7F75A4B29AA7ECE436A69A356827489DE646F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C7F75A4B29AA7ECE436A69A356827489DE646F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/3137372e36372e33382e302f32342d3234203d3e20323633393438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.38.0/24
Signature Algorithm: sha256WithRSAEncryption
49:52:d1:22:ad:af:8a:d5:36:5a:4f:de:9a:ae:84:18:ca:26:
33:bc:d5:2c:62:a3:74:99:5a:71:f4:fd:c9:5d:17:90:50:20:
6e:53:80:f0:f3:40:8f:bf:9b:c1:07:f8:a8:5f:35:35:4c:5b:
cb:5e:74:8e:8c:21:6a:95:35:98:b0:5c:ff:31:29:cb:96:11:
df:67:05:c3:43:1b:43:df:b5:67:ad:62:0b:db:8f:64:e6:1c:
4f:4c:66:a2:b4:de:f4:ed:65:07:86:5c:08:c6:d4:c6:ed:38:
3e:e5:43:16:5a:59:6a:53:c4:b1:79:23:1a:1f:e2:90:79:e7:
0f:5c:51:15:e4:e3:95:94:ce:5b:30:fa:2c:6e:48:c8:92:b5:
65:29:83:46:fa:1e:96:b5:b0:55:cc:91:dc:b0:3b:78:d3:fa:
fb:54:0a:50:3d:51:27:f4:05:ad:b5:a2:6f:11:67:cf:61:81:
c9:fb:8b:31:20:a6:b6:5c:f0:2c:35:56:e0:48:ff:6d:c9:46:
1c:90:2c:b1:63:36:eb:2b:1d:4e:25:16:50:5e:c3:ea:a6:be:
2a:eb:56:b8:20:c0:92:d7:e0:1e:35:1f:62:af:61:4a:31:13:
13:f0:44:40:1c:7c:93:b1:02:7a:44:83:92:15:ff:e7:d4:04:
f3:62:24:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:10:04 2025 by rpki-client