Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/3137372e32322e34382e302f32302d3234203d3e203532393533.roa
File: 3137372e32322e34382e302f32302d3234203d3e203532393533.roa (raw, json)
Hash identifier: /GXca2EfqUMJv9r49qm97J+22ilUM6/lXNmYfCJXIH0=
Subject key identifier: 79:CF:9D:FC:48:94:26:D7:54:51:2C:3E:58:5D:5C:1F:51:2A:5C:BD
Certificate issuer: /CN=136589E651A12B3538E17F7856FB523F01EC591F
Certificate serial: 35939EC09EF6BE32A0A4F1410DB7542AF24ECDF8
Authority key identifier: 13:65:89:E6:51:A1:2B:35:38:E1:7F:78:56:FB:52:3F:01:EC:59:1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/136589E651A12B3538E17F7856FB523F01EC591F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/3137372e32322e34382e302f32302d3234203d3e203532393533.roa
Signing time: Wed 05 Mar 2025 22:20:56 +0000
ROA not before: Wed 05 Mar 2025 22:15:56 +0000
ROA not after: Wed 04 Mar 2026 22:20:56 +0000
asID: 52953
IP address blocks: 177.22.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/136589E651A12B3538E17F7856FB523F01EC591F.crl
rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/136589E651A12B3538E17F7856FB523F01EC591F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/136589E651A12B3538E17F7856FB523F01EC591F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 13 Apr 2025 10:19:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:93:9e:c0:9e:f6:be:32:a0:a4:f1:41:0d:b7:54:2a:f2:4e:cd:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=136589E651A12B3538E17F7856FB523F01EC591F
Validity
Not Before: Mar 5 22:15:56 2025 GMT
Not After : Mar 4 22:20:56 2026 GMT
Subject: CN=79CF9DFC489426D754512C3E585D5C1F512A5CBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e7:dd:1d:32:5f:9a:ec:18:b4:61:4d:35:7b:
a0:46:0f:de:93:8f:87:17:ba:59:aa:cc:3f:37:33:
67:96:e7:72:37:24:6c:80:d0:f2:56:1e:8e:39:e0:
99:47:0e:58:18:db:3f:68:83:50:5d:a4:37:88:9d:
48:ef:10:87:9b:42:74:47:16:16:a1:a8:a0:d5:d6:
32:8c:c0:39:52:bf:f4:cd:b7:52:cd:ce:43:60:87:
4c:d5:b8:cd:1e:d8:56:13:66:7b:48:d5:b6:64:16:
10:89:66:ab:c3:8d:e5:70:04:ef:00:2f:01:e6:84:
d5:50:f4:4c:5a:1a:3f:ba:d9:71:bf:55:65:67:d7:
a4:8d:ed:67:49:d4:0a:5e:5f:44:1a:9d:a6:0a:d7:
7e:b8:42:54:0a:1f:0c:d7:75:5f:5d:c9:f2:98:f1:
94:3d:e9:b8:3b:bf:f0:7f:2f:7c:d8:4f:61:3b:dc:
b3:70:e1:11:0f:ab:ff:9c:6c:fc:32:9e:40:bb:58:
f3:a2:79:89:9f:b5:b3:48:ae:19:5f:10:a4:60:1b:
49:75:ae:b9:4f:7f:7c:d0:e4:b8:15:0c:e3:de:3a:
cf:f6:88:50:55:a8:4f:9f:83:42:2f:52:1d:12:9c:
3d:a2:3b:94:cc:ab:cc:58:a4:cd:f2:8b:c1:c3:23:
c4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CF:9D:FC:48:94:26:D7:54:51:2C:3E:58:5D:5C:1F:51:2A:5C:BD
X509v3 Authority Key Identifier:
keyid:13:65:89:E6:51:A1:2B:35:38:E1:7F:78:56:FB:52:3F:01:EC:59:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/136589E651A12B3538E17F7856FB523F01EC591F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/136589E651A12B3538E17F7856FB523F01EC591F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/3137372e32322e34382e302f32302d3234203d3e203532393533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.22.48.0/20
Signature Algorithm: sha256WithRSAEncryption
6a:82:e8:b9:7c:29:6c:a8:fa:4f:56:57:85:f2:3e:6c:85:63:
50:12:d6:57:9a:68:91:e5:24:d0:61:81:a3:c3:7e:34:8b:4c:
50:de:e5:ce:9e:b3:1a:2c:91:98:f0:12:36:37:42:f8:79:7f:
ca:f7:75:c1:eb:62:05:35:df:41:49:3d:12:fc:9f:8b:68:3e:
05:0a:0d:50:1e:43:66:6b:ad:4a:92:6b:6b:55:3a:7b:52:0f:
a8:79:ac:78:09:59:f2:e6:88:52:87:68:0c:ff:25:66:d1:16:
8f:77:eb:04:e2:ae:31:5e:2c:de:87:ae:66:a3:d9:3e:92:c3:
f8:5c:4f:0f:47:1f:31:0a:8a:13:53:eb:08:bc:ab:c7:50:6f:
8d:52:b2:d5:82:eb:ff:ba:47:ca:e0:11:df:95:55:b6:d8:d3:
6a:69:b5:bb:35:39:be:19:db:54:86:73:c2:74:45:d1:e6:fc:
9f:87:90:d4:73:4a:09:cd:2d:9a:0e:71:fa:ca:8c:8f:d3:6e:
52:40:51:37:03:8d:b7:ff:11:b5:0e:fd:bb:2c:94:98:3d:d4:
26:86:67:08:b8:06:3d:5f:91:e3:57:33:cb:92:d6:ed:f4:e6:
b9:7d:43:c8:78:7e:f1:dd:15:dd:4d:e9:5a:c5:66:e0:1d:7a:
d3:cd:95:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:00:50 2025 by rpki-client