Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/3138362e3235302e32342e302f32322d3234203d3e20323633303839.roa
File: 3138362e3235302e32342e302f32322d3234203d3e20323633303839.roa (raw, json)
Hash identifier: G7w9uLSHHj0Gt1Y5X4Vz8L8iXdivry4HMxXmJx4d6NM=
Subject key identifier: D5:2B:7C:64:E4:57:F0:89:3A:5A:84:EB:33:A7:C4:16:8E:D8:98:AD
Certificate issuer: /CN=32C2F909A73EFDFF0C595419D622D6A53EAEA292
Certificate serial: 2A9F8BCA30CC9BF89374DC41AF0E09B60549C949
Authority key identifier: 32:C2:F9:09:A7:3E:FD:FF:0C:59:54:19:D6:22:D6:A5:3E:AE:A2:92
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C2F909A73EFDFF0C595419D622D6A53EAEA292.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/3138362e3235302e32342e302f32322d3234203d3e20323633303839.roa
Signing time: Wed 12 Mar 2025 13:14:08 +0000
ROA not before: Wed 12 Mar 2025 13:09:08 +0000
ROA not after: Wed 11 Mar 2026 13:14:08 +0000
asID: 263089
IP address blocks: 186.250.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/32C2F909A73EFDFF0C595419D622D6A53EAEA292.crl
rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/32C2F909A73EFDFF0C595419D622D6A53EAEA292.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C2F909A73EFDFF0C595419D622D6A53EAEA292.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 13:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:9f:8b:ca:30:cc:9b:f8:93:74:dc:41:af:0e:09:b6:05:49:c9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32C2F909A73EFDFF0C595419D622D6A53EAEA292
Validity
Not Before: Mar 12 13:09:08 2025 GMT
Not After : Mar 11 13:14:08 2026 GMT
Subject: CN=D52B7C64E457F0893A5A84EB33A7C4168ED898AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a1:2b:1b:9a:36:05:7a:b0:3c:a1:95:f2:6a:
3f:23:d6:72:07:07:0f:de:78:bf:a0:e4:6f:7e:18:
d5:48:21:6f:a2:8a:7c:e6:06:51:f9:89:9a:6d:b5:
53:51:05:c0:34:eb:76:89:86:97:ce:47:cd:05:c7:
ac:37:3d:80:a2:1e:59:9a:b7:11:f2:62:e2:c9:4e:
f3:5d:2a:e3:62:f5:25:5e:38:d7:db:ca:54:f7:6f:
26:26:d2:9a:75:10:6e:1c:f7:b8:7e:04:97:28:3f:
13:39:8a:6b:61:3b:3e:36:6a:e8:ec:72:93:80:73:
98:0b:0f:69:7a:f6:de:77:e4:25:f3:eb:2a:3a:c4:
be:af:6d:76:34:0d:e8:4b:83:49:40:e3:1f:fc:60:
fa:de:f4:c0:d8:07:5c:e0:20:b3:7c:33:04:08:f3:
5b:b9:c0:72:67:76:92:ee:b2:67:9d:8e:fd:60:7e:
af:ce:ae:5e:24:ad:a5:16:51:c1:53:a1:45:48:cf:
af:f1:65:35:68:48:2e:4b:5a:5b:67:ba:df:25:ca:
ac:27:04:fd:16:f0:af:ec:52:ab:71:4e:d0:35:3d:
66:0f:70:9d:aa:77:c8:77:56:66:ea:f8:55:ff:3c:
45:23:02:e4:64:d3:b1:44:bb:bd:ae:7d:8c:27:d3:
0a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2B:7C:64:E4:57:F0:89:3A:5A:84:EB:33:A7:C4:16:8E:D8:98:AD
X509v3 Authority Key Identifier:
keyid:32:C2:F9:09:A7:3E:FD:FF:0C:59:54:19:D6:22:D6:A5:3E:AE:A2:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/32C2F909A73EFDFF0C595419D622D6A53EAEA292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C2F909A73EFDFF0C595419D622D6A53EAEA292.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/3138362e3235302e32342e302f32322d3234203d3e20323633303839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.250.24.0/22
Signature Algorithm: sha256WithRSAEncryption
91:52:3a:3c:06:98:c5:94:1d:86:34:00:1a:55:95:1d:36:e8:
45:6a:c5:16:38:78:a7:d6:52:d0:49:de:0b:da:9a:5c:a2:d1:
b9:65:67:aa:0f:6b:25:cd:6c:b0:f4:64:7a:e2:ce:07:87:d8:
2a:6e:cc:d6:e9:dc:cc:9b:89:6b:f3:b2:18:cd:4c:47:dd:df:
61:85:ef:81:1e:35:43:05:f7:b4:f4:89:db:00:4b:c7:ee:36:
b5:d8:63:1b:a4:39:b4:32:f2:cc:c5:91:b6:c2:5f:02:72:7c:
60:ad:58:29:6a:5e:39:09:26:2f:1b:30:be:cf:88:cc:c5:65:
5f:27:5d:ee:4b:51:8c:6c:f5:ec:bc:53:e2:a1:9d:6c:e6:4d:
8b:c7:66:ec:2b:95:6c:81:bc:f7:3f:66:dd:94:25:d0:fd:e7:
02:92:b5:7c:18:ec:44:da:2c:4b:09:72:da:a3:40:a9:74:82:
2d:59:3a:85:a0:04:de:44:d4:48:95:f5:b5:1a:8a:c6:3a:98:
9f:22:bd:89:15:43:e4:fb:17:d5:29:8f:52:38:63:7f:ae:73:
60:24:96:9d:22:5d:57:8c:55:46:d4:16:bf:9b:72:17:cc:2d:
39:db:8b:19:f0:74:b8:8e:fe:26:07:a9:23:1f:01:fe:a9:17:
69:7f:98:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 18:54:50 2025 by rpki-client