Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/1/3138362e3139352e3137312e302f32342d3234203d3e20323638363638.roa
File: 3138362e3139352e3137312e302f32342d3234203d3e20323638363638.roa (raw, json)
Hash identifier: bvQxXkzubUXKBiUjMW0SJ5K904ltQgUteAA91kYmIM4=
Subject key identifier: 6A:B4:10:C5:F3:63:C6:F5:C9:0F:4E:2F:99:DF:27:62:4B:06:65:F7
Certificate issuer: /CN=3EA8671A0DD4715FBC0474E196FA5FCAD0E3A30F
Certificate serial: 345DB7A27720847916654E3D824A58BD6E460C86
Authority key identifier: 3E:A8:67:1A:0D:D4:71:5F:BC:04:74:E1:96:FA:5F:CA:D0:E3:A3:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA8671A0DD4715FBC0474E196FA5FCAD0E3A30F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/1/3138362e3139352e3137312e302f32342d3234203d3e20323638363638.roa
Signing time: Wed 05 Mar 2025 20:00:29 +0000
ROA not before: Wed 05 Mar 2025 19:55:29 +0000
ROA not after: Wed 04 Mar 2026 20:00:29 +0000
asID: 268668
IP address blocks: 186.195.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/1/3EA8671A0DD4715FBC0474E196FA5FCAD0E3A30F.crl
rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/1/3EA8671A0DD4715FBC0474E196FA5FCAD0E3A30F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA8671A0DD4715FBC0474E196FA5FCAD0E3A30F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 26 Apr 2025 00:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:5d:b7:a2:77:20:84:79:16:65:4e:3d:82:4a:58:bd:6e:46:0c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3EA8671A0DD4715FBC0474E196FA5FCAD0E3A30F
Validity
Not Before: Mar 5 19:55:29 2025 GMT
Not After : Mar 4 20:00:29 2026 GMT
Subject: CN=6AB410C5F363C6F5C90F4E2F99DF27624B0665F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:82:ee:5e:e6:91:47:d5:f3:27:dd:86:61:43:
00:81:ca:21:26:90:53:6d:a1:fc:18:68:ec:33:c6:
08:e6:34:bb:a2:ab:10:6f:3b:67:c6:ab:87:34:31:
4f:8f:4a:04:e0:76:4d:9b:7c:ad:fd:53:59:b1:98:
0e:ba:57:a5:87:ab:54:72:52:ba:80:e7:a5:66:08:
13:ba:2c:9d:9a:74:c6:2d:3f:17:64:41:ec:bf:a5:
4a:a3:b0:b9:1a:0a:f3:bf:2c:a6:ad:02:2a:bf:0e:
1c:cc:a1:fd:a4:07:56:38:ad:5b:14:cb:15:9a:8f:
fa:15:01:83:37:72:df:70:89:02:55:d2:0d:4f:bd:
25:90:3e:83:47:6c:ad:c0:8b:80:8e:03:c4:46:b6:
de:2e:17:43:4b:3a:75:82:d9:7f:02:8e:12:cb:01:
34:72:81:0d:6a:78:3d:f5:9f:06:12:91:d5:21:5f:
d2:43:73:d7:05:f9:f9:67:6e:5b:79:a2:3a:a6:95:
c0:b2:96:6e:62:05:2b:c6:1b:15:b7:3d:45:c3:c8:
b3:94:1e:2e:bd:12:4f:ce:41:2f:0e:f3:a2:26:55:
28:2e:72:19:26:c0:8e:f5:1c:71:99:e2:d7:a3:ed:
fd:51:90:5f:0e:57:a9:e8:43:d8:dc:5e:b9:e4:0a:
36:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B4:10:C5:F3:63:C6:F5:C9:0F:4E:2F:99:DF:27:62:4B:06:65:F7
X509v3 Authority Key Identifier:
keyid:3E:A8:67:1A:0D:D4:71:5F:BC:04:74:E1:96:FA:5F:CA:D0:E3:A3:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/1/3EA8671A0DD4715FBC0474E196FA5FCAD0E3A30F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA8671A0DD4715FBC0474E196FA5FCAD0E3A30F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/1/3138362e3139352e3137312e302f32342d3234203d3e20323638363638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.195.171.0/24
Signature Algorithm: sha256WithRSAEncryption
91:c0:b4:d8:e2:1e:5f:c5:ff:08:a3:b0:74:ef:9e:80:ec:a0:
71:57:81:44:50:1b:f4:54:63:f0:32:d6:19:37:bc:1b:d9:52:
98:c5:bb:2d:38:e8:67:1c:86:0e:10:28:37:98:c6:36:1c:d8:
7f:5e:44:be:1d:11:1c:ca:b2:4b:5a:aa:90:6a:3a:d7:42:ef:
5b:62:c8:e1:d7:4b:1c:66:e6:20:99:87:ad:a4:0b:c4:bd:de:
c3:b6:80:70:35:57:dc:2e:fd:17:e2:71:39:0c:18:7d:eb:06:
4f:0e:9a:bd:c9:1c:c8:68:70:64:ea:58:14:78:2d:22:e2:43:
31:29:b8:74:9e:66:c0:f7:1b:12:fc:2e:7b:3f:d4:d5:44:c5:
5f:c4:60:e4:a7:bd:18:c5:27:9c:a7:2d:41:89:53:ce:67:0b:
1e:44:37:dc:88:72:37:96:ed:df:b0:31:b6:fc:fc:cc:04:b4:
93:97:5a:3e:a8:07:84:76:16:82:be:6d:37:da:6e:5f:d0:50:
44:1b:ef:57:57:5e:4e:cf:d2:34:48:2c:a3:ce:2a:29:a9:43:
a0:e7:71:d0:30:82:65:b3:c9:df:6a:48:df:4d:e8:10:f5:67:
8a:bc:66:71:67:53:d3:dd:d6:df:38:39:18:0f:3b:a7:54:46:
42:8b:e6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:57:32 2025 by rpki-client