Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/3136382e3139342e3230302e302f32322d3234203d3e20323635343430.roa
File: 3136382e3139342e3230302e302f32322d3234203d3e20323635343430.roa (raw, json)
Hash identifier: 0miu0D5Gp1Chkjl4hhkBDcSw8B8Ad0dKsBzzjNy10No=
Subject key identifier: 3A:C7:8B:61:4D:85:10:EF:EA:F1:6D:42:A9:A1:38:33:DB:BC:DA:11
Certificate issuer: /CN=D4DA9F477593CD447FEE14D83B87CF3109732518
Certificate serial: 605E44133620236FABFF938224D6E31F4DA87753
Authority key identifier: D4:DA:9F:47:75:93:CD:44:7F:EE:14:D8:3B:87:CF:31:09:73:25:18
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4DA9F477593CD447FEE14D83B87CF3109732518.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/3136382e3139342e3230302e302f32322d3234203d3e20323635343430.roa
Signing time: Mon 10 Mar 2025 20:15:44 +0000
ROA not before: Mon 10 Mar 2025 20:10:44 +0000
ROA not after: Mon 09 Mar 2026 20:15:44 +0000
asID: 265440
IP address blocks: 168.194.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.crl
rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4DA9F477593CD447FEE14D83B87CF3109732518.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 04:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:5e:44:13:36:20:23:6f:ab:ff:93:82:24:d6:e3:1f:4d:a8:77:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4DA9F477593CD447FEE14D83B87CF3109732518
Validity
Not Before: Mar 10 20:10:44 2025 GMT
Not After : Mar 9 20:15:44 2026 GMT
Subject: CN=3AC78B614D8510EFEAF16D42A9A13833DBBCDA11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:fc:dc:80:97:a4:16:6c:f2:96:f5:50:c9:
73:f5:aa:f8:03:54:a5:a5:55:43:dc:a7:ae:23:1b:
c2:76:51:94:36:f3:9a:0f:68:24:5e:49:c5:fb:b0:
aa:a0:bd:18:91:c2:aa:15:b6:11:b5:27:7c:97:d3:
94:60:96:14:2f:fa:c5:15:2e:56:68:98:3c:6b:c9:
bd:40:64:1b:3a:94:55:c2:71:d6:3f:b2:7e:50:74:
7f:4d:aa:1c:88:5c:db:b7:cc:f2:dc:f0:31:76:d1:
66:56:48:df:ff:c7:a7:73:ce:92:e0:f4:60:a8:fc:
37:e9:28:69:5c:77:70:8a:e1:0f:fb:41:dc:80:58:
22:c4:99:57:f5:d2:18:97:4e:c7:0e:de:1a:c1:b2:
9a:37:0b:da:82:ff:c5:68:76:6e:ca:1c:99:f7:7a:
7f:c4:1a:19:5c:1e:31:aa:1f:41:59:f7:9d:59:5e:
c0:03:a3:18:a9:41:c9:e1:71:a4:1c:ec:17:5a:47:
36:94:90:d9:50:ec:46:13:54:50:6e:31:33:f0:1d:
a6:d0:48:82:d9:70:33:61:db:c2:57:6f:58:66:04:
9e:4e:33:fa:d2:ff:14:40:18:75:47:0b:0e:e1:52:
4d:d2:f9:cf:5d:f2:6a:b7:16:2b:70:16:87:b5:4e:
04:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C7:8B:61:4D:85:10:EF:EA:F1:6D:42:A9:A1:38:33:DB:BC:DA:11
X509v3 Authority Key Identifier:
keyid:D4:DA:9F:47:75:93:CD:44:7F:EE:14:D8:3B:87:CF:31:09:73:25:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4DA9F477593CD447FEE14D83B87CF3109732518.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/3136382e3139342e3230302e302f32322d3234203d3e20323635343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.200.0/22
Signature Algorithm: sha256WithRSAEncryption
30:b3:b5:c0:84:79:45:48:6d:02:fb:66:4c:6e:b5:c6:dd:c6:
85:3f:52:e0:2d:f4:a7:63:a6:38:ce:d2:6c:fa:26:b1:8f:82:
94:09:ef:eb:48:24:28:6d:59:6d:90:f9:55:65:3b:53:f8:01:
22:17:a8:6f:fe:43:62:a2:02:f2:fd:49:68:f7:c2:23:57:24:
cb:4f:03:dd:da:41:43:9d:f4:d8:89:71:17:27:08:42:d0:07:
78:c2:c4:a7:44:e4:08:e7:89:69:7e:36:df:6a:e6:2b:c7:6b:
24:7c:ed:5b:75:cd:2a:d6:85:3e:d5:68:a1:7a:34:fe:3e:6c:
c6:f2:b1:a5:84:47:d7:61:8e:15:b0:43:ba:31:fd:af:aa:5b:
eb:6d:19:34:a4:6c:67:41:6a:a5:f4:7d:01:65:29:0a:2b:f0:
f6:54:b1:27:06:31:0e:08:72:a6:90:bc:61:04:16:bc:69:73:
40:f5:df:24:76:5b:85:fa:bc:90:b5:00:d5:0f:f7:69:d3:f5:
20:b5:17:65:bc:88:58:46:55:00:ad:ab:3d:20:44:d9:14:43:
ed:a2:9c:95:e6:fa:1a:8f:c1:28:c2:3c:49:54:72:28:f7:63:
71:45:ab:3d:5a:33:d1:a4:6a:e2:b1:d5:40:05:bf:33:58:49:
fa:13:d5:b6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUYF5EEzYgI2+r/5OCJNbjH02od1MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDREQTlGNDc3NTkzQ0Q0NDdGRUUxNEQ4M0I4N0NGMzEw
OTczMjUxODAeFw0yNTAzMTAyMDEwNDRaFw0yNjAzMDkyMDE1NDRaMDMxMTAvBgNV
BAMTKDNBQzc4QjYxNEQ4NTEwRUZFQUYxNkQ0MkE5QTEzODMzREJCQ0RBMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAZ/zcgJekFmzylvVQyXP1qvgD
VKWlVUPcp64jG8J2UZQ285oPaCReScX7sKqgvRiRwqoVthG1J3yX05RglhQv+sUV
LlZomDxryb1AZBs6lFXCcdY/sn5QdH9NqhyIXNu3zPLc8DF20WZWSN//x6dzzpLg
9GCo/DfpKGlcd3CK4Q/7QdyAWCLEmVf10hiXTscO3hrBspo3C9qC/8Vodm7KHJn3
en/EGhlcHjGqH0FZ951ZXsADoxipQcnhcaQc7BdaRzaUkNlQ7EYTVFBuMTPwHabQ
SILZcDNh28JXb1hmBJ5OM/rS/xRAGHVHCw7hUk3S+c9d8mq3FitwFoe1TgRFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUOseLYU2FEO/q8W1CqaE4M9u82hEwHwYDVR0j
BBgwFoAU1NqfR3WTzUR/7hTYO4fPMQlzJRgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlc2MjFaYzNTdTVVdXV4YlN5TU05QUFwOXZxNnI0c3lpbnV1cTFBZXlO
elYvMC9ENERBOUY0Nzc1OTNDRDQ0N0ZFRTE0RDgzQjg3Q0YzMTA5NzMyNTE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0REE5RjQ3NzU5M0NENDQ3
RkVFMTREODNCODdDRjMxMDk3MzI1MTguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZXNjIxWmMzU3U1VXV1eGJTeU1NOUFBcDl2cTZyNHN5aW51dXExQWV5TnpWLzAv
MzEzNjM4MmUzMTM5MzQyZTMyMzAzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNTM0MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjCyDANBgkqhkiG9w0BAQsFAAOCAQEAMLO1
wIR5RUhtAvtmTG61xt3GhT9S4C30p2OmOM7SbPomsY+ClAnv60gkKG1ZbZD5VWU7
U/gBIheob/5DYqIC8v1JaPfCI1cky08D3dpBQ5302IlxFycIQtAHeMLEp0TkCOeJ
aX4232rmK8drJHztW3XNKtaFPtVooXo0/j5sxvKxpYRH12GOFbBDujH9r6pb620Z
NKRsZ0FqpfR9AWUpCivw9lSxJwYxDghyppC8YQQWvGlzQPXfJHZbhfq8kLUA1Q/3
adP1ILUXZbyIWEZVAK2rPSBE2RRD7aKcleb6Go/BKMI8SVRyKPdjcUWrPVoz0aRq
4rHVQAW/M1hJ+hPVtg==
-----END CERTIFICATE-----
Generated at Sun Apr 13 15:24:57 2025 by rpki-client