Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3230302e302e302f31362d3136203d3e2034323330.roa
File: 3230302e3230302e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier: 4NT5fk2kJI6dseZHfDcYWOlx8yxdGtKsjZ59XD1Ykfs=
Subject key identifier: 58:89:1C:02:CF:2E:C4:C4:13:BA:0D:17:11:3C:92:02:ED:7A:8D:BF
Certificate issuer: /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial: 1E5A3B6D6E98D34B405DA54563734714E97BC531
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3230302e302e302f31362d3136203d3e2034323330.roa
Signing time: Wed 05 Mar 2025 19:00:05 +0000
ROA not before: Wed 05 Mar 2025 18:55:05 +0000
ROA not after: Wed 04 Mar 2026 19:00:05 +0000
asID: 4230
IP address blocks: 200.200.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 09 Apr 2025 03:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:5a:3b:6d:6e:98:d3:4b:40:5d:a5:45:63:73:47:14:e9:7b:c5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
Validity
Not Before: Mar 5 18:55:05 2025 GMT
Not After : Mar 4 19:00:05 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3b:a9:30:fe:9c:34:d3:b5:e1:cb:ad:72:4f:
5b:47:39:fc:32:eb:ef:c8:40:60:b8:02:64:e2:0f:
0c:e1:d0:39:35:60:52:fa:62:64:b1:4f:b3:a0:c3:
69:f6:fd:51:bf:44:bb:b0:de:01:5a:87:20:85:cb:
cc:0e:dd:b9:e1:dd:39:59:d8:2a:4f:1e:aa:66:ba:
9c:8a:8e:0c:0d:17:0b:88:e6:c3:d3:cf:62:85:64:
43:d7:dd:35:ea:ff:5e:c5:71:00:0c:74:52:8e:be:
4e:a9:32:7b:cd:8f:c8:05:3c:fe:92:b1:db:75:0d:
5b:d6:c1:fa:b8:2a:16:5a:0e:6d:9c:f5:da:dd:76:
ba:f8:ec:be:56:fb:79:57:44:2a:3a:1d:ac:35:db:
e3:82:47:8b:0a:31:ff:bb:b8:87:5b:71:3e:7d:5a:
8a:02:6b:23:ba:be:0f:8c:75:af:70:7b:85:e8:be:
ff:07:1e:9e:e7:49:10:11:7a:39:85:ef:93:95:05:
67:7a:99:8a:b7:a1:b2:06:bf:61:5c:a5:b5:c8:e7:
0d:8f:71:ac:13:6a:e4:27:27:ae:9e:84:55:92:57:
cf:a4:87:7e:92:ac:ac:7b:80:15:a1:9b:b4:49:9d:
95:96:b1:59:59:6b:ef:91:e5:e4:d5:f3:19:b6:43:
09:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:89:1C:02:CF:2E:C4:C4:13:BA:0D:17:11:3C:92:02:ED:7A:8D:BF
X509v3 Authority Key Identifier:
keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3230302e302e302f31362d3136203d3e2034323330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.200.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:23:10:e6:98:18:12:02:00:6d:89:8b:61:0c:a5:6d:c6:d7:
92:a7:e7:44:17:f8:6f:3b:8f:ce:d8:d8:06:be:77:77:73:b9:
75:a2:2c:04:54:fd:cc:2e:c5:41:b4:d0:bf:28:b8:01:f4:bc:
28:ac:84:d8:83:ad:16:6b:eb:84:6c:92:dc:f3:31:28:bb:d3:
cc:d2:6d:0a:5c:2e:3c:6c:28:62:0f:90:7d:09:3f:e0:51:dd:
1e:eb:f7:87:23:ab:11:9b:53:62:ec:45:13:82:4c:68:53:b5:
51:db:32:88:de:6e:f2:71:d9:97:5a:a2:6d:2c:df:f2:5b:1b:
b0:21:12:50:39:d4:be:a5:b0:6f:df:3c:d5:16:c7:36:46:47:
ef:c3:84:ce:41:ea:51:f7:c7:84:12:76:05:4e:bf:58:91:c1:
b9:65:67:0b:60:f2:c5:c1:89:76:d9:0b:57:83:73:3d:fd:b5:
64:e1:e9:85:59:d8:7e:24:4f:36:8e:49:4c:a5:4e:2d:fe:d2:
c4:00:73:84:5a:3e:9a:8a:a4:77:81:d3:1a:c2:fe:3f:78:b9:
07:31:47:fa:f3:56:35:3e:c1:4d:d0:15:b3:44:61:b3:3a:43:
10:06:33:57:61:63:37:7a:f1:31:3b:d0:77:9e:01:98:bf:2d:
e7:e8:88:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:23:44 2025 by rpki-client