Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/3139322e3134312e33322e302f32322d3234203d3e20323637343538.roa
File: 3139322e3134312e33322e302f32322d3234203d3e20323637343538.roa (raw, json)
Hash identifier: B5kMvttt+bGHnk6YxAymnhJJ1ryJ1QBy6mgYp8SEB0w=
Subject key identifier: 88:D7:DB:19:92:21:34:26:96:9B:81:51:D1:DC:98:45:10:82:AF:84
Certificate issuer: /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Certificate serial: 41AF5934D00966EA922E708DA3D4504D96897F6C
Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/3139322e3134312e33322e302f32322d3234203d3e20323637343538.roa
Signing time: Thu 06 Mar 2025 02:33:06 +0000
ROA not before: Thu 06 Mar 2025 02:28:06 +0000
ROA not after: Thu 05 Mar 2026 02:33:06 +0000
asID: 267458
IP address blocks: 192.141.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl
rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 12 Apr 2025 03:45:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:af:59:34:d0:09:66:ea:92:2e:70:8d:a3:d4:50:4d:96:89:7f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Validity
Not Before: Mar 6 02:28:06 2025 GMT
Not After : Mar 5 02:33:06 2026 GMT
Subject: CN=88D7DB1992213426969B8151D1DC98451082AF84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:c6:c3:31:43:9d:58:17:59:45:8b:d1:66:
48:a4:70:b8:e0:97:48:8d:ad:ca:8d:a1:ad:55:a1:
6d:fd:ba:01:31:a3:ac:77:a9:6f:d9:88:4c:d0:8e:
1e:1b:ae:7b:fe:00:c6:05:23:98:67:d2:96:4c:77:
52:72:61:22:ab:8c:76:e6:fe:19:88:4f:8b:d3:06:
a9:d8:1b:98:7f:f8:37:2e:3b:16:b8:c6:50:35:a4:
92:08:df:59:63:01:70:a6:28:f6:81:77:62:c1:4d:
0d:d9:7d:f2:df:3d:75:6f:18:1d:db:d0:c0:96:25:
07:4a:fb:1b:a3:0b:2c:fa:21:c2:3c:d2:20:d1:98:
73:5f:d4:93:0e:b4:f0:f0:c0:df:96:ff:5b:47:0a:
6b:cd:a4:38:0d:6e:1b:61:0a:16:eb:12:10:d9:e9:
4f:7d:06:db:f8:4c:ee:7f:d2:bf:82:f9:aa:5c:0e:
88:be:39:ee:13:5a:6b:27:3b:fc:cd:ef:1e:2d:2d:
5c:3d:34:00:f2:54:e4:0b:3d:e0:4a:25:dd:a7:62:
a7:52:36:40:f1:0f:c9:7a:27:cd:70:65:30:d5:c3:
72:18:b7:c3:2e:c6:66:6e:de:ea:5d:03:be:42:a1:
bb:30:2e:de:09:79:d9:bc:3a:dd:b7:ce:4f:86:96:
bc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D7:DB:19:92:21:34:26:96:9B:81:51:D1:DC:98:45:10:82:AF:84
X509v3 Authority Key Identifier:
keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/3139322e3134312e33322e302f32322d3234203d3e20323637343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.32.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:db:10:f4:4d:5f:f3:d8:7c:c7:3a:55:6a:d4:1a:b3:7f:d1:
19:94:a8:0a:9b:3f:a6:e3:20:31:3e:af:10:ed:87:10:68:86:
d6:94:15:de:13:bf:f4:95:5b:57:71:b4:5d:0d:62:f8:bf:89:
a9:70:c7:ff:09:81:91:83:eb:b5:58:80:7c:a0:2a:51:e6:3e:
13:e0:8d:59:a5:46:44:df:64:32:94:ae:f5:d5:82:0a:a7:1e:
7d:70:8c:a6:4b:19:04:5b:22:0e:bb:38:28:d3:88:22:3d:ad:
69:f2:31:4b:7a:8b:53:81:32:73:9c:98:49:7e:e0:85:de:6b:
4a:d4:6e:28:97:6f:f3:50:7e:f0:4a:8d:cc:d2:22:d1:99:36:
80:e2:01:bf:62:52:a5:5f:38:29:b4:c7:f3:ef:9c:a9:53:1c:
d7:b6:6e:03:29:f5:3a:2a:d6:d0:6a:a8:e2:80:4c:87:3a:e2:
cd:57:bb:56:12:92:4b:21:5a:88:2f:50:01:17:20:34:af:0b:
06:52:a5:c8:e3:d6:e1:77:6e:c4:17:20:ec:04:4d:ce:cf:4f:
2e:31:21:3b:76:74:d1:35:bd:20:51:3f:c5:1a:02:4b:e1:9c:
75:73:98:02:8b:25:80:3d:b0:05:bd:21:ac:e4:7d:59:a0:fe:
de:1f:ef:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:02:18 2025 by rpki-client