Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3133312e3235352e3232342e302f32322d3232203d3e20323634343936.roa
File: 3133312e3235352e3232342e302f32322d3232203d3e20323634343936.roa (raw, json)
Hash identifier: 1LVwNAgQBdqaLPTurbbFNUWAicliNN9lQcES85/LVM4=
Subject key identifier: 0C:9A:22:BB:5D:C4:B1:54:52:1A:05:FB:2A:0C:07:60:88:5F:3C:25
Certificate issuer: /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial: 1C78038FAD99A80D99D1CF066241B6DB1A83440C
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3133312e3235352e3232342e302f32322d3232203d3e20323634343936.roa
Signing time: Wed 26 Feb 2025 14:34:05 +0000
ROA not before: Wed 26 Feb 2025 14:29:05 +0000
ROA not after: Wed 25 Feb 2026 14:34:05 +0000
asID: 264496
IP address blocks: 131.255.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 20:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:78:03:8f:ad:99:a8:0d:99:d1:cf:06:62:41:b6:db:1a:83:44:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Validity
Not Before: Feb 26 14:29:05 2025 GMT
Not After : Feb 25 14:34:05 2026 GMT
Subject: CN=0C9A22BB5DC4B154521A05FB2A0C0760885F3C25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:90:dd:37:06:0a:9c:b7:d9:22:b0:ca:67:ce:
fd:ac:c8:c4:dc:96:ee:6a:8b:cd:74:89:ef:dd:7a:
02:f1:dc:fc:10:d7:a1:d4:7e:42:ff:d6:79:95:2e:
19:ea:c7:9f:e1:8f:a3:04:17:e4:f3:57:c5:d6:5b:
d6:0e:0f:dc:54:1d:c8:b6:bb:77:4d:71:99:34:24:
6a:90:f8:a7:47:67:9b:ae:18:8a:f9:60:20:75:e8:
b4:81:1e:ec:16:eb:4a:38:30:82:7e:14:fc:30:73:
ea:90:b8:f8:8c:e1:45:e7:77:a9:76:f7:1a:df:f6:
56:6e:8c:40:b5:69:82:07:67:cd:de:d0:51:6f:ee:
9c:ba:9d:9a:00:ac:5f:16:8a:db:48:b9:ab:30:5d:
43:52:99:be:47:59:71:fb:31:4b:57:ae:61:59:33:
b6:23:7b:eb:92:02:6f:6a:0a:99:aa:51:84:38:0d:
d4:24:a5:30:e2:46:44:1f:6b:cb:82:f6:32:f1:f6:
66:8b:aa:39:10:00:45:8a:f9:1e:9f:2c:87:4b:b4:
c6:ad:2d:b5:1b:a8:4d:eb:11:13:ec:bf:c5:d6:af:
d6:e6:79:4e:33:06:9b:80:fe:1b:49:93:e4:3d:51:
16:cc:2e:d7:6d:cd:3e:f0:da:25:bc:42:bd:54:0b:
b1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9A:22:BB:5D:C4:B1:54:52:1A:05:FB:2A:0C:07:60:88:5F:3C:25
X509v3 Authority Key Identifier:
keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3133312e3235352e3232342e302f32322d3232203d3e20323634343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.224.0/22
Signature Algorithm: sha256WithRSAEncryption
69:a6:72:4d:4e:b0:4b:08:6e:94:20:7f:e0:dd:3a:12:89:6a:
4c:93:11:28:da:7f:d0:00:e1:e1:4b:7a:96:77:29:f9:49:56:
64:ce:11:e3:3c:ad:d3:6a:64:92:00:7c:87:d7:e2:f4:2a:10:
51:41:05:cc:a6:b0:90:ee:55:9d:f7:5f:33:88:f4:f3:e2:53:
db:19:4e:f7:6d:b9:98:6c:a0:19:20:4a:23:ca:bd:24:b2:d2:
04:04:e8:72:39:e8:8d:99:cb:18:63:28:cc:9c:0e:26:02:eb:
16:bf:36:85:00:f2:9b:d8:0f:b8:92:58:80:70:3f:56:db:ee:
64:ce:3c:43:71:83:10:2f:e0:ee:38:09:66:89:75:9f:9d:43:
2a:27:18:02:87:dc:f8:4b:89:eb:f4:72:fd:9d:0f:1d:76:9b:
77:78:99:ac:90:cc:f7:9b:00:b3:5d:bd:cd:38:02:cc:0e:e9:
9b:83:4a:bb:1c:c2:24:e9:9b:94:a9:68:fc:c9:00:ed:a9:cb:
d5:ed:bc:88:4b:ab:06:5c:a1:ce:e0:90:7b:0d:40:d8:22:32:
cf:5f:8c:d8:54:09:1c:81:2b:e3:eb:85:33:27:b9:90:5a:1c:
56:6f:3d:78:7b:ad:fe:70:4d:d6:ec:d9:1f:f6:c0:38:9d:ca:
2c:94:16:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:47:35 2025 by rpki-client