Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/3138312e3138392e33382e302f32342d3234203d3e20323731333633.roa
File: 3138312e3138392e33382e302f32342d3234203d3e20323731333633.roa (raw, json)
Hash identifier: DaJSAzIxOfyXNW3+ZZ2BV00o3wOMQG9v9xHnzBuZVD4=
Subject key identifier: 22:6E:F6:AE:CB:3E:66:CE:4D:B1:4E:C3:E7:C7:A1:41:E5:E0:FA:31
Certificate issuer: /CN=CB8B5B9F537D71AAF7422F603CAD3715D99F65F2
Certificate serial: 2A79905C2A7B08C54CBF8178348FA7719168CFB3
Authority key identifier: CB:8B:5B:9F:53:7D:71:AA:F7:42:2F:60:3C:AD:37:15:D9:9F:65:F2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/3138312e3138392e33382e302f32342d3234203d3e20323731333633.roa
Signing time: Tue 18 Mar 2025 00:00:41 +0000
ROA not before: Mon 17 Mar 2025 23:55:41 +0000
ROA not after: Tue 17 Mar 2026 00:00:41 +0000
asID: 271363
IP address blocks: 181.189.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.crl
rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 12 Apr 2025 22:32:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:79:90:5c:2a:7b:08:c5:4c:bf:81:78:34:8f:a7:71:91:68:cf:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB8B5B9F537D71AAF7422F603CAD3715D99F65F2
Validity
Not Before: Mar 17 23:55:41 2025 GMT
Not After : Mar 17 00:00:41 2026 GMT
Subject: CN=226EF6AECB3E66CE4DB14EC3E7C7A141E5E0FA31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:d3:2d:4e:55:69:23:f6:2d:06:d9:66:7f:
8a:e0:0a:15:0f:5b:71:45:4b:04:eb:6b:16:1d:63:
48:81:dd:6f:da:b3:1e:8e:d2:9b:4c:ce:d5:cc:25:
23:85:89:13:0f:2e:d2:32:12:ef:da:1f:4d:1c:13:
3a:8d:4d:28:6c:c2:60:0c:98:ce:7b:a2:3b:0f:2d:
84:ec:e8:68:a3:57:d8:88:3f:74:d3:df:2f:f9:aa:
66:02:cb:46:53:c7:8d:24:ea:0c:21:d4:8e:f1:f4:
d2:62:fb:99:b3:5a:eb:d0:da:22:9f:3d:f1:01:c7:
36:2e:18:ad:97:52:12:aa:52:75:c0:aa:de:e1:38:
c8:56:01:4a:c4:1a:09:ff:36:b5:cc:00:d0:17:12:
cf:d1:63:c4:7d:ea:d1:31:8f:f5:88:96:d7:89:91:
b1:5c:e5:72:9f:ab:c7:9a:7e:87:c6:6b:5d:51:27:
5f:21:8d:53:75:1b:ac:dd:08:c1:10:7c:0c:50:0c:
14:3b:8c:73:ad:02:92:23:43:d1:d8:5a:04:20:49:
09:5d:74:4b:65:80:34:05:10:84:9f:b4:4f:22:a8:
99:52:46:5b:1b:f7:b2:93:db:f1:1e:ae:d4:8c:06:
4c:f7:d3:e3:68:da:cd:b3:c7:15:4d:0a:f1:b1:5a:
37:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6E:F6:AE:CB:3E:66:CE:4D:B1:4E:C3:E7:C7:A1:41:E5:E0:FA:31
X509v3 Authority Key Identifier:
keyid:CB:8B:5B:9F:53:7D:71:AA:F7:42:2F:60:3C:AD:37:15:D9:9F:65:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/3138312e3138392e33382e302f32342d3234203d3e20323731333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.189.38.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:58:cc:ca:59:c6:53:94:60:18:ce:93:74:4f:c0:b2:13:c0:
c7:8a:18:8b:e9:84:75:8e:5a:b8:b5:5c:f4:ea:7f:91:5d:8a:
74:bf:21:09:c7:6b:1b:98:16:a5:8d:19:cb:76:26:9a:f3:ba:
fc:9e:00:79:24:8d:05:b6:77:0f:33:27:d7:3f:2c:bb:38:1c:
19:31:24:55:54:a2:9b:1d:b7:31:81:fc:f3:c6:7f:e0:a7:7e:
3d:4e:e0:fc:57:18:30:22:e8:04:51:84:75:38:3d:12:ef:55:
35:1e:46:4f:78:a1:dd:11:50:dd:8e:94:5e:17:48:06:15:ed:
02:09:24:51:14:75:ff:cd:4a:8b:38:e4:7b:ee:74:a3:d3:e1:
9b:73:84:75:9f:a4:04:d3:b7:a2:e6:51:55:74:73:e3:39:08:
50:7c:f8:37:cd:de:da:86:08:53:3a:de:68:42:85:a0:d5:b1:
e5:6d:6b:93:36:b0:cc:bb:a7:cf:cb:3e:dd:aa:a8:64:b6:c1:
45:6c:70:3b:f3:65:45:d5:7c:d0:a5:f6:0a:cd:ec:45:f8:a7:
5d:4a:fe:4b:d3:ad:d5:b7:a4:7f:83:3f:b8:46:7f:a7:ca:1c:
4f:3b:00:b1:2d:c2:46:3b:36:c4:aa:4e:bf:02:c0:b6:40:d0:
05:28:df:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:16:08 2025 by rpki-client