Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233322e302f32322d3232203d3e20323633393137.roa
File: 3133382e3230342e3233322e302f32322d3232203d3e20323633393137.roa (raw, json)
Hash identifier: iq1cv9FyIZtGpQfUNwly06l9TzpaLZlO8D9i1liuCA0=
Subject key identifier: 3C:E3:A0:35:D7:D2:DE:8B:3A:A6:2E:D7:EF:D4:7C:96:76:DA:21:64
Certificate issuer: /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial: 401A30BF8E5EA16CE5466E5B04A66F54C72EA59D
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233322e302f32322d3232203d3e20323633393137.roa
Signing time: Wed 05 Mar 2025 19:00:08 +0000
ROA not before: Wed 05 Mar 2025 18:55:08 +0000
ROA not after: Wed 04 Mar 2026 19:00:08 +0000
asID: 263917
IP address blocks: 138.204.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 12 Apr 2025 02:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:1a:30:bf:8e:5e:a1:6c:e5:46:6e:5b:04:a6:6f:54:c7:2e:a5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Validity
Not Before: Mar 5 18:55:08 2025 GMT
Not After : Mar 4 19:00:08 2026 GMT
Subject: CN=3CE3A035D7D2DE8B3AA62ED7EFD47C9676DA2164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:59:1f:62:6e:50:11:c4:c0:b3:2e:9c:d1:1a:
1b:22:97:31:27:4e:0b:7e:9a:fb:40:8a:9e:55:8f:
ef:cc:b1:4d:18:c8:a0:29:6a:b5:a1:a3:3a:fa:df:
6d:4b:b1:eb:13:de:aa:a1:f6:f2:48:c1:fc:fb:ab:
0b:f1:96:a7:c3:8f:30:56:00:56:ed:c1:2b:2a:93:
d2:d4:4b:f5:0d:42:52:65:c3:04:f9:58:40:9c:f0:
22:9e:2f:66:6e:42:d1:f8:a0:f5:80:ec:02:8e:ae:
a2:d5:37:9d:83:0e:49:99:fc:a0:df:f1:6b:42:4f:
b6:0a:61:7a:70:cb:84:e8:b1:2a:52:85:b5:c2:38:
bb:a6:e8:f7:c0:e5:60:4e:a4:5c:1e:07:21:9a:89:
11:5b:1b:5d:55:dd:fb:dd:d0:e2:f0:a3:e1:81:05:
bc:a8:e1:8b:08:13:1f:f6:0f:cc:37:77:1d:e9:98:
da:f5:fa:8a:ae:d4:64:7c:60:10:3e:12:fd:a4:4a:
bf:9d:93:9f:63:63:c6:5f:74:83:71:cb:9a:0c:2b:
df:1d:35:a0:c0:c9:15:75:37:88:32:78:7d:f7:29:
e8:c6:5b:07:7d:ff:4b:31:5b:f1:c9:ea:18:6d:35:
60:6b:23:99:1b:5d:eb:d5:a7:78:0a:1e:a3:c1:ab:
10:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E3:A0:35:D7:D2:DE:8B:3A:A6:2E:D7:EF:D4:7C:96:76:DA:21:64
X509v3 Authority Key Identifier:
keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233322e302f32322d3232203d3e20323633393137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.232.0/22
Signature Algorithm: sha256WithRSAEncryption
23:67:4d:87:2d:87:2f:6b:b4:5f:c2:6c:43:ce:16:18:58:4e:
f8:e1:54:c1:c2:94:ff:63:27:a0:e6:0b:d4:12:fb:eb:05:b9:
f1:68:1f:3d:af:a5:92:52:d4:a5:1c:13:a1:eb:e9:88:37:4c:
45:c4:6a:68:ca:28:50:5b:a4:aa:d5:d8:7c:bb:ed:7b:6a:e6:
54:af:de:de:21:c8:9d:d7:7c:fd:4f:03:9d:8a:f0:2f:7f:23:
f4:f1:3f:29:54:c5:ab:d9:82:44:bf:68:75:15:bb:fa:c0:96:
52:8e:0c:88:7f:c5:e3:15:ad:6e:a9:32:bb:81:57:20:27:9e:
ec:1b:62:a3:c5:f0:65:08:4e:25:6c:cc:fa:02:99:95:b6:91:
0c:db:e9:d8:08:44:b0:eb:8d:41:31:7e:cc:50:9d:f5:e0:96:
19:c8:5f:bd:31:63:bc:59:a9:91:b3:66:6a:5a:80:3c:58:4a:
44:bf:42:1f:42:1e:03:bb:fd:1c:7e:c0:de:c1:7d:e3:00:56:
eb:8a:79:9b:51:90:cd:f3:af:eb:5f:5e:15:aa:75:ce:a9:2d:
aa:bb:32:0c:39:0b:c7:4c:df:e5:c0:b6:65:e9:3a:0b:b7:22:
dc:bf:0a:95:46:0d:39:81:1c:0e:bf:ea:71:cc:42:5b:24:55:
d0:88:0d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 04:29:30 2025 by rpki-client