Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234322e302f32342d3234203d3e20323634393532.roa
File: 3136382e3233322e3234322e302f32342d3234203d3e20323634393532.roa (raw, json)
Hash identifier: sF2WItLkNPtFOqp+w/fCHFOq8DTBDhJoDayexXxXy4k=
Subject key identifier: F3:A0:D5:EE:91:4B:A7:E5:0F:93:26:A6:83:41:76:85:E8:56:12:7D
Certificate issuer: /CN=3E212DB1B302950E59672700155B176D07CFDAEA
Certificate serial: 157FE6A9D96B694ED57FA5E99D5A20F615D3EDA0
Authority key identifier: 3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234322e302f32342d3234203d3e20323634393532.roa
Signing time: Tue 01 Apr 2025 15:26:44 +0000
ROA not before: Tue 01 Apr 2025 15:21:44 +0000
ROA not after: Tue 31 Mar 2026 15:26:44 +0000
asID: 264952
IP address blocks: 168.232.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl
rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 16:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:7f:e6:a9:d9:6b:69:4e:d5:7f:a5:e9:9d:5a:20:f6:15:d3:ed:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E212DB1B302950E59672700155B176D07CFDAEA
Validity
Not Before: Apr 1 15:21:44 2025 GMT
Not After : Mar 31 15:26:44 2026 GMT
Subject: CN=F3A0D5EE914BA7E50F9326A683417685E856127D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:09:da:6b:97:86:ce:ac:70:b2:bb:57:2b:
a5:78:d1:ec:b7:08:79:b1:04:19:73:26:9e:ea:51:
cf:5f:9c:b1:68:db:d4:03:4c:f7:11:72:6e:dd:56:
cd:0c:fb:c6:c4:da:33:1d:4c:d5:20:fa:70:64:36:
2d:8c:cb:b0:36:55:c8:9f:c6:8a:6a:fc:58:36:43:
b6:1d:50:6f:e8:50:36:aa:d8:f8:6e:f9:14:7c:fa:
19:06:e9:e3:df:18:2a:54:4d:94:80:42:53:92:3b:
d6:bf:31:a7:7c:27:e9:66:62:5d:3c:52:1a:22:23:
ac:bb:3c:6b:90:dc:71:84:79:ae:5f:c3:df:12:75:
a1:87:14:02:82:ed:aa:5d:e4:db:e6:15:55:c5:ab:
9d:9e:c8:88:d3:04:95:2b:31:4c:1c:25:01:df:9b:
3d:32:0e:6e:67:9d:cc:4f:5f:b4:e6:53:da:95:e6:
f5:05:eb:62:d6:3e:d9:59:cc:1f:e6:a0:10:34:55:
86:a4:3d:8b:b2:9c:fc:3c:35:e6:86:6e:33:6f:3b:
de:e6:35:51:d6:3c:c8:b7:4b:e1:92:0f:4e:f4:b6:
8f:3a:a6:27:ab:e5:be:71:1c:a0:89:92:33:05:21:
be:4c:dc:af:88:c3:b4:53:b8:a7:ae:d8:24:79:26:
c5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A0:D5:EE:91:4B:A7:E5:0F:93:26:A6:83:41:76:85:E8:56:12:7D
X509v3 Authority Key Identifier:
keyid:3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234322e302f32342d3234203d3e20323634393532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.242.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ff:3c:a9:ce:ad:78:79:77:d8:1c:c2:88:2a:08:d8:e9:63:
21:a7:16:e4:2d:2d:28:cd:f3:6b:c7:66:ec:06:a9:4a:d9:8d:
60:35:96:cd:d5:a8:16:80:ea:f5:e0:99:9c:e4:7f:89:5b:d9:
67:f3:30:52:3c:96:e8:1f:65:ad:7b:f7:0e:91:4d:fc:24:2f:
18:18:a0:f1:4b:70:95:9e:3f:d7:c4:62:79:48:92:cf:e7:48:
4b:d6:38:8e:e6:7a:f7:3f:bc:a4:e1:e6:b7:31:f0:33:1d:ca:
bc:c5:9f:c2:3f:70:1f:15:5a:0f:e3:ce:10:1a:54:ed:b4:9d:
9a:27:dd:41:9f:93:05:2d:bf:c8:cd:64:20:24:6a:0e:1e:ee:
f5:f3:1c:d2:0e:b5:d3:a9:bf:43:c5:90:9e:ee:7c:f3:ec:59:
78:c3:af:b6:3d:12:30:d9:4e:13:38:a3:01:c9:97:4b:1a:a4:
4c:c2:08:f3:5b:6a:c9:d2:e6:d3:f4:46:4b:04:b8:53:15:60:
c4:76:6f:17:fe:9c:32:7b:d2:cd:f6:1b:4f:a5:a8:7a:e0:14:
dd:50:bb:10:45:8b:a0:0a:fa:7d:49:5c:25:fb:67:bb:f2:3c:
3d:b6:f6:2a:93:ca:62:c0:78:32:ed:16:cf:1c:20:56:63:55:
f0:d9:6b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:14:16 2025 by rpki-client