Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3137372e32332e382e302f32312d3231203d3e203533313132.roa
File: 3137372e32332e382e302f32312d3231203d3e203533313132.roa (raw, json)
Hash identifier: xWDxR/Z5rPs0J7T7y+ieAH2OdikY4J+Ydbcb47CWKL8=
Subject key identifier: A7:F5:D0:45:D5:EF:B9:59:66:6A:16:98:48:F4:E9:E0:15:DD:51:3A
Certificate issuer: /CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
Certificate serial: 3782CAE0A54E8A5BF99DED1356446D3843F54334
Authority key identifier: 74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3137372e32332e382e302f32312d3231203d3e203533313132.roa
Signing time: Thu 06 Mar 2025 10:20:34 +0000
ROA not before: Thu 06 Mar 2025 10:15:34 +0000
ROA not after: Thu 05 Mar 2026 10:20:34 +0000
asID: 53112
IP address blocks: 177.23.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl
rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 00:34:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:82:ca:e0:a5:4e:8a:5b:f9:9d:ed:13:56:44:6d:38:43:f5:43:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
Validity
Not Before: Mar 6 10:15:34 2025 GMT
Not After : Mar 5 10:20:34 2026 GMT
Subject: CN=A7F5D045D5EFB959666A169848F4E9E015DD513A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:32:88:19:27:78:93:3d:36:9e:49:71:f7:64:
39:66:cd:21:92:bf:2c:5f:71:8c:5e:75:6a:55:53:
2d:7f:40:98:9b:c9:e1:8d:23:6e:5a:73:58:f9:b0:
1c:59:3c:23:2d:62:3d:ba:55:36:69:d4:39:bf:60:
40:3e:92:8c:f3:bb:b0:a7:b1:e8:6a:8d:01:87:f3:
8d:0b:95:e4:06:7c:0e:9a:eb:09:44:17:9e:6c:10:
6e:84:6b:54:97:52:bc:3b:cd:af:51:ba:31:c5:fd:
62:ad:75:30:90:32:49:3a:70:b7:7a:ef:39:06:a3:
1d:e6:83:74:5f:90:9b:16:bf:f5:ca:30:c6:75:89:
e1:c7:2e:1f:56:94:8c:27:e2:ee:45:80:ef:39:b6:
1c:cc:70:6d:10:53:94:88:86:66:23:c2:c9:a5:d1:
af:17:55:ed:d3:63:b5:0f:89:8d:ab:4c:7f:d1:4d:
29:b0:3b:af:e5:7d:54:f9:c4:94:4c:b1:5c:fb:a2:
e2:30:16:c2:30:3a:ce:82:f5:b2:1b:44:24:b3:c4:
bd:18:4e:46:12:ac:cf:f3:34:7e:ce:73:1d:6f:26:
3a:25:62:cf:d9:8a:d0:19:a7:8b:28:b2:6a:d9:c1:
fe:d2:c2:2c:8c:ae:0f:76:85:4b:42:42:2b:0e:da:
99:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F5:D0:45:D5:EF:B9:59:66:6A:16:98:48:F4:E9:E0:15:DD:51:3A
X509v3 Authority Key Identifier:
keyid:74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3137372e32332e382e302f32312d3231203d3e203533313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.23.8.0/21
Signature Algorithm: sha256WithRSAEncryption
26:c0:6b:ac:c0:46:1f:98:58:96:9c:71:e0:4e:94:4d:3b:24:
d3:e9:f4:1c:40:72:35:64:f5:77:01:9e:78:ef:bb:f2:8e:99:
c8:27:5b:f9:0f:b2:79:9e:c7:d5:e8:60:c1:07:75:38:33:5f:
4b:ef:73:30:73:fc:43:8d:a6:0b:1d:5f:46:95:fe:5a:e7:05:
45:c9:41:9d:51:88:dd:fe:a4:79:d8:0e:81:38:09:4c:4d:1b:
ed:1b:c8:56:43:c6:32:5c:ec:15:49:1f:41:00:2b:a8:4e:a6:
7f:8f:52:9c:52:8a:7e:82:9f:2f:ac:ea:b2:f8:15:1c:d4:85:
45:ad:1d:d1:73:72:da:bd:78:ed:a9:87:ce:64:8c:ce:80:e8:
94:f9:b9:fc:d2:4f:77:a5:bf:f0:a2:fa:c0:9a:2c:14:8b:f0:
81:d4:51:20:49:78:13:4b:20:2f:79:fc:ff:fa:eb:5a:32:9d:
25:94:3e:78:c0:6f:6d:57:d5:11:f4:3c:dd:1b:04:dc:39:69:
a2:f3:9f:34:c1:49:c2:a0:f0:59:df:fd:25:35:ab:db:5f:25:
98:82:e7:87:9d:fa:85:c9:6d:ac:fd:66:b5:fe:b2:ab:e3:78:
9f:c0:96:d3:e2:94:84:d6:58:d0:1d:9c:f6:3d:60:bc:82:ba:
16:c4:19:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 11:54:11 2025 by rpki-client