Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/AS273683.roa
File: AS273683.roa (raw, json)
Hash identifier: V403zLULAQZrmxnrhL/Vcb9KcVDD0pHEWUoFthk+CJg=
Subject key identifier: 2F:E2:70:A4:02:FD:4F:8A:16:F7:D6:D6:E2:91:43:85:95:19:BB:2D
Certificate issuer: /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial: 53AD383ECB983FE558AD513DDBA58EC1690F3A36
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/AS273683.roa
Signing time: Thu 12 Jun 2025 18:13:46 +0000
ROA not before: Thu 12 Jun 2025 18:08:46 +0000
ROA not after: Thu 11 Jun 2026 18:13:46 +0000
asID: 273683
IP address blocks: 45.4.40.0/22 maxlen: 22
45.4.40.0/23 maxlen: 23
45.4.40.0/24 maxlen: 24
45.4.41.0/24 maxlen: 24
45.4.42.0/23 maxlen: 23
45.4.42.0/24 maxlen: 24
45.4.43.0/24 maxlen: 24
45.224.196.0/22 maxlen: 24
45.232.56.0/22 maxlen: 22
45.232.56.0/23 maxlen: 23
45.232.56.0/24 maxlen: 24
45.232.57.0/24 maxlen: 24
45.232.58.0/23 maxlen: 23
45.232.58.0/24 maxlen: 24
45.232.59.0/24 maxlen: 24
45.233.196.0/22 maxlen: 24
45.235.56.0/22 maxlen: 22
45.235.56.0/24 maxlen: 24
45.235.57.0/24 maxlen: 24
45.235.58.0/24 maxlen: 24
45.235.59.0/24 maxlen: 24
45.238.48.0/22 maxlen: 24
131.100.148.0/22 maxlen: 22
131.100.148.0/23 maxlen: 23
131.100.150.0/23 maxlen: 23
138.36.28.0/22 maxlen: 22
138.36.28.0/24 maxlen: 24
138.36.29.0/24 maxlen: 24
138.36.30.0/24 maxlen: 24
138.36.31.0/24 maxlen: 24
138.94.176.0/22 maxlen: 22
138.94.176.0/24 maxlen: 24
138.94.177.0/24 maxlen: 24
138.94.178.0/24 maxlen: 24
138.94.179.0/24 maxlen: 24
167.250.12.0/22 maxlen: 22
167.250.12.0/24 maxlen: 24
167.250.13.0/24 maxlen: 24
167.250.14.0/24 maxlen: 24
167.250.15.0/24 maxlen: 24
170.79.24.0/22 maxlen: 22
170.79.24.0/24 maxlen: 24
170.79.25.0/24 maxlen: 24
170.79.26.0/24 maxlen: 24
170.79.27.0/24 maxlen: 24
170.238.52.0/22 maxlen: 24
177.53.40.0/21 maxlen: 24
177.53.160.0/22 maxlen: 22
177.53.160.0/24 maxlen: 24
177.53.161.0/24 maxlen: 24
177.53.162.0/24 maxlen: 24
177.53.163.0/24 maxlen: 24
177.66.164.0/22 maxlen: 22
177.66.164.0/24 maxlen: 24
177.66.165.0/24 maxlen: 24
177.66.166.0/24 maxlen: 24
177.66.167.0/24 maxlen: 24
187.84.176.0/20 maxlen: 20
187.84.176.0/21 maxlen: 21
187.84.184.0/21 maxlen: 21
187.121.144.0/21 maxlen: 21
187.121.144.0/22 maxlen: 22
187.121.144.0/23 maxlen: 24
187.121.146.0/23 maxlen: 24
187.121.148.0/22 maxlen: 22
187.121.148.0/23 maxlen: 24
187.121.150.0/23 maxlen: 24
189.8.120.0/22 maxlen: 22
189.8.121.0/24 maxlen: 24
190.112.148.0/22 maxlen: 22
190.112.148.0/24 maxlen: 24
190.112.149.0/24 maxlen: 24
190.112.150.0/24 maxlen: 24
201.87.240.0/20 maxlen: 20
201.87.240.0/21 maxlen: 21
201.87.240.0/22 maxlen: 22
201.87.240.0/23 maxlen: 24
201.87.242.0/23 maxlen: 24
201.87.244.0/22 maxlen: 24
201.87.248.0/21 maxlen: 21
201.87.248.0/22 maxlen: 24
201.87.252.0/22 maxlen: 24
2804:8aa4::/32 maxlen: 32
2804:8aa4::/37 maxlen: 37
2804:8aa4:800::/37 maxlen: 37
2804:8aa4:1000::/37 maxlen: 37
2804:8aa4:1800::/37 maxlen: 37
2804:8aa4:2000::/37 maxlen: 37
2804:8aa4:2800::/37 maxlen: 37
2804:8aa4:3000::/37 maxlen: 37
2804:8aa4:3800::/37 maxlen: 37
2804:8aa4:4000::/37 maxlen: 37
2804:8aa4:4800::/37 maxlen: 37
2804:8aa4:5000::/37 maxlen: 37
2804:8aa4:7800::/37 maxlen: 37
2804:8aa4:a000::/37 maxlen: 37
2804:8aa4:e000::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 18 Jun 2025 08:21:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ad:38:3e:cb:98:3f:e5:58:ad:51:3d:db:a5:8e:c1:69:0f:3a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Validity
Not Before: Jun 12 18:08:46 2025 GMT
Not After : Jun 11 18:13:46 2026 GMT
Subject: CN=2FE270A402FD4F8A16F7D6D6E29143859519BB2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:18:94:53:4c:c2:72:23:13:e2:b7:c2:86:
4d:b7:bf:ea:34:03:e0:ea:92:27:17:fd:03:cb:fa:
45:f6:e5:dd:71:69:90:f1:fb:92:51:ae:55:86:d9:
2b:b5:90:4d:da:01:38:6a:1c:39:b4:3c:2b:1e:e4:
ec:4e:73:04:0c:76:84:a4:74:72:44:54:87:bf:4a:
e2:f0:16:96:50:d8:2f:18:b4:96:a7:13:13:ce:4e:
1d:d2:31:11:28:3e:45:28:f2:c1:e7:27:28:58:19:
a4:32:6f:98:86:b1:8f:ec:7e:07:fa:ee:9c:5d:73:
e6:4b:5f:93:f3:50:17:e2:80:d4:56:a1:5a:07:34:
0e:7d:d8:23:77:b4:8e:55:fd:cf:0b:97:62:12:8d:
5b:84:28:05:7e:b0:08:13:85:c0:fc:b9:97:e2:c2:
42:a8:a6:f7:bf:85:69:f8:20:b4:d1:e9:c3:f2:17:
7e:33:49:7b:a5:c2:99:ea:56:e2:2d:dd:4b:26:51:
aa:89:62:c4:42:9e:b6:86:c2:1a:6c:d2:9f:7e:49:
4d:0b:5a:f3:b8:af:f8:ac:3d:64:73:3f:d0:5a:0d:
8e:3d:79:b6:75:e7:f0:44:77:45:dc:68:64:c3:20:
69:6c:6b:33:35:ec:26:1d:cc:cc:6c:f4:cf:38:dc:
70:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E2:70:A4:02:FD:4F:8A:16:F7:D6:D6:E2:91:43:85:95:19:BB:2D
X509v3 Authority Key Identifier:
keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/AS273683.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.40.0/22
45.224.196.0/22
45.232.56.0/22
45.233.196.0/22
45.235.56.0/22
45.238.48.0/22
131.100.148.0/22
138.36.28.0/22
138.94.176.0/22
167.250.12.0/22
170.79.24.0/22
170.238.52.0/22
177.53.40.0/21
177.53.160.0/22
177.66.164.0/22
187.84.176.0/20
187.121.144.0/21
189.8.120.0/22
190.112.148.0/22
201.87.240.0/20
IPv6:
2804:8aa4::/32
Signature Algorithm: sha256WithRSAEncryption
8e:7b:f8:61:f2:97:7c:9a:79:f6:c5:e9:42:38:22:9b:c4:f6:
52:57:9e:88:57:fe:8b:94:e0:d5:94:62:a4:58:a3:c6:2b:78:
3b:67:be:8e:11:e5:5a:43:ab:b2:24:1a:9a:e3:f2:21:5b:9e:
2f:6a:2c:68:5f:ca:b1:37:d8:02:15:f3:6d:c2:ad:78:e8:6c:
be:53:5d:06:a2:1a:62:b4:e0:7e:8d:cb:72:bd:cf:97:12:55:
3d:86:1a:06:b6:12:23:82:84:de:5f:8d:3c:6b:14:19:87:8d:
8e:14:c3:a8:9e:14:80:2f:a8:13:5d:5b:fb:93:59:3a:41:f5:
ba:dd:3d:62:72:2b:1b:2d:56:7c:97:2c:1f:af:75:1d:53:ea:
65:ba:15:ee:65:2f:d4:a1:76:04:3f:e8:5c:f9:50:66:00:2c:
1a:bf:02:70:fa:a0:51:c9:c5:57:47:43:0a:16:f6:7c:d4:d3:
97:81:a6:bc:ce:8c:43:6f:d7:ad:33:e0:e2:92:cc:a4:1f:d3:
2c:6c:cc:a5:10:5c:d1:7e:d4:06:14:59:49:76:c9:c6:40:19:
58:cd:7d:93:5d:ad:35:36:03:0d:0e:f5:42:44:da:2d:84:8e:
a5:12:db:0b:9b:0e:9e:52:be:e3:14:73:2d:36:74:8b:fd:30:
da:e1:c7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:17:04 2025 by rpki-client