Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/323830343a376663383a3a2f33322d3332203d3e20323731373039.roa
File: 323830343a376663383a3a2f33322d3332203d3e20323731373039.roa (raw, json)
Hash identifier: zsQhMCE2rF1VO32MT/KDA+4cVlXckYhvlXLp+ghtzdc=
Subject key identifier: 12:D4:37:30:E1:80:29:4D:F0:C1:2C:CA:80:61:02:17:A3:F4:1C:CF
Certificate issuer: /CN=DB87B78475D3067687137BE8069FFB8CBC613CAF
Certificate serial: 1BA55CE4922A1B7C349E0FDFAC6FCBB67D42703E
Authority key identifier: DB:87:B7:84:75:D3:06:76:87:13:7B:E8:06:9F:FB:8C:BC:61:3C:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/323830343a376663383a3a2f33322d3332203d3e20323731373039.roa
Signing time: Wed 05 Mar 2025 21:05:02 +0000
ROA not before: Wed 05 Mar 2025 21:00:02 +0000
ROA not after: Wed 04 Mar 2026 21:05:02 +0000
asID: 271709
IP address blocks: 2804:7fc8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.crl
rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 12 Apr 2025 08:28:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a5:5c:e4:92:2a:1b:7c:34:9e:0f:df:ac:6f:cb:b6:7d:42:70:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB87B78475D3067687137BE8069FFB8CBC613CAF
Validity
Not Before: Mar 5 21:00:02 2025 GMT
Not After : Mar 4 21:05:02 2026 GMT
Subject: CN=12D43730E180294DF0C12CCA80610217A3F41CCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:69:b4:cd:6c:62:0c:65:67:72:c9:3b:d7:30:
d3:8f:16:b7:2f:63:16:db:db:d9:38:ae:c8:5b:dc:
24:f6:da:cd:64:58:88:72:0e:0c:4a:cb:99:08:00:
0f:d0:94:dc:50:66:2c:4c:63:a1:04:0b:ff:2d:ed:
f4:61:53:e5:1f:4c:cf:88:ce:08:81:96:cc:95:7c:
60:b2:46:85:f0:84:a3:af:35:bf:72:49:0a:a0:0b:
71:68:13:d2:3f:47:5f:6f:21:1c:9b:85:5d:7d:c2:
c1:fd:12:82:8c:10:31:a7:ad:48:1f:09:39:f1:10:
0c:df:61:3e:38:a3:89:49:2f:40:14:39:70:b3:2a:
1f:bd:c1:35:4e:98:2d:93:0e:3e:9a:53:cd:3f:a7:
4f:81:2b:b8:52:36:c6:0e:96:a0:71:a9:13:2a:80:
4f:58:35:66:cb:8b:c5:c4:27:f7:ad:18:55:5d:0f:
06:0c:c2:c4:05:52:a9:18:5b:24:a5:71:f0:b5:cd:
71:cc:bd:0c:83:05:57:d4:f4:57:73:2d:6a:83:a1:
6b:bd:82:5e:8e:41:d2:6d:5c:ec:77:a7:ad:22:76:
5b:90:4a:92:40:69:61:d2:bf:91:f3:a7:ef:15:79:
ea:7c:35:32:2d:5b:c3:e4:5f:2d:74:77:45:4e:64:
47:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D4:37:30:E1:80:29:4D:F0:C1:2C:CA:80:61:02:17:A3:F4:1C:CF
X509v3 Authority Key Identifier:
keyid:DB:87:B7:84:75:D3:06:76:87:13:7B:E8:06:9F:FB:8C:BC:61:3C:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/323830343a376663383a3a2f33322d3332203d3e20323731373039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7fc8::/32
Signature Algorithm: sha256WithRSAEncryption
32:83:78:47:b7:9d:fb:8a:d9:20:b4:cb:b1:78:63:bc:8b:2f:
78:c5:d9:79:d1:b1:ca:5e:8b:fe:89:30:4a:20:a9:17:a5:02:
a5:54:db:6d:f3:68:4d:99:79:eb:fe:c1:6d:bf:26:78:06:61:
64:c0:19:25:69:7b:1e:9c:0d:eb:18:8e:d2:e1:82:51:65:8f:
78:51:82:a5:42:11:ac:42:f7:b5:e4:9a:47:3a:79:ba:f3:86:
dd:ee:c3:37:3e:ff:77:fb:8e:67:a1:f5:88:fa:c7:64:23:01:
8f:7c:fc:f1:fb:f3:ab:d3:c0:70:8b:a2:51:8c:fc:d7:11:a9:
12:76:05:f3:bc:0a:9a:1b:a0:32:eb:d1:62:74:5f:2a:6a:dd:
8c:26:19:e6:cb:b6:b8:aa:f0:41:50:8f:ec:9f:91:3e:67:96:
cf:d1:cc:b6:42:12:97:3d:ac:61:0a:78:20:73:15:fd:18:d1:
ef:09:fc:89:3d:c8:a9:11:d2:42:0d:e0:ae:ab:cc:a2:46:75:
da:cb:6e:a8:d4:ec:6f:60:6f:76:87:3f:eb:fe:67:f8:62:e7:
77:52:52:a6:66:25:7d:63:b2:34:11:bd:17:04:f3:6f:d0:3e:
14:58:5c:ea:16:d0:7c:a6:53:5a:d6:a0:b0:19:d9:2e:ec:a8:
10:d4:61:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:47:34 2025 by rpki-client