Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/323830343a363335383a383030303a3a2f33342d3334203d3e20323639333535.roa
File: 323830343a363335383a383030303a3a2f33342d3334203d3e20323639333535.roa (raw, json)
Hash identifier: 6+1zvrnSCOUrFg0axrHwVvcTy3i6i+6pHg7+6lYb41Q=
Subject key identifier: 18:31:0A:B8:E3:61:AB:4D:AB:6B:E2:69:B3:CC:EA:DD:A5:28:C5:8E
Certificate issuer: /CN=446D4F390AB834CB395232A0680D14394BE75FCC
Certificate serial: 38913281211CB0DF184C7800B98425E4456FE204
Authority key identifier: 44:6D:4F:39:0A:B8:34:CB:39:52:32:A0:68:0D:14:39:4B:E7:5F:CC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/323830343a363335383a383030303a3a2f33342d3334203d3e20323639333535.roa
Signing time: Fri 07 Mar 2025 01:12:27 +0000
ROA not before: Fri 07 Mar 2025 01:07:27 +0000
ROA not after: Fri 06 Mar 2026 01:12:27 +0000
asID: 269355
IP address blocks: 2804:6358:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.crl
rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 12 Apr 2025 06:08:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:91:32:81:21:1c:b0:df:18:4c:78:00:b9:84:25:e4:45:6f:e2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446D4F390AB834CB395232A0680D14394BE75FCC
Validity
Not Before: Mar 7 01:07:27 2025 GMT
Not After : Mar 6 01:12:27 2026 GMT
Subject: CN=18310AB8E361AB4DAB6BE269B3CCEADDA528C58E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:51:ef:03:75:07:53:c8:82:96:32:24:71:fe:
32:9c:af:11:01:19:19:2b:8f:c0:05:95:f1:08:52:
e7:93:d9:71:14:b1:c2:72:31:41:bb:56:8e:d8:16:
1c:25:a2:ed:5a:15:d5:c6:f6:14:32:c7:33:25:0a:
4b:3e:72:0a:79:5d:19:c9:36:f4:9b:f5:2a:d0:ea:
df:4d:eb:cd:5a:61:3f:12:63:45:1e:32:68:dd:a2:
45:05:ed:e0:04:bf:68:43:b8:26:4f:7f:70:ed:45:
5f:84:a7:44:d9:20:71:21:07:76:f3:3a:3a:df:b4:
bb:8b:f0:51:90:27:20:4f:6d:c8:b6:8d:c2:9a:f9:
82:10:55:2e:3f:7d:60:cd:2c:15:cf:9d:1e:aa:5b:
e7:28:61:89:0c:82:90:30:c0:bd:7d:bf:91:24:60:
50:b8:46:9b:5f:71:a5:5e:a4:8a:fa:a2:c3:c2:3d:
29:d0:bb:c0:f4:b5:29:71:eb:f4:07:46:d0:de:cc:
1a:a8:03:09:24:89:9b:ca:89:c0:66:85:83:0b:b0:
31:26:92:de:87:e3:85:cf:97:ee:ea:9b:7a:7f:eb:
e2:e6:f6:dc:6b:9c:74:4d:78:e0:e7:10:0f:71:7f:
45:f3:9d:a6:65:a6:26:19:8c:be:34:4b:37:fd:1c:
ad:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:31:0A:B8:E3:61:AB:4D:AB:6B:E2:69:B3:CC:EA:DD:A5:28:C5:8E
X509v3 Authority Key Identifier:
keyid:44:6D:4F:39:0A:B8:34:CB:39:52:32:A0:68:0D:14:39:4B:E7:5F:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/323830343a363335383a383030303a3a2f33342d3334203d3e20323639333535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6358:8000::/34
Signature Algorithm: sha256WithRSAEncryption
01:af:99:35:b8:87:c9:4f:80:b1:76:4e:89:b4:82:15:29:cd:
1c:34:17:cd:5a:18:f7:f5:d4:9f:09:b3:92:3e:92:0a:d7:1c:
1b:cb:64:6a:65:3e:56:7f:5c:1d:44:03:83:20:cb:33:63:73:
2c:c5:4f:da:d7:a3:82:0a:43:f1:0f:7e:37:cf:d8:48:be:29:
da:a0:ae:57:f6:fc:55:87:8f:41:a6:2b:20:6f:e5:51:4e:43:
6c:6d:50:98:a6:70:d8:80:cb:4f:1a:17:5f:65:e1:3e:b1:0a:
d4:71:cc:71:f7:53:36:12:74:a0:52:05:4c:f8:cf:07:8e:72:
c9:0f:03:67:58:00:82:f5:00:59:57:91:a6:c0:ff:e1:d2:5e:
99:50:7d:e5:a0:3b:54:46:e0:7f:d2:d0:33:47:d5:09:a2:77:
cd:55:a4:8a:6e:90:e5:e8:1d:28:12:31:1c:fe:79:6b:24:04:
1d:06:83:79:27:76:07:74:3d:c6:55:d2:22:68:69:86:2f:dd:
bb:b3:a6:5f:05:b4:28:50:a5:50:2d:8a:36:67:98:af:1f:be:
dc:01:3d:09:76:f4:0f:09:a1:6a:2c:9f:6c:67:ec:65:2d:e8:
b6:8d:5e:28:74:b6:dc:83:52:fb:ea:94:36:30:fe:01:96:83:
01:fd:a6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:27:51 2025 by rpki-client