Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/34352e3233362e342e302f32322d3234203d3e20323638323130.roa
File: 34352e3233362e342e302f32322d3234203d3e20323638323130.roa (raw, json)
Hash identifier: qOKl0OrexYUaNG4eDew2u8d+yxkRecBjktBjV0Vwh9U=
Subject key identifier: BC:BB:AE:C3:E7:7B:87:8D:BD:56:47:25:37:F4:E4:1B:38:AE:19:A6
Certificate issuer: /CN=0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D
Certificate serial: 4146D7E30AC6BB812B5BAF7D1F20ADE1D7025CB3
Authority key identifier: 0D:98:1F:5D:CF:29:A7:FC:5E:CE:93:D3:B9:1C:A3:AC:16:08:95:8D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/34352e3233362e342e302f32322d3234203d3e20323638323130.roa
Signing time: Thu 06 Mar 2025 19:00:00 +0000
ROA not before: Thu 06 Mar 2025 18:55:00 +0000
ROA not after: Fri 06 Mar 2026 19:00:00 +0000
asID: 268210
IP address blocks: 45.236.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.crl
rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:46:d7:e3:0a:c6:bb:81:2b:5b:af:7d:1f:20:ad:e1:d7:02:5c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D
Validity
Not Before: Mar 6 18:55:00 2025 GMT
Not After : Mar 6 19:00:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:15:85:fd:81:76:dc:14:56:3f:dc:af:81:
63:af:dd:e5:14:39:1d:39:51:67:f5:b2:59:c6:5c:
21:bd:fc:73:94:8f:fc:fa:94:b2:19:e5:a9:44:96:
3b:2d:72:3d:23:25:66:0b:45:25:59:dc:e3:ec:51:
79:ff:03:c0:0d:fc:04:0e:9c:9f:cb:36:17:7b:d2:
69:ac:68:39:a4:36:a2:3c:42:48:d7:6d:cb:d1:20:
ca:67:8f:68:1a:b2:e4:f1:79:bb:e3:40:65:d7:74:
c4:f1:9d:f0:28:9a:d2:a1:51:01:b8:78:45:04:55:
e0:d9:22:8f:d7:97:d6:b3:d5:0b:58:87:20:61:37:
f9:5c:3c:07:92:55:91:a8:71:22:1f:5d:24:3c:ac:
ce:1c:9d:dd:ed:5c:57:73:61:bb:ac:af:77:cd:ee:
b8:57:06:75:64:c1:aa:52:9b:c6:fa:b6:7e:12:09:
e6:82:35:9b:a8:f4:30:f8:f4:94:af:b4:e9:33:1f:
ed:62:0e:43:51:a9:97:d2:fa:96:9c:0f:02:0b:f5:
9d:74:64:75:32:e2:1f:39:90:06:2e:2a:a1:94:82:
69:97:40:99:94:06:12:aa:9d:e1:0d:7c:19:35:06:
91:af:da:f2:76:3f:76:b5:f9:f3:e4:29:07:2b:a0:
7a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BB:AE:C3:E7:7B:87:8D:BD:56:47:25:37:F4:E4:1B:38:AE:19:A6
X509v3 Authority Key Identifier:
keyid:0D:98:1F:5D:CF:29:A7:FC:5E:CE:93:D3:B9:1C:A3:AC:16:08:95:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/34352e3233362e342e302f32322d3234203d3e20323638323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.4.0/22
Signature Algorithm: sha256WithRSAEncryption
23:55:bd:dd:2a:1b:a1:d6:f0:54:55:59:3d:a5:34:e3:b4:aa:
aa:70:18:f6:ce:84:1a:64:ec:60:6c:4a:e5:93:43:12:70:be:
10:93:4c:04:a2:b0:5d:a2:a6:e9:f9:cf:fd:47:ca:35:27:3a:
2d:61:b2:c1:f3:57:00:dd:23:03:ff:64:9d:c1:02:8d:b5:cd:
9a:12:50:a0:5d:fd:e7:34:6b:7f:74:94:6a:6c:98:d4:84:01:
98:2f:80:0b:cc:9b:d5:9d:30:02:96:da:eb:07:9a:c3:7b:43:
a3:33:ad:3d:51:da:65:b7:c9:34:82:8f:38:85:34:52:b3:32:
fe:39:27:64:be:fa:7a:f9:0b:b2:6f:3a:00:26:b3:eb:6c:00:
92:75:9c:ed:6f:bd:e8:19:da:87:37:25:f4:84:b0:9a:6b:2b:
ef:c4:34:4a:1c:02:6f:20:dd:87:8a:24:6a:5b:67:55:d2:ff:
f5:96:97:f2:c1:1a:58:4d:d2:37:f9:00:a2:75:17:4f:bd:54:
db:76:8a:28:a3:18:17:d9:2d:95:3c:a4:7a:33:e6:ab:3c:41:
69:d1:2a:ba:e5:da:f7:13:57:5f:7e:36:6c:4f:d7:1d:ce:a8:
41:e1:b1:be:db:4f:73:5c:8c:d4:e2:50:4b:cd:a9:6f:42:5c:
62:d6:cd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:28:36 2025 by rpki-client