Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a373030303a3a2f33362d3336203d3e203532373036.roa
File: 323830343a6337303a373030303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier: UJOBQcc2V8+l0fNx0A4LnDbOA1buog0PCVcahKjbHrU=
Subject key identifier: EA:8F:B1:EA:4C:3E:11:68:76:BB:E5:53:E1:EE:CF:C6:B2:31:99:34
Certificate issuer: /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial: 334CE587E32A8C70D5236CAF01A3F72C26B36A2C
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a373030303a3a2f33362d3336203d3e203532373036.roa
Signing time: Thu 06 Mar 2025 02:31:42 +0000
ROA not before: Thu 06 Mar 2025 02:26:42 +0000
ROA not after: Thu 05 Mar 2026 02:31:42 +0000
asID: 52706
IP address blocks: 2804:c70:7000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 04:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:4c:e5:87:e3:2a:8c:70:d5:23:6c:af:01:a3:f7:2c:26:b3:6a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Validity
Not Before: Mar 6 02:26:42 2025 GMT
Not After : Mar 5 02:31:42 2026 GMT
Subject: CN=EA8FB1EA4C3E116876BBE553E1EECFC6B2319934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ca:e3:15:69:a9:13:17:e3:2a:17:af:51:04:
a2:35:fe:79:b4:2c:e1:74:cd:ec:d8:6e:c2:db:80:
de:f9:b7:da:36:cb:ba:05:a2:40:aa:9b:94:78:47:
e1:94:b1:99:d1:ae:48:9e:be:3f:fa:b4:25:72:99:
32:bb:38:82:de:f4:a8:cd:64:dc:5e:d2:af:dc:c7:
2c:4c:3f:90:68:2e:65:6f:d6:f3:c2:f2:99:49:f5:
ff:a0:57:2b:f7:90:4d:c3:d0:3a:e2:8c:bb:1f:9f:
2d:1c:70:d6:67:08:04:07:f6:5f:3c:b9:e7:0f:f1:
93:ff:df:dd:99:da:d2:0f:14:9e:8c:2f:65:2a:df:
58:af:08:19:e6:78:dc:43:45:ad:5b:3b:e7:91:47:
97:06:16:3c:ab:84:57:0a:6e:f7:29:24:14:3e:e0:
71:cd:6d:8f:88:d6:54:1f:dc:3a:65:7c:62:f1:23:
68:cb:84:c3:dd:b6:d9:cf:8e:9b:86:fa:a8:71:f4:
74:5a:56:99:de:a1:b8:21:60:58:40:a5:9b:a3:ae:
6f:18:65:d0:6a:79:ff:a0:a7:53:19:6a:e4:5b:e1:
9b:da:a0:c1:39:bb:54:a9:60:bd:7e:e7:87:8d:27:
68:ef:50:5f:55:ae:06:46:0d:6e:5f:2e:33:20:99:
a0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8F:B1:EA:4C:3E:11:68:76:BB:E5:53:E1:EE:CF:C6:B2:31:99:34
X509v3 Authority Key Identifier:
keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a373030303a3a2f33362d3336203d3e203532373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:c70:7000::/36
Signature Algorithm: sha256WithRSAEncryption
8a:ea:9e:01:46:08:61:cc:96:35:e7:9e:34:1d:f1:8c:ea:2c:
64:20:a0:0b:98:ee:34:b0:0c:64:e4:64:c8:c6:0e:70:aa:2e:
41:df:2b:84:57:ca:34:ab:1d:7b:d2:ff:f2:24:70:ae:f0:07:
71:f8:18:0f:4d:74:68:fd:16:56:d8:fc:df:c7:84:a3:85:bb:
9c:35:0b:b5:60:76:4a:f9:dc:49:05:2b:22:7a:bb:d0:44:7b:
6f:0e:c4:c6:97:f5:90:a5:8a:93:ba:83:3f:f1:23:38:6e:b8:
5a:6b:a4:37:27:58:8e:06:24:25:89:c0:62:ea:d3:e1:17:40:
fe:fd:53:70:01:bf:9a:24:ef:d0:ed:ed:3c:b5:d1:8d:a4:c8:
e0:de:86:8c:ce:6c:b6:ff:37:7c:87:22:46:01:5c:30:e8:43:
b6:53:0c:d9:53:7a:d7:dc:41:e3:be:88:7d:db:dd:44:90:c6:
76:6a:07:b0:31:2b:2a:14:f1:0f:7c:27:e0:1d:d9:9a:4c:cf:
34:a6:5d:d1:e3:93:fa:58:e8:8c:7a:c9:e1:25:b3:2c:97:cb:
6e:00:cd:6e:08:14:4e:c2:9a:4c:ae:54:ad:ea:8a:76:33:b6:
c1:49:3b:0f:bd:dd:64:22:c4:98:06:1e:93:fd:73:ce:d9:d3:
ad:10:09:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 17:50:25 2025 by rpki-client