Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/34352e3138352e3130342e302f32322d3232203d3e20323639333735.roa
File: 34352e3138352e3130342e302f32322d3232203d3e20323639333735.roa (raw, json)
Hash identifier: +sNenIhVPHPzNEjIlSdczqKykJ1F6OVtxAmahgGAIR8=
Subject key identifier: 55:E2:B3:D8:D5:AC:08:14:6B:DF:39:27:81:83:62:01:AC:FC:80:3D
Certificate issuer: /CN=87A54CD68F9B764BD3E7FEC33B928C02D25F8D88
Certificate serial: 4A5293325A09E947F0A5B1A5BB62C553C6620C9E
Authority key identifier: 87:A5:4C:D6:8F:9B:76:4B:D3:E7:FE:C3:3B:92:8C:02:D2:5F:8D:88
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/34352e3138352e3130342e302f32322d3232203d3e20323639333735.roa
Signing time: Thu 20 Mar 2025 12:34:19 +0000
ROA not before: Thu 20 Mar 2025 12:29:19 +0000
ROA not after: Thu 19 Mar 2026 12:34:19 +0000
asID: 269375
IP address blocks: 45.185.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl
rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 03:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:52:93:32:5a:09:e9:47:f0:a5:b1:a5:bb:62:c5:53:c6:62:0c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87A54CD68F9B764BD3E7FEC33B928C02D25F8D88
Validity
Not Before: Mar 20 12:29:19 2025 GMT
Not After : Mar 19 12:34:19 2026 GMT
Subject: CN=55E2B3D8D5AC08146BDF392781836201ACFC803D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:8b:c1:b7:46:55:f6:86:fa:34:59:03:a5:
5e:5b:dd:7b:52:c7:4a:9c:af:a3:33:81:7f:a6:af:
4c:a6:44:26:14:b4:6c:98:56:22:fa:6c:e5:c1:87:
9e:15:7b:3c:fe:a9:09:f9:b5:61:98:04:14:5b:63:
de:2d:8c:a9:d5:95:b5:1e:a0:fd:6c:b5:ae:36:e8:
99:a8:cf:de:6a:8c:b1:ca:b2:ae:ec:86:a5:a3:5d:
8e:96:62:07:75:22:92:ac:98:e7:0d:1b:92:9f:c5:
d5:c8:93:b4:f6:08:b1:d7:61:ca:33:b0:de:12:8b:
42:a5:0f:d7:fb:5b:b0:26:f6:80:f8:4d:6e:32:5c:
6e:67:f6:65:12:de:8a:5b:54:86:e4:ba:c8:cc:7a:
3c:56:b4:25:7e:93:49:6a:a0:11:fd:70:0d:4c:dc:
d1:7c:c3:9a:2c:20:85:59:3d:49:51:b2:5f:ec:b7:
d8:fe:9f:d0:19:05:75:52:36:a1:1a:b8:6e:ba:66:
ba:b3:da:c0:5e:16:ad:ec:db:06:c4:6a:6d:bc:4d:
e8:e1:46:0d:d9:27:ad:09:e1:d2:ad:16:4b:78:f4:
38:4f:3e:e5:df:8d:2c:c2:27:98:bb:8f:40:d8:c8:
fe:60:ad:29:7c:8c:38:27:cd:49:4c:d6:9c:2e:6d:
47:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E2:B3:D8:D5:AC:08:14:6B:DF:39:27:81:83:62:01:AC:FC:80:3D
X509v3 Authority Key Identifier:
keyid:87:A5:4C:D6:8F:9B:76:4B:D3:E7:FE:C3:3B:92:8C:02:D2:5F:8D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/34352e3138352e3130342e302f32322d3232203d3e20323639333735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.185.104.0/22
Signature Algorithm: sha256WithRSAEncryption
65:7e:f4:03:3e:02:70:58:1e:ae:cb:6e:ae:58:1a:15:f9:b1:
6b:da:02:bd:59:3c:ec:73:81:b1:48:a1:a2:ad:9e:68:4f:06:
68:c3:04:30:7e:c9:a2:46:60:ac:16:fb:90:21:5a:54:76:cc:
dc:ec:a4:11:da:13:c1:da:47:f7:0f:97:b8:d0:59:59:a5:21:
e1:67:b6:17:cf:77:7b:1b:a2:88:9e:2b:5f:01:07:bb:c2:4a:
f0:17:7f:4d:aa:25:6f:a5:15:f8:bf:ac:23:f3:21:72:0b:08:
49:43:35:49:f4:75:07:25:da:54:bb:17:a2:2a:a0:65:cd:e2:
3c:d0:48:43:4e:26:ee:e0:05:69:15:7c:d8:82:8b:71:a1:8c:
68:94:27:f4:0b:1a:2b:3b:b4:5f:87:65:c2:a8:bb:58:0c:4e:
78:77:b3:a0:73:8b:8c:59:8e:92:37:96:f1:b2:7c:0d:51:4d:
b4:74:4e:03:d0:1b:f2:b3:d5:9d:ea:ee:2b:f1:e6:10:c9:f9:
34:01:05:64:f3:dd:83:32:9c:6b:cb:fa:ca:54:b4:3c:6b:36:
44:fd:af:4a:09:52:38:a9:11:ed:ed:3e:fd:3c:0a:89:f1:c6:
55:b5:50:72:31:a4:d0:49:e0:3b:2f:b4:08:b7:c1:a8:56:d6:
09:98:c9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:11:17 2025 by rpki-client