Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/34352e36352e3138342e302f32322d3332203d3e20323636353336.roa
File: 34352e36352e3138342e302f32322d3332203d3e20323636353336.roa (raw, json)
Hash identifier: K+ZnR2HGucxn7didSAplp9yPUkOInGDCKd+RyvZWnyg=
Subject key identifier: C4:76:1C:F3:B0:C4:7E:08:FB:AD:FF:E2:C2:1D:D4:C1:AD:7E:E6:A3
Certificate issuer: /CN=30749C5E57A887A5B2B8370496E94AA79DC8B198
Certificate serial: 27D17B6B069896CC2D0ADDA7DBB7FB1601EC1D09
Authority key identifier: 30:74:9C:5E:57:A8:87:A5:B2:B8:37:04:96:E9:4A:A7:9D:C8:B1:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30749C5E57A887A5B2B8370496E94AA79DC8B198.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/34352e36352e3138342e302f32322d3332203d3e20323636353336.roa
Signing time: Thu 19 Dec 2024 17:51:14 +0000
ROA not before: Thu 19 Dec 2024 17:46:14 +0000
ROA not after: Thu 18 Dec 2025 17:51:14 +0000
asID: 266536
IP address blocks: 45.65.184.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/30749C5E57A887A5B2B8370496E94AA79DC8B198.crl
rsync://rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/30749C5E57A887A5B2B8370496E94AA79DC8B198.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30749C5E57A887A5B2B8370496E94AA79DC8B198.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 12 Apr 2025 13:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d1:7b:6b:06:98:96:cc:2d:0a:dd:a7:db:b7:fb:16:01:ec:1d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30749C5E57A887A5B2B8370496E94AA79DC8B198
Validity
Not Before: Dec 19 17:46:14 2024 GMT
Not After : Dec 18 17:51:14 2025 GMT
Subject: CN=C4761CF3B0C47E08FBADFFE2C21DD4C1AD7EE6A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:1a:fa:60:76:df:67:09:d2:b8:29:66:c1:
c7:61:b4:37:84:e4:3f:47:d9:40:e7:1e:f4:94:0f:
7e:d9:0e:df:b0:b8:a4:dc:3b:ca:6b:e1:b4:13:38:
19:61:bf:4c:49:4f:1d:f8:10:25:78:ca:dd:78:e4:
b9:66:94:f6:77:90:06:c4:29:a3:92:00:cd:dd:de:
e5:cf:11:c4:10:2a:8c:6c:4a:e6:ff:19:f7:af:c5:
c5:b5:0c:bc:ee:d2:8d:da:d9:d5:4a:bb:52:45:78:
3c:48:3e:f7:01:ed:df:0d:60:51:2d:78:1a:48:ad:
37:49:b7:9b:c7:fb:24:55:88:a6:9e:69:6b:61:ee:
fa:90:a4:5e:cb:d1:aa:76:63:be:1f:e2:9a:ab:64:
43:f6:e7:57:4a:b3:9f:c7:2a:a8:71:66:2d:eb:eb:
66:9d:a5:ff:03:0f:3e:31:c6:6d:fc:df:68:bd:33:
51:6f:ce:fc:33:59:24:2b:fd:6e:c2:bb:1d:eb:e2:
6b:98:f3:8c:16:ff:0f:c8:a3:58:55:82:63:b1:ba:
27:e8:5a:1d:20:55:6e:63:67:85:1f:60:2a:c1:0f:
66:09:2f:4f:68:bf:eb:97:e3:ab:61:15:a0:6e:c4:
cd:33:4e:50:ff:6e:aa:4c:21:4c:8c:2b:7a:c9:b1:
cd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:76:1C:F3:B0:C4:7E:08:FB:AD:FF:E2:C2:1D:D4:C1:AD:7E:E6:A3
X509v3 Authority Key Identifier:
keyid:30:74:9C:5E:57:A8:87:A5:B2:B8:37:04:96:E9:4A:A7:9D:C8:B1:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/30749C5E57A887A5B2B8370496E94AA79DC8B198.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30749C5E57A887A5B2B8370496E94AA79DC8B198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/34352e36352e3138342e302f32322d3332203d3e20323636353336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.184.0/22
Signature Algorithm: sha256WithRSAEncryption
47:48:fe:06:51:6c:87:71:51:fd:b0:d6:10:f5:0f:13:a5:c9:
bb:ea:d6:41:69:35:50:46:b1:9f:b0:e7:c1:8e:88:28:52:06:
05:5f:86:8e:6f:c4:d8:12:94:37:e3:a6:0d:d4:f8:d1:4a:ff:
a6:1f:73:ed:f4:39:19:78:26:27:66:64:86:7c:8d:06:bf:f5:
9c:45:25:0e:a3:8f:34:2f:a4:ee:30:c3:c2:4b:6e:34:6f:7d:
fa:4c:e2:94:da:ab:d1:9c:35:03:20:e9:37:ed:af:dc:7e:b3:
9e:2a:cd:9a:16:0f:a8:84:87:b1:03:74:57:a8:a4:12:b1:08:
16:e9:52:ba:9e:a9:53:7a:70:cc:a5:be:96:08:eb:f3:a5:6f:
a3:d0:1a:4a:49:67:ca:40:87:a6:04:5d:ab:d1:07:b7:27:ef:
00:5c:55:02:1a:d7:0b:77:c2:f9:53:35:8b:43:f8:06:40:96:
a7:67:78:23:99:cf:fd:e3:62:c4:60:c8:d7:9d:89:88:31:dc:
17:ec:48:17:a2:82:d6:8b:d7:52:eb:88:94:65:d6:7d:72:b6:
01:f4:6c:1d:25:be:3d:15:e6:fc:37:79:ba:bc:0e:06:7f:47:
d3:6d:84:0c:f6:a6:f7:1e:30:8a:0d:59:34:96:ed:ef:cc:aa:
f4:8f:48:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:12:18 2025 by rpki-client