Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/323830343a366163633a3a2f33322d313238203d3e20323730333539.roa
File: 323830343a366163633a3a2f33322d313238203d3e20323730333539.roa (raw, json)
Hash identifier: tNv76tmUvA6C0GcCWj3mDrtKqjPENo+bQVWJyRlab48=
Subject key identifier: A3:5B:EB:79:C7:83:F5:B2:82:AD:E0:03:61:EE:FA:2D:AD:F0:D4:8A
Certificate issuer: /CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
Certificate serial: 6146416B194334662B7AF79E3D6F76AEEEBCB192
Authority key identifier: 16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/323830343a366163633a3a2f33322d313238203d3e20323730333539.roa
Signing time: Thu 06 Mar 2025 10:25:30 +0000
ROA not before: Thu 06 Mar 2025 10:20:30 +0000
ROA not after: Thu 05 Mar 2026 10:25:30 +0000
asID: 270359
IP address blocks: 2804:6acc::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl
rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 04:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:46:41:6b:19:43:34:66:2b:7a:f7:9e:3d:6f:76:ae:ee:bc:b1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
Validity
Not Before: Mar 6 10:20:30 2025 GMT
Not After : Mar 5 10:25:30 2026 GMT
Subject: CN=A35BEB79C783F5B282ADE00361EEFA2DADF0D48A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:cf:d7:1b:f0:47:54:9e:4a:fd:a8:d6:d4:
6e:65:86:4a:36:7a:2b:63:1d:91:b0:bd:4a:d0:2b:
cb:55:2f:60:5d:6c:d6:e4:3a:d4:37:5b:06:a2:c5:
b4:2d:14:8f:a0:52:72:09:56:0c:9e:11:a2:63:9b:
7d:c4:37:ab:4d:c0:7b:a3:5e:3e:c5:78:f7:f7:4a:
5e:29:a2:e5:82:25:01:80:45:03:24:b2:ef:a0:63:
25:4e:ac:b6:6c:a2:eb:98:a7:5a:18:af:66:64:a7:
6f:4b:d2:61:20:f5:90:91:a7:60:91:47:14:2b:53:
f2:99:a3:b7:a8:59:72:25:9d:a8:b9:44:80:dd:72:
f5:a0:20:41:65:2d:1e:c7:34:8a:e8:3a:df:13:df:
a0:74:c9:fb:00:c7:6b:59:63:84:a1:db:1b:42:19:
6d:b7:15:14:b1:82:e6:bb:d0:a2:0a:4d:07:7e:0d:
37:c6:03:b6:03:b7:57:8c:e3:99:b2:c8:c6:95:ec:
f6:36:76:52:6c:ab:e2:01:88:67:67:4b:05:ab:f0:
ca:e2:8d:a2:98:3a:27:43:11:84:34:06:2c:85:c5:
86:2e:ef:54:b7:43:4f:08:ee:74:c2:7c:6c:41:f5:
ed:35:40:85:ae:38:1b:ed:e6:01:39:3b:87:ef:e0:
a8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5B:EB:79:C7:83:F5:B2:82:AD:E0:03:61:EE:FA:2D:AD:F0:D4:8A
X509v3 Authority Key Identifier:
keyid:16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/323830343a366163633a3a2f33322d313238203d3e20323730333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6acc::/32
Signature Algorithm: sha256WithRSAEncryption
23:d5:98:c5:db:f3:c3:81:87:bd:da:b3:00:63:5b:7d:d6:f4:
33:26:07:07:dd:73:4c:1a:a3:74:13:b4:70:02:12:07:f0:ad:
20:01:19:0b:57:25:0e:54:31:c5:57:40:75:6b:64:ec:d7:db:
27:ed:05:5a:0c:a6:db:36:d9:ac:a0:5a:88:97:52:83:43:39:
27:e8:30:91:56:d6:5f:af:51:b4:1b:4d:87:18:8c:93:05:ff:
9c:4a:f2:f3:e9:81:52:c4:7c:1f:d5:05:73:22:10:56:fb:c1:
0c:95:3f:dc:fe:7f:ac:78:8d:c1:53:e2:78:bb:c6:f4:4f:65:
72:cf:01:2e:66:7b:d9:d6:00:3e:99:40:bc:26:dd:e0:80:b0:
4a:1a:e9:db:bb:e4:64:3b:02:2e:7d:95:7f:49:0e:ea:19:2c:
fe:d7:95:2e:e5:80:ab:7f:c5:72:6c:c3:a3:f5:ac:61:46:d8:
7f:38:17:fb:9b:b8:8e:c0:75:bf:19:9b:62:c1:16:37:9a:3a:
99:8a:95:b2:21:f0:c7:ba:df:b8:13:3e:ed:dd:58:1b:31:4a:
fb:56:cd:04:e0:99:01:0a:16:80:80:e6:4b:f3:f4:c4:c2:44:
27:de:8d:81:30:47:ee:75:7d:b9:be:2d:fb:28:10:ec:95:63:
b6:c4:1d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 13:34:40 2025 by rpki-client