Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/34352e3136382e3230342e302f32332d3233203d3e20323638303833.roa
File: 34352e3136382e3230342e302f32332d3233203d3e20323638303833.roa (raw, json)
Hash identifier: 5F3f7GTOM9cN2hH5opq62LZm4K1MGTiNk1/mfnwhPTs=
Subject key identifier: 6D:D7:43:9D:67:70:B6:14:EE:7E:50:E5:71:1E:BA:3F:07:8C:72:D5
Certificate issuer: /CN=1697926DE3CD00AA3AC5E65249B50EF179E9908C
Certificate serial: 56991616F0192EC572F87DC1126C52039AF98F5B
Authority key identifier: 16:97:92:6D:E3:CD:00:AA:3A:C5:E6:52:49:B5:0E:F1:79:E9:90:8C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1697926DE3CD00AA3AC5E65249B50EF179E9908C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/34352e3136382e3230342e302f32332d3233203d3e20323638303833.roa
Signing time: Mon 13 Jan 2025 14:20:37 +0000
ROA not before: Mon 13 Jan 2025 14:15:37 +0000
ROA not after: Mon 12 Jan 2026 14:20:37 +0000
asID: 268083
IP address blocks: 45.168.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/1697926DE3CD00AA3AC5E65249B50EF179E9908C.crl
rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/1697926DE3CD00AA3AC5E65249B50EF179E9908C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1697926DE3CD00AA3AC5E65249B50EF179E9908C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 04:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:99:16:16:f0:19:2e:c5:72:f8:7d:c1:12:6c:52:03:9a:f9:8f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697926DE3CD00AA3AC5E65249B50EF179E9908C
Validity
Not Before: Jan 13 14:15:37 2025 GMT
Not After : Jan 12 14:20:37 2026 GMT
Subject: CN=6DD7439D6770B614EE7E50E5711EBA3F078C72D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:71:f2:98:82:5a:53:c9:3f:34:74:50:bd:
b0:e8:71:ec:b6:3c:ff:9b:02:e4:33:62:ed:c5:1b:
8d:54:c6:23:63:06:8d:22:a8:9a:ae:45:fb:ab:4b:
41:7b:87:b4:b1:8f:56:b0:5a:3f:fd:02:e9:1f:2c:
03:11:4c:3b:cc:cc:45:6a:4a:e3:4a:61:a8:36:ab:
4d:8d:f9:20:29:c7:a0:3b:58:e5:cb:d4:b9:05:65:
18:f8:77:bd:0b:88:35:38:b0:f6:0f:49:b5:e9:b9:
46:1e:87:ee:6d:92:76:5a:d3:30:41:eb:3c:6e:17:
34:08:8b:2a:e6:c9:0d:6a:0e:90:53:a4:0f:e9:88:
fb:9d:f3:c5:c5:a6:2e:61:1c:23:d9:96:9c:4e:2e:
eb:98:b9:ff:70:e0:09:92:23:24:d5:22:fc:0c:63:
56:cb:4b:c7:02:df:c8:ab:75:0e:dd:c4:ee:25:f9:
f9:25:50:28:9b:93:01:db:21:ad:d0:fe:bf:0b:36:
5b:a4:47:f8:d8:ed:fe:61:a4:16:21:6c:35:41:19:
d7:bb:65:57:4c:98:ef:47:67:29:33:12:95:c9:fb:
0a:a6:d8:1b:e8:3e:08:b5:43:15:cc:8f:88:62:a6:
9f:75:a1:9e:15:c3:b4:5e:84:05:57:97:8d:5a:1b:
e7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D7:43:9D:67:70:B6:14:EE:7E:50:E5:71:1E:BA:3F:07:8C:72:D5
X509v3 Authority Key Identifier:
keyid:16:97:92:6D:E3:CD:00:AA:3A:C5:E6:52:49:B5:0E:F1:79:E9:90:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/1697926DE3CD00AA3AC5E65249B50EF179E9908C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1697926DE3CD00AA3AC5E65249B50EF179E9908C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/34352e3136382e3230342e302f32332d3233203d3e20323638303833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.204.0/23
Signature Algorithm: sha256WithRSAEncryption
79:f6:02:d6:dc:1a:a8:10:8c:34:31:1e:7d:0a:48:86:04:00:
22:b2:19:e4:29:9d:99:72:7e:35:0e:57:47:3b:e4:88:6f:fa:
69:82:b7:c2:bb:eb:52:6f:85:20:de:44:28:52:d3:98:88:60:
af:44:46:50:63:85:d0:2f:22:43:a7:8d:67:d2:d7:dc:51:9f:
a3:8b:3f:01:bf:4f:98:20:22:cb:93:81:5f:6e:cd:3a:1d:54:
34:13:e8:b1:a6:f0:ae:ae:8c:80:f9:bd:a0:9f:be:90:be:1a:
46:a6:b4:5e:d4:34:a9:17:7d:a8:64:3e:4d:01:89:d2:52:cf:
69:d5:06:9b:dd:b2:84:bb:1a:16:7f:ce:fb:dc:84:cd:14:79:
3c:ce:67:28:8c:3a:43:17:a8:f4:a7:36:c1:09:cf:fb:a9:14:
71:61:8b:0e:8a:4d:43:1d:48:6b:9a:78:15:39:f3:63:2f:a9:
37:f4:01:f6:96:27:37:f2:57:38:e1:52:87:4c:c0:6c:52:2f:
9c:ee:74:80:33:72:62:2f:83:a8:c2:64:16:e7:f8:2a:a9:1d:
31:2c:2f:b2:1d:be:e0:2e:91:64:f7:1c:af:67:d3:59:10:05:
d0:74:e0:65:43:eb:81:f3:f3:1e:8d:1a:dc:da:85:30:16:28:
9a:d7:af:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:24:46 2025 by rpki-client