Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/34352e3138352e3233312e302f32342d3234203d3e20323639343333.roa
File: 34352e3138352e3233312e302f32342d3234203d3e20323639343333.roa (raw, json)
Hash identifier: DhbuDBjSw+bH+rZVadj8aCkbZzWdRDJFijEX4lmHA40=
Subject key identifier: 92:EB:5E:8B:5D:C6:75:7B:78:18:6A:3A:25:F1:1F:58:BE:51:33:50
Certificate issuer: /CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3
Certificate serial: 6EE5619F691E5F34B9716503A6A59D4983E8A587
Authority key identifier: 9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/34352e3138352e3233312e302f32342d3234203d3e20323639343333.roa
Signing time: Fri 07 Mar 2025 00:47:54 +0000
ROA not before: Fri 07 Mar 2025 00:42:54 +0000
ROA not after: Fri 06 Mar 2026 00:47:54 +0000
asID: 269433
IP address blocks: 45.185.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.crl
rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 12 Apr 2025 07:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e5:61:9f:69:1e:5f:34:b9:71:65:03:a6:a5:9d:49:83:e8:a5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3
Validity
Not Before: Mar 7 00:42:54 2025 GMT
Not After : Mar 6 00:47:54 2026 GMT
Subject: CN=92EB5E8B5DC6757B78186A3A25F11F58BE513350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fc:88:ad:e6:6e:a7:fb:36:47:25:f1:36:0b:
e9:e5:bb:db:1e:ad:4f:c0:0f:61:eb:9d:f5:1f:39:
f8:dc:31:cd:ef:ae:61:a7:46:28:3b:36:bc:e3:8c:
52:1c:27:3f:3a:87:d2:61:2d:ce:ed:f3:6d:ed:99:
3c:0a:a6:b7:c5:7c:9f:c8:6a:a6:38:a2:c8:1b:b7:
b2:7c:c7:27:f3:02:cc:5f:c0:2a:4b:c0:91:74:bc:
7c:d1:29:d9:55:41:89:5a:95:2c:8c:af:1c:f6:bf:
1d:9e:bf:88:80:a3:2f:4f:cf:07:df:8a:aa:04:16:
d0:50:bf:fe:88:8d:29:a0:36:7d:ca:4a:3f:73:d5:
10:ca:b0:1b:45:7c:42:8e:78:f0:ac:57:b4:48:89:
f4:61:b5:17:e8:36:ba:d3:f3:60:bd:84:03:70:1a:
9d:ec:3d:31:db:ad:5a:a6:53:88:94:23:a2:dd:88:
a4:c8:7d:30:dc:b7:2e:70:55:44:8d:94:f5:fa:27:
00:d3:fc:da:27:c3:3c:d8:b4:be:a7:3b:66:99:25:
56:c0:0b:3f:84:3a:ca:f1:e2:de:90:ea:2d:71:70:
db:d5:16:4a:02:4d:64:7a:89:f1:ea:61:e1:77:8b:
9f:75:f9:25:8c:f0:61:fc:e4:a1:20:0b:d9:40:48:
db:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EB:5E:8B:5D:C6:75:7B:78:18:6A:3A:25:F1:1F:58:BE:51:33:50
X509v3 Authority Key Identifier:
keyid:9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/34352e3138352e3233312e302f32342d3234203d3e20323639343333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.185.231.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:ee:97:6a:99:00:46:73:e9:aa:6e:26:98:83:c8:65:8c:92:
96:07:69:ec:31:f6:f3:e0:58:99:d4:04:db:97:50:fe:5b:f2:
6f:8e:49:05:a8:aa:fa:07:2e:d9:96:28:68:00:24:1c:3a:62:
17:74:3e:49:4a:37:12:31:17:c6:45:bc:41:3d:44:0d:4a:67:
72:24:f3:63:ed:2b:db:ad:5e:c8:c5:f4:76:0c:11:61:c5:82:
89:ce:6c:d8:d7:3d:d0:78:db:cf:a0:3e:a6:38:00:cc:ec:59:
33:64:5b:f1:3b:65:60:04:6c:af:72:37:2d:c8:40:a9:a8:f6:
1d:27:cc:6b:ea:84:71:12:e4:c6:13:5c:48:9a:db:0c:70:cf:
97:bd:a3:a1:d3:cb:39:6d:4b:32:57:1b:48:ca:d2:2c:8f:71:
65:b2:07:b0:4d:a2:f3:1d:88:66:36:87:73:42:42:b2:52:6b:
60:8e:d3:fe:0e:1e:be:b1:81:42:a5:1e:2a:11:36:45:61:9c:
f0:4e:e0:40:bd:b5:51:0a:9e:f8:c5:b0:e9:ff:1f:b4:99:c6:
97:d2:21:18:1a:bd:3f:18:85:03:d4:5b:e6:8a:c1:30:38:77:
9b:6c:6e:be:f6:a6:2f:b2:d0:df:58:28:cd:5d:ee:3d:ca:13:
cc:e0:7d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 20:46:29 2025 by rpki-client