Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666635303a3a2f34362d3436203d3e20323633333230.roa
File: 323830343a313433633a666635303a3a2f34362d3436203d3e20323633333230.roa (raw, json)
Hash identifier: zLB//47klaXDPNzjSbcYkyBEd6Lchc9SBT1ilDQm3R0=
Subject key identifier: 49:99:CB:14:EA:AB:23:BF:51:22:6B:B0:A5:B3:32:91:7B:93:76:ED
Certificate issuer: /CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
Certificate serial: 733DA757D1F26B424AB4793B7B6EDD33DA9DBB53
Authority key identifier: 40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666635303a3a2f34362d3436203d3e20323633333230.roa
Signing time: Mon 06 Jan 2025 18:44:00 +0000
ROA not before: Mon 06 Jan 2025 18:39:00 +0000
ROA not after: Mon 05 Jan 2026 18:44:00 +0000
asID: 263320
IP address blocks: 2804:143c:ff50::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.crl
rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 12 Apr 2025 07:34:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:3d:a7:57:d1:f2:6b:42:4a:b4:79:3b:7b:6e:dd:33:da:9d:bb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
Validity
Not Before: Jan 6 18:39:00 2025 GMT
Not After : Jan 5 18:44:00 2026 GMT
Subject: CN=4999CB14EAAB23BF51226BB0A5B332917B9376ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:68:8f:c5:bb:70:bc:d9:c8:51:b9:0a:d0:
c0:51:4b:2a:d6:07:86:5a:e5:a9:e5:da:f1:76:bc:
1a:93:63:ae:16:70:f6:52:cf:3e:03:e7:02:4f:bc:
3d:a9:80:aa:9c:d4:12:f1:05:4e:38:24:28:cf:24:
86:dd:ae:f8:18:5d:c1:d1:8f:51:53:57:83:34:d0:
5b:de:4a:6f:58:21:16:9a:36:28:52:a8:67:33:0b:
ec:e5:a8:11:ce:49:43:6d:97:b4:c4:77:25:73:8c:
9d:23:f1:92:ef:b7:64:be:ab:ac:41:af:d9:74:b0:
c6:30:18:8f:1d:12:71:e5:94:0c:03:5f:84:39:bd:
22:07:11:b5:14:ed:0f:54:04:09:4e:51:81:1e:9d:
cd:10:15:9d:1e:70:8b:fb:23:1c:b2:ee:e4:6c:ea:
0a:34:ba:f9:28:fb:40:0c:8b:65:65:2e:aa:21:a8:
16:ef:2f:75:95:7f:59:f9:c7:f9:47:57:9a:6f:c5:
f0:9e:3b:68:8f:a0:7e:fc:b9:be:dd:5a:f7:9f:33:
83:83:b2:39:90:d4:72:42:0f:97:5a:f4:90:b0:e8:
b0:bb:fc:2c:d6:4f:cf:88:34:02:98:c3:e5:41:e0:
84:da:10:23:c1:d9:ee:2c:ee:c0:57:85:6c:d1:3b:
9e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:99:CB:14:EA:AB:23:BF:51:22:6B:B0:A5:B3:32:91:7B:93:76:ED
X509v3 Authority Key Identifier:
keyid:40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666635303a3a2f34362d3436203d3e20323633333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:143c:ff50::/46
Signature Algorithm: sha256WithRSAEncryption
23:55:4b:7a:b5:fa:bb:76:cf:c1:8e:d2:3d:f0:9a:69:04:13:
e9:80:c4:b2:93:16:07:75:43:66:19:78:39:b8:85:4f:a6:eb:
de:2a:f5:2d:93:ce:7b:10:f7:74:d9:44:92:1a:a4:c0:84:9d:
82:74:51:dc:6a:bc:f6:e6:94:ad:30:49:5d:20:46:5c:2a:7c:
56:43:1a:28:e7:ba:c4:31:36:e1:06:55:95:bf:7f:71:af:5b:
30:53:65:55:75:bc:93:b2:6c:2c:d2:ea:52:60:b2:2d:df:3e:
b3:ef:00:f5:56:08:80:73:6a:60:1c:6f:29:27:90:ae:84:a7:
42:08:f6:11:c3:82:5e:19:86:35:94:ee:84:87:16:29:ed:14:
ca:99:0d:c0:2e:ea:87:3a:66:8a:17:72:fa:1a:07:e6:5e:ff:
32:b3:8e:56:6f:1c:13:a6:6c:a0:f5:73:59:bf:2f:8b:bd:93:
7d:99:98:08:95:91:6f:f5:ff:ce:a6:22:7a:bd:46:37:3c:1c:
cc:83:b7:05:15:21:e3:d6:2f:c0:b9:b3:d8:c6:f2:16:9c:7a:
31:75:ec:44:0f:8f:7e:4e:d1:48:fe:7d:d6:41:f3:75:dd:a6:
65:1f:ac:f7:bc:e0:21:d1:6f:f3:f8:b6:25:0d:80:b9:fa:83:
32:54:02:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:12:08 2025 by rpki-client