Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383030303a3a2f33342d3334203d3e20323638303931.roa
File: 323830343a353764633a383030303a3a2f33342d3334203d3e20323638303931.roa (raw, json)
Hash identifier: Nvr4bicixCDJK9lSN0EmOQFMTBz5G8YfJFgKfgqQD08=
Subject key identifier: 76:ED:D0:9B:B0:ED:78:98:7E:66:0E:24:40:C4:13:EA:DD:33:A7:96
Certificate issuer: /CN=3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF
Certificate serial: 52FF5921E0AB08C6B4F3641AEB835D4E6D2E643E
Authority key identifier: 3C:9F:72:B9:D4:E7:CA:7E:EF:4F:D6:EA:F0:70:32:0A:18:60:9E:FF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383030303a3a2f33342d3334203d3e20323638303931.roa
Signing time: Fri 14 Feb 2025 17:48:10 +0000
ROA not before: Fri 14 Feb 2025 17:43:10 +0000
ROA not after: Fri 13 Feb 2026 17:48:10 +0000
asID: 268091
IP address blocks: 2804:57dc:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.crl
rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 04:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:ff:59:21:e0:ab:08:c6:b4:f3:64:1a:eb:83:5d:4e:6d:2e:64:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF
Validity
Not Before: Feb 14 17:43:10 2025 GMT
Not After : Feb 13 17:48:10 2026 GMT
Subject: CN=76EDD09BB0ED78987E660E2440C413EADD33A796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:70:e2:17:fd:e5:74:99:d4:ac:13:36:0d:3a:
56:6e:66:71:2e:67:30:af:c3:b7:08:b4:b5:ce:fc:
59:84:e7:e2:6c:af:2a:e4:ef:c0:71:65:bb:90:86:
c2:89:49:97:dd:ec:08:e2:79:60:a5:42:e9:f1:74:
93:b4:ce:9e:92:f6:1b:06:1f:01:6d:23:dc:7a:a9:
6f:f3:92:f3:7d:6a:67:02:c9:3f:a4:8c:ea:53:99:
43:eb:72:45:f7:31:0e:68:6e:14:b1:4a:ac:67:12:
23:a6:1e:db:3f:fc:b8:eb:0a:74:2d:d4:f7:8e:ef:
f5:f4:64:af:4d:c8:0d:f7:87:43:75:59:d8:5d:ff:
2e:68:5e:47:36:8d:27:ef:a7:e7:cc:4c:2d:70:ae:
f9:3f:46:e6:ca:a2:e3:3f:25:18:0b:5b:7b:93:e6:
8d:f9:ea:14:ea:18:41:72:93:70:21:45:79:19:02:
8c:2a:02:cf:92:40:e0:7f:b2:2e:8c:75:de:64:50:
bd:26:c0:f4:ab:e1:fe:f4:18:96:0b:b3:39:1b:86:
b4:b1:e7:c8:76:96:e6:c8:62:df:cb:c4:6c:58:51:
8f:af:90:d1:82:f0:a6:2e:89:a5:17:fc:48:dd:c6:
3a:cc:23:68:94:ae:d5:8a:e3:af:62:3a:64:c5:8a:
5d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:ED:D0:9B:B0:ED:78:98:7E:66:0E:24:40:C4:13:EA:DD:33:A7:96
X509v3 Authority Key Identifier:
keyid:3C:9F:72:B9:D4:E7:CA:7E:EF:4F:D6:EA:F0:70:32:0A:18:60:9E:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383030303a3a2f33342d3334203d3e20323638303931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:57dc:8000::/34
Signature Algorithm: sha256WithRSAEncryption
a6:c7:5e:2c:b9:17:fb:b8:8f:95:e2:50:75:82:c7:05:04:74:
4d:98:60:e6:a7:48:4d:d6:5a:28:cd:85:5c:9c:65:8c:11:eb:
ed:4e:f6:21:76:5e:ff:b5:d3:fc:fd:b1:b0:da:9d:33:a2:b0:
62:fb:4d:48:8d:8f:7d:b9:a5:11:43:89:cf:f8:87:31:1b:e1:
9d:62:84:00:11:7b:6b:1e:0a:f8:a6:7f:b1:00:53:a3:5e:c0:
22:c2:74:8d:77:1f:64:67:52:0c:2e:96:9c:83:17:a6:12:41:
3c:c8:28:85:b5:52:2c:53:51:b8:e2:f1:26:74:c0:7f:64:19:
4a:02:2e:8c:ca:b4:34:15:c5:47:19:42:c1:5f:8b:6f:6e:37:
c4:26:05:87:36:d0:87:05:e3:ad:55:50:f1:43:79:89:6c:f8:
aa:af:db:9a:c8:97:24:05:05:fd:db:36:a7:9a:70:b7:8c:f3:
c3:76:83:fa:6d:45:32:58:7f:bb:42:7c:3b:7f:02:18:11:38:
bf:09:82:cf:61:f2:81:42:05:39:00:e8:82:bd:e0:21:be:f1:
1d:59:78:eb:2e:99:f4:e5:7d:e0:f3:2b:72:20:85:41:61:87:
18:aa:d1:a9:63:76:f9:91:07:5f:b6:9c:11:08:a4:3e:a2:2a:
7b:f5:2a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 16:43:01 2025 by rpki-client