Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135342e302f32332d3233203d3e20323633333437.roa
File: 34352e3136322e3135342e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier: ouThG/vovt23z5DICBuhRxXVZt0Jhg8pQbosGxbqvBM=
Subject key identifier: D4:2A:DD:72:54:18:EF:BA:57:ED:4C:CA:64:5B:2B:70:99:4F:44:A0
Certificate issuer: /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial: 5476BDDFDACC3645752216DB638FFEC65551B1B4
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135342e302f32332d3233203d3e20323633333437.roa
Signing time: Thu 06 Mar 2025 18:28:49 +0000
ROA not before: Thu 06 Mar 2025 18:23:49 +0000
ROA not after: Thu 05 Mar 2026 18:28:49 +0000
asID: 263347
IP address blocks: 45.162.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 16:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:76:bd:df:da:cc:36:45:75:22:16:db:63:8f:fe:c6:55:51:b1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Validity
Not Before: Mar 6 18:23:49 2025 GMT
Not After : Mar 5 18:28:49 2026 GMT
Subject: CN=D42ADD725418EFBA57ED4CCA645B2B70994F44A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7c:01:e9:e3:1f:3a:e8:7f:e1:fb:ba:4a:20:
4b:23:7d:f8:f5:c0:82:fb:89:9c:8f:1c:05:5b:09:
c3:06:6d:11:37:8b:f4:df:96:36:51:4f:4a:09:9c:
58:27:1a:b1:ba:bc:d1:97:a8:66:de:c1:7d:f9:4c:
79:03:c7:96:ae:59:77:5e:b4:b9:17:2c:e9:7f:7b:
4a:81:42:d8:f0:ce:3b:d0:7b:64:19:c1:5d:84:e2:
16:49:54:31:00:e5:30:9b:42:46:33:a9:0b:92:d0:
fa:16:18:e0:53:42:a2:8a:96:d0:98:96:84:18:3e:
26:2e:08:ee:bf:8a:51:5f:fe:14:b0:84:8c:d8:bf:
a7:06:38:be:78:11:3f:e2:d4:f0:26:0c:48:e8:29:
37:9a:1d:62:00:25:62:63:50:4b:06:63:ae:bc:91:
08:4e:b1:82:29:7c:e1:bf:53:44:67:22:79:10:9b:
60:93:7e:cc:ec:b7:83:0c:10:1c:20:9f:28:c3:41:
67:e5:bc:a9:2c:83:5f:e9:23:c4:5e:ca:a8:54:1b:
69:e9:c3:04:0d:75:53:50:d7:a7:d1:a1:59:7c:6e:
6e:7a:ca:ef:96:f2:52:11:e0:21:71:df:cf:dc:3a:
09:1b:69:e0:60:66:41:5a:24:7f:e5:96:d9:ef:88:
86:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2A:DD:72:54:18:EF:BA:57:ED:4C:CA:64:5B:2B:70:99:4F:44:A0
X509v3 Authority Key Identifier:
keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135342e302f32332d3233203d3e20323633333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.162.154.0/23
Signature Algorithm: sha256WithRSAEncryption
59:76:c2:c5:45:39:71:8a:98:9f:38:a8:45:fc:96:34:c9:87:
97:06:fc:06:b4:b0:bc:19:ac:36:fe:76:bc:7c:e4:42:8d:f1:
5d:76:4c:30:85:41:6b:cf:41:a1:b5:d1:2c:ed:a0:8f:72:92:
39:bd:ec:7c:c4:c4:7c:29:bd:d1:d3:24:2c:1c:d4:22:0c:77:
87:ba:c9:8c:5f:02:e7:e9:fb:e7:9f:b9:5a:50:3f:30:cd:58:
4b:f0:0b:3c:b1:8c:75:d7:79:c7:35:aa:d1:b8:9b:c4:91:70:
58:49:a1:8f:1b:78:42:44:af:65:7a:1d:61:5b:ae:ff:4f:c6:
dc:e1:ad:8f:09:45:e7:0b:11:d3:b9:2f:8c:ee:d9:07:e3:c2:
50:76:70:0b:de:47:07:0f:c4:2f:38:77:09:f7:3f:5a:25:ed:
09:fd:a2:84:04:8e:90:be:41:dd:ec:b1:cb:cf:1a:a3:8f:41:
50:80:21:ca:ca:64:57:5a:70:f4:74:62:7f:9d:21:04:51:75:
b6:b1:c6:81:93:63:d1:57:33:42:b2:d7:0a:0c:a7:bd:a6:7b:
16:ca:6d:b3:e2:5c:60:44:76:23:03:5c:4f:8c:4e:4a:34:d6:
8b:ae:70:86:4f:21:79:b2:42:f8:36:7e:2f:89:6e:f9:ff:fc:
b0:ef:b9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 22:55:49 2025 by rpki-client