Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136332e3134342e302f32332d3233203d3e20323638353638.roa
File: 34352e3136332e3134342e302f32332d3233203d3e20323638353638.roa (raw, json)
Hash identifier: EgEYNQXiXBDGtmbD3sr07Hmp8reOUmr1ACr+a7EYk2M=
Subject key identifier: 71:44:D0:63:D2:AB:8C:83:09:B9:9A:8F:4F:11:B2:7F:EA:29:4A:39
Certificate issuer: /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial: 046823D34BB284B29FDD7DE2A72C86A3DB7D4186
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136332e3134342e302f32332d3233203d3e20323638353638.roa
Signing time: Mon 13 Jan 2025 12:55:00 +0000
ROA not before: Mon 13 Jan 2025 12:50:00 +0000
ROA not after: Mon 12 Jan 2026 12:55:00 +0000
asID: 268568
IP address blocks: 45.163.144.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 11 Apr 2025 13:40:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:68:23:d3:4b:b2:84:b2:9f:dd:7d:e2:a7:2c:86:a3:db:7d:41:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Validity
Not Before: Jan 13 12:50:00 2025 GMT
Not After : Jan 12 12:55:00 2026 GMT
Subject: CN=3082010A0282010100C442A088BA0E604400C5EEAA55272D9848BDA116A1B6234B2374548E19466CFB33F25BB6FF163923ABA086AA63A1447BE409BD64575D4050250590BAFAA1F557D84D7FE3B623F2CE6FC6CB8C295E5000D2383CF8A19DD3B7BD2D110FEDA7A3BA776BC0FA9BC8BD6442D018DCBACD1079D9AC156D7560446307279B16800664CE0DF4237A49EB6BEAF71EB19F8988B6B49B18FBA384583E5E957DA8B9127C6925DF6A5A1EC4B52D1A96EDDA5509400F779B5EDA7F10D06ABE38AB40D579F7537967B5FF9420CA81A7C18CBBE7329E096CAC85F8016913B0852ACC691FC50CFABA22AE48184482AE80E05DBC85D98D9013251260C1549E67D4B8D83A5C76C65BC30203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:a0:88:ba:0e:60:44:00:c5:ee:aa:55:27:
2d:98:48:bd:a1:16:a1:b6:23:4b:23:74:54:8e:19:
46:6c:fb:33:f2:5b:b6:ff:16:39:23:ab:a0:86:aa:
63:a1:44:7b:e4:09:bd:64:57:5d:40:50:25:05:90:
ba:fa:a1:f5:57:d8:4d:7f:e3:b6:23:f2:ce:6f:c6:
cb:8c:29:5e:50:00:d2:38:3c:f8:a1:9d:d3:b7:bd:
2d:11:0f:ed:a7:a3:ba:77:6b:c0:fa:9b:c8:bd:64:
42:d0:18:dc:ba:cd:10:79:d9:ac:15:6d:75:60:44:
63:07:27:9b:16:80:06:64:ce:0d:f4:23:7a:49:eb:
6b:ea:f7:1e:b1:9f:89:88:b6:b4:9b:18:fb:a3:84:
58:3e:5e:95:7d:a8:b9:12:7c:69:25:df:6a:5a:1e:
c4:b5:2d:1a:96:ed:da:55:09:40:0f:77:9b:5e:da:
7f:10:d0:6a:be:38:ab:40:d5:79:f7:53:79:67:b5:
ff:94:20:ca:81:a7:c1:8c:bb:e7:32:9e:09:6c:ac:
85:f8:01:69:13:b0:85:2a:cc:69:1f:c5:0c:fa:ba:
22:ae:48:18:44:82:ae:80:e0:5d:bc:85:d9:8d:90:
13:25:12:60:c1:54:9e:67:d4:b8:d8:3a:5c:76:c6:
5b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:44:D0:63:D2:AB:8C:83:09:B9:9A:8F:4F:11:B2:7F:EA:29:4A:39
X509v3 Authority Key Identifier:
keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136332e3134342e302f32332d3233203d3e20323638353638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.163.144.0/23
Signature Algorithm: sha256WithRSAEncryption
60:69:74:7c:0f:bc:f4:83:db:a5:75:55:5f:a9:a4:38:d3:be:
a7:0b:20:53:67:8d:b1:8f:35:28:b1:d1:59:c7:d4:f3:c8:91:
ed:8e:91:61:14:48:47:b3:66:ef:ac:27:48:21:6d:7d:0e:d0:
d5:2c:d0:56:2b:01:04:2d:00:c7:94:19:66:ad:27:5b:af:61:
a6:14:4d:c8:ba:4a:09:74:f3:e6:30:99:ed:e1:79:03:d9:6a:
5d:3a:05:e8:1c:91:65:53:8d:46:b9:8d:15:9a:9d:18:fd:f7:
2f:17:0f:ca:6a:70:1f:6a:c8:6c:87:b2:0b:ae:d4:25:2e:6b:
b3:59:8f:f4:31:bb:7c:11:41:3d:fe:3e:f4:fb:72:6c:1c:f1:
33:c2:75:3c:fe:41:25:85:ed:52:40:05:04:35:4b:97:1a:b4:
6b:8b:c8:80:9c:f6:57:68:55:18:51:b3:1c:68:67:4e:9d:36:
fc:ef:45:aa:bb:56:bb:0e:71:0c:39:bd:a4:e1:25:9f:82:f4:
ab:4a:ae:63:4d:bd:cd:bc:fa:fc:3b:53:a2:16:86:0b:bb:55:
71:4b:97:e3:81:99:3a:84:81:cd:fd:c5:f4:5d:b5:5e:88:b8:
86:5a:51:2d:8c:d1:b5:5d:bf:fb:66:aa:08:80:99:6d:98:cd:
62:d4:1c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:21:47 2025 by rpki-client