Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234342e302f32322d3232203d3e20323638323936.roa
File: 34352e3233372e3234342e302f32322d3232203d3e20323638323936.roa (raw, json)
Hash identifier: GBbR55tfKncZtM4j0GLm3i8DYT0Dpyl5yFnOXpCSWsA=
Subject key identifier: E9:1B:63:21:2F:76:D4:44:F0:84:60:F0:BE:E5:8B:74:D3:1E:4D:6D
Certificate issuer: /CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Certificate serial: 2923ACB74C3EC8C5561C38812E0B5396E2EE601C
Authority key identifier: 6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234342e302f32322d3232203d3e20323638323936.roa
Signing time: Thu 06 Mar 2025 09:31:54 +0000
ROA not before: Thu 06 Mar 2025 09:26:54 +0000
ROA not after: Thu 05 Mar 2026 09:31:54 +0000
asID: 268296
IP address blocks: 45.237.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl
rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 13 Apr 2025 19:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:23:ac:b7:4c:3e:c8:c5:56:1c:38:81:2e:0b:53:96:e2:ee:60:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Validity
Not Before: Mar 6 09:26:54 2025 GMT
Not After : Mar 5 09:31:54 2026 GMT
Subject: CN=E91B63212F76D444F08460F0BEE58B74D31E4D6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:4d:d3:1a:f8:dd:c3:2a:f4:c7:16:ba:25:
7c:73:14:bb:38:2c:ef:5c:be:54:02:05:f1:fe:1e:
fb:b0:ac:30:72:1a:ed:13:d9:47:92:ee:77:de:c0:
1b:14:50:6e:e3:5f:e5:22:1f:55:9b:98:d3:34:ef:
a2:42:5c:9c:98:2d:ff:e1:79:20:3a:0c:c8:04:f7:
4d:a9:28:6e:90:56:37:0c:84:4a:3f:e0:a0:4f:42:
77:84:55:ce:b4:b1:69:2a:ec:ae:e0:b5:48:6a:87:
cb:8d:b3:1f:e1:2b:6d:49:8e:35:93:31:9f:25:a7:
19:da:c9:39:64:f3:3e:6f:7b:1e:e9:24:68:ea:3b:
f3:1d:7a:1a:61:43:83:7b:e7:5d:b7:5d:62:49:01:
fa:af:01:ce:8b:14:47:00:e6:06:4d:99:3b:cd:7f:
55:7a:76:a7:8a:ae:28:0f:4f:fe:1f:81:7f:44:5c:
23:d6:d5:8f:f7:d0:94:5d:fa:e3:16:8b:67:01:fb:
a0:a2:aa:b3:4a:04:31:e3:ab:74:86:b8:aa:1d:9b:
a6:33:dc:08:ea:f0:c1:4f:2f:44:62:4e:fe:56:02:
11:28:41:c0:95:14:11:1c:9c:98:3e:26:3a:0d:c6:
3c:a6:74:28:ee:bb:e0:66:68:5e:e4:c1:16:53:79:
1f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1B:63:21:2F:76:D4:44:F0:84:60:F0:BE:E5:8B:74:D3:1E:4D:6D
X509v3 Authority Key Identifier:
keyid:6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234342e302f32322d3232203d3e20323638323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.244.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:63:0c:cf:d2:1b:0c:39:a3:c3:58:57:99:9c:1b:01:cd:ef:
55:64:28:d7:3d:af:d1:5e:84:37:fd:48:c1:9d:71:33:ba:1e:
48:65:be:ec:d0:0c:72:86:9b:29:b1:cf:97:96:5f:d0:ed:d1:
7a:7d:38:87:f0:87:15:1f:88:38:47:b4:0d:80:23:8e:43:13:
6e:c5:39:35:b5:5a:85:36:9c:f3:f6:90:d6:cc:be:af:59:45:
b1:a9:55:62:15:41:0c:bd:a8:9e:ff:c2:f8:8d:ed:3b:54:d4:
89:cd:d7:fd:cf:59:58:df:98:e3:7e:2e:a6:1c:2d:91:7a:2e:
c6:fc:9c:6f:55:44:25:3d:d8:02:24:61:a1:a9:93:af:d7:2d:
7e:ee:ab:23:90:e4:80:dc:14:1d:94:3b:14:b6:0d:7e:0b:8c:
d7:8c:84:66:06:c4:a4:34:54:bd:52:ce:66:03:53:b5:01:94:
11:c9:e7:6c:a8:97:ae:bd:b3:1e:92:63:d7:eb:8f:2f:23:65:
60:6e:89:76:ea:a6:33:8c:7e:ef:0f:84:7b:80:7f:76:ca:a7:
28:33:35:8b:20:79:af:9a:8d:18:c8:9a:62:5a:bd:d0:3c:80:
78:81:e4:2b:17:78:f8:9c:fb:f3:03:88:de:e6:52:b8:ae:51:
af:91:20:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:06:42 2025 by rpki-client