Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/323830343a333831633a3a2f34302d3430203d3e20323636343537.roa
File: 323830343a333831633a3a2f34302d3430203d3e20323636343537.roa (raw, json)
Hash identifier: b3ejC392xyfbSJfQME99IiZ/zMqpkptQGSUSd2Csu0g=
Subject key identifier: 64:4A:A6:13:99:45:0A:A9:D5:F0:67:94:EA:F7:7C:97:9E:5F:67:35
Certificate issuer: /CN=1B5FB05E56AF1D225DA4F53CCFF3A94366D93615
Certificate serial: 5AE3AF7D7D4622C9BF72F90D889B06F42F24E766
Authority key identifier: 1B:5F:B0:5E:56:AF:1D:22:5D:A4:F5:3C:CF:F3:A9:43:66:D9:36:15
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/323830343a333831633a3a2f34302d3430203d3e20323636343537.roa
Signing time: Fri 17 Jan 2025 11:46:32 +0000
ROA not before: Fri 17 Jan 2025 11:41:32 +0000
ROA not after: Fri 16 Jan 2026 11:46:32 +0000
asID: 266457
IP address blocks: 2804:381c::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.crl
rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 21:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:e3:af:7d:7d:46:22:c9:bf:72:f9:0d:88:9b:06:f4:2f:24:e7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B5FB05E56AF1D225DA4F53CCFF3A94366D93615
Validity
Not Before: Jan 17 11:41:32 2025 GMT
Not After : Jan 16 11:46:32 2026 GMT
Subject: CN=644AA61399450AA9D5F06794EAF77C979E5F6735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:22:42:3c:a1:f1:95:66:ec:94:78:f7:c5:
41:df:a0:ec:de:84:5f:0c:bc:8d:db:36:f8:b4:b3:
29:0c:e9:ad:70:8e:cc:a8:21:e1:fa:b8:31:4a:ef:
e5:3a:00:d7:84:a3:d5:f9:99:e3:8d:bc:e7:5a:01:
b7:d6:aa:84:66:50:3b:96:0a:a2:07:2c:79:a3:8e:
46:15:7d:05:01:bd:24:4d:8d:a6:1c:06:53:2b:b1:
f1:34:5c:66:d8:97:e1:3b:fe:a9:86:06:26:4b:63:
2f:e4:97:0d:60:d2:e7:fb:a2:b4:1c:26:21:4e:e9:
7b:56:a3:0e:eb:ad:0c:75:4a:d4:56:e8:a9:3f:a0:
9e:1a:32:28:d7:b5:d1:bc:b2:b9:65:50:ea:c7:1d:
8d:21:d9:82:d7:52:07:86:ab:41:f7:3f:94:49:c9:
9e:00:46:2a:0a:e0:44:0b:b2:ae:b9:66:04:f1:85:
9a:7a:22:5e:11:ca:a4:32:14:ad:22:ec:ec:3c:1b:
39:e2:06:c7:dd:95:ba:71:e4:db:ad:60:cb:11:67:
72:51:30:b3:18:f2:d9:31:8a:02:58:7b:84:91:00:
d6:b6:81:c6:69:06:c8:9f:84:56:00:fe:7d:9e:ee:
33:c2:03:ad:f8:3c:08:11:bb:fb:27:56:8b:1b:82:
b1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4A:A6:13:99:45:0A:A9:D5:F0:67:94:EA:F7:7C:97:9E:5F:67:35
X509v3 Authority Key Identifier:
keyid:1B:5F:B0:5E:56:AF:1D:22:5D:A4:F5:3C:CF:F3:A9:43:66:D9:36:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/323830343a333831633a3a2f34302d3430203d3e20323636343537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:381c::/40
Signature Algorithm: sha256WithRSAEncryption
1e:0d:7a:b0:1a:8e:cd:60:b4:cb:72:4c:a3:f0:8e:39:95:0f:
2b:0d:08:f5:f1:8b:fe:9c:6f:8f:0f:6b:10:09:ad:ca:0e:02:
75:3e:f0:0f:c7:42:e0:8a:51:b7:c9:55:4f:db:8d:14:21:de:
46:83:24:d0:86:5a:8a:d7:b0:c7:c6:30:bf:6b:a7:b8:f2:e0:
d7:b6:1d:3b:7f:e9:bc:45:f2:72:ed:cf:44:ae:e3:2e:fa:07:
9d:50:f5:d8:b8:3b:39:7f:0e:be:a9:2d:94:a0:a8:3c:ae:c9:
da:a5:c1:dd:f7:f4:87:f4:ad:9c:fa:4c:e6:cc:32:c9:5b:40:
97:2f:01:14:ce:a1:8b:eb:ba:54:52:b3:e8:cd:9a:f3:66:5a:
13:bb:d6:3a:d9:8d:21:4c:9d:f7:87:bd:41:c6:2d:e5:35:a1:
f6:59:f2:23:52:4f:55:25:7a:54:53:1b:e1:20:96:27:a8:d4:
b4:0e:c0:c0:7d:8a:15:a6:eb:91:7d:4a:f0:2b:51:48:14:6c:
87:e9:39:39:fa:db:95:0a:36:a5:5c:33:b7:b6:c5:e9:44:01:
da:35:25:aa:35:5e:3d:1e:3f:20:6e:94:53:a5:36:a6:06:18:
80:d3:a9:f0:b9:e1:61:20:96:bd:57:c3:ad:94:60:a5:0c:53:
e2:98:f7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:31:15 2025 by rpki-client