Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a3a2f33322d3332203d3e20323634393438.roa
File: 323830343a333036343a3a2f33322d3332203d3e20323634393438.roa (raw, json)
Hash identifier: rnEnFtKiyYwf/mVKLRnGbOeWgiudJ/GtmTVRSpDfTUg=
Subject key identifier: 6C:62:DD:46:77:28:73:F8:49:27:A9:50:DF:D2:8E:86:08:2E:87:BA
Certificate issuer: /CN=BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F
Certificate serial: 51CE046318ADD920BAAD4722392278420F0D9DA0
Authority key identifier: BC:47:87:68:F2:51:0E:76:FB:1F:8C:DB:CF:5F:94:8F:D7:A7:C0:1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a3a2f33322d3332203d3e20323634393438.roa
Signing time: Wed 15 Jan 2025 20:05:55 +0000
ROA not before: Wed 15 Jan 2025 20:00:55 +0000
ROA not after: Wed 14 Jan 2026 20:05:55 +0000
asID: 264948
IP address blocks: 2804:3064::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.crl
rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 13 Apr 2025 22:45:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ce:04:63:18:ad:d9:20:ba:ad:47:22:39:22:78:42:0f:0d:9d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F
Validity
Not Before: Jan 15 20:00:55 2025 GMT
Not After : Jan 14 20:05:55 2026 GMT
Subject: CN=6C62DD46772873F84927A950DFD28E86082E87BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:ed:4b:a9:3a:59:d5:07:6c:35:1b:37:64:
d3:7e:f7:42:07:bf:24:5b:b9:ac:59:db:a9:ae:2b:
63:ba:d8:bc:72:78:75:a0:af:4f:1c:0e:bf:b2:d0:
65:56:2a:23:69:f0:a1:a3:31:40:38:38:93:3a:fd:
c5:34:2a:36:d1:91:6e:0d:cc:e4:b1:0b:5c:e9:4c:
bd:ca:34:bc:a5:68:12:2c:6c:1a:f2:61:3e:ed:c4:
7a:39:6d:71:1e:e3:19:ff:b1:a1:0c:32:85:b4:0a:
94:8a:9f:da:ca:fb:0b:61:0a:c9:0b:ab:0d:0e:dc:
56:0d:dd:02:99:8a:41:6f:f6:6c:35:56:61:01:d7:
82:bf:19:b2:35:99:64:74:ed:e7:f7:55:84:b4:14:
20:b0:9d:65:f1:19:56:eb:02:94:76:48:22:d7:80:
41:b2:60:ba:41:93:8b:dd:43:13:78:a8:3d:9b:54:
ac:7a:1e:41:67:2f:33:c6:8a:7b:af:29:74:5f:f6:
f3:b6:c1:52:b7:5e:29:b3:b8:d2:7e:03:c8:88:67:
af:7f:c6:fc:74:66:69:9e:55:74:80:90:bd:ce:e0:
a2:c7:c3:29:d2:c6:26:4c:bc:07:fa:db:9b:86:9f:
26:e1:dc:42:f8:2a:24:5b:7a:cd:11:41:bb:d6:db:
a6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:62:DD:46:77:28:73:F8:49:27:A9:50:DF:D2:8E:86:08:2E:87:BA
X509v3 Authority Key Identifier:
keyid:BC:47:87:68:F2:51:0E:76:FB:1F:8C:DB:CF:5F:94:8F:D7:A7:C0:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a3a2f33322d3332203d3e20323634393438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3064::/32
Signature Algorithm: sha256WithRSAEncryption
62:44:64:8e:0a:ce:7e:99:e7:13:b5:0d:1a:3c:ae:47:59:8e:
21:53:e1:e9:82:cc:11:42:bf:45:d7:a3:7d:8c:73:ec:d8:37:
75:b9:1c:eb:88:48:d4:29:55:f6:56:f9:42:4b:23:c2:0e:b3:
43:91:c4:3b:0e:b2:e0:f0:37:42:ee:55:03:63:19:ff:6e:b6:
8f:87:14:d6:b0:dc:60:eb:05:79:ef:cf:f3:34:a5:01:f1:ed:
08:ef:f7:b4:32:88:d2:09:ef:e4:81:f1:d7:25:8e:98:ca:d6:
a3:d1:69:3d:8d:57:c9:17:65:7e:db:f9:95:02:b1:08:c6:20:
29:5c:50:40:c5:8e:62:a4:f9:11:3d:ec:42:ef:05:43:c0:c4:
e1:d1:1e:33:40:a6:b9:ec:58:04:e7:af:83:3f:a8:b0:17:0d:
a4:e3:06:18:7a:2b:bc:2e:69:6b:3f:20:59:a3:e1:2b:57:bd:
30:09:89:36:e8:6a:4c:48:db:9b:83:66:15:d8:ea:26:16:44:
da:2f:ff:cd:e8:8e:d7:66:77:83:fa:76:2b:ba:39:cb:58:62:
1d:4a:3f:4e:17:82:e3:60:34:ad:77:c5:28:da:95:07:41:d6:
3a:c6:1b:ee:53:db:b3:67:36:f9:05:32:99:3a:fe:2e:2a:c9:
8d:5b:c1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:54:12 2025 by rpki-client