Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/323830313a38613a3a2f33322d3333203d3e203533313837.roa
File: 323830313a38613a3a2f33322d3333203d3e203533313837.roa (raw, json)
Hash identifier: QR7pAMu28VJ+jYdhlrWpxW3rvdK11BHcFTjEev+Zt0A=
Subject key identifier: 9A:6C:73:D5:B7:7A:D3:53:92:E6:80:0D:D3:36:35:17:0B:34:AB:4D
Certificate issuer: /CN=F0ADD6FFCDFB09210157372271C0B492767D7001
Certificate serial: 29FBCD5B50AAA4433598A72C5F4A4B7358590827
Authority key identifier: F0:AD:D6:FF:CD:FB:09:21:01:57:37:22:71:C0:B4:92:76:7D:70:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0ADD6FFCDFB09210157372271C0B492767D7001.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/323830313a38613a3a2f33322d3333203d3e203533313837.roa
Signing time: Thu 06 Mar 2025 19:26:26 +0000
ROA not before: Thu 06 Mar 2025 19:21:26 +0000
ROA not after: Thu 05 Mar 2026 19:26:26 +0000
asID: 53187
IP address blocks: 2801:8a::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/F0ADD6FFCDFB09210157372271C0B492767D7001.crl
rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/F0ADD6FFCDFB09210157372271C0B492767D7001.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0ADD6FFCDFB09210157372271C0B492767D7001.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 17:32:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:fb:cd:5b:50:aa:a4:43:35:98:a7:2c:5f:4a:4b:73:58:59:08:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0ADD6FFCDFB09210157372271C0B492767D7001
Validity
Not Before: Mar 6 19:21:26 2025 GMT
Not After : Mar 5 19:26:26 2026 GMT
Subject: CN=9A6C73D5B77AD35392E6800DD33635170B34AB4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:91:1a:66:ff:5b:dd:5b:5f:67:66:44:09:7c:
1a:f0:90:13:6c:48:1f:ec:70:d7:9b:cd:65:58:cf:
05:38:19:b9:23:b1:41:e9:11:75:0f:5f:9c:b2:67:
4c:f8:aa:1e:f1:82:5f:29:7b:fd:35:5f:7f:fc:c4:
5d:f7:e9:13:8e:d9:34:5e:7d:62:e3:ba:b1:4e:5d:
41:e1:e2:f1:c0:38:ef:51:b3:c1:01:94:58:29:71:
e7:a8:78:df:08:75:10:de:fc:ae:2e:d2:04:58:a6:
e8:3c:57:7a:79:08:77:a3:80:b3:bb:f1:72:2f:f5:
06:9b:46:cc:91:42:5c:f1:26:ef:05:4a:ad:b9:4f:
2a:0d:b7:d9:70:a3:4e:24:2d:d4:4a:d8:00:1f:e6:
db:fb:79:5b:e3:15:f8:a6:e1:b1:7f:3c:33:14:88:
7f:d5:b3:c2:3d:68:af:2e:bc:1d:bf:c4:37:62:de:
8d:f8:2c:82:39:35:d6:a2:33:1e:e4:22:2d:ae:c0:
df:83:56:8d:76:50:b1:c0:9f:e0:33:c9:78:df:15:
b1:5d:02:95:7f:09:85:e0:07:af:71:ff:2c:51:d2:
ce:10:ef:a8:20:41:a6:f8:56:ab:d6:55:04:85:f7:
c6:41:21:7a:ab:28:04:ba:65:ac:20:5e:9d:80:aa:
7e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6C:73:D5:B7:7A:D3:53:92:E6:80:0D:D3:36:35:17:0B:34:AB:4D
X509v3 Authority Key Identifier:
keyid:F0:AD:D6:FF:CD:FB:09:21:01:57:37:22:71:C0:B4:92:76:7D:70:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/F0ADD6FFCDFB09210157372271C0B492767D7001.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0ADD6FFCDFB09210157372271C0B492767D7001.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/323830313a38613a3a2f33322d3333203d3e203533313837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:8a::/32
Signature Algorithm: sha256WithRSAEncryption
08:39:d1:b2:9c:3e:c3:f7:c3:f8:c5:0f:df:97:42:79:e3:73:
24:19:b6:4e:e0:28:94:e5:58:6b:7f:34:db:2e:f1:f9:7c:15:
de:12:cf:c9:9e:14:0d:36:6d:60:f0:ed:6f:b8:4b:68:22:ad:
47:e7:fa:1c:f6:4c:cb:4a:bb:d1:b6:1e:db:12:4d:0c:66:e7:
5a:10:67:41:27:b3:30:4f:8a:fc:11:a2:81:19:b1:49:31:84:
7f:f9:97:c9:bd:a7:02:d9:90:3e:5d:4c:f9:45:d3:6a:14:1c:
a6:1d:04:ed:93:a8:ad:4d:d9:f0:10:06:02:71:f7:d9:60:2f:
5a:60:d7:fd:ae:60:5f:ec:d8:1f:ad:20:66:bd:b8:dd:1c:1e:
e4:96:19:be:b0:c4:60:b3:17:2b:2e:01:3c:47:56:bf:9d:11:
63:7c:42:ef:00:f8:f3:c0:07:8b:6e:cb:98:d3:e8:81:59:0e:
58:ca:f1:52:c3:bd:76:c8:7e:ed:08:d6:41:8e:06:7b:02:c6:
10:5f:81:d4:f5:f1:db:05:84:77:2d:a2:d5:b6:ea:0e:63:ee:
16:73:ab:a8:10:df:ca:fc:48:1c:bb:43:12:ab:79:27:48:1f:
84:9c:37:66:8e:a2:b9:cb:41:b7:cb:26:fe:69:8f:19:aa:1f:
a4:d6:ac:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:45:22 2025 by rpki-client