Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/34352e362e33362e302f32322d3234203d3e20323636313532.roa
File: 34352e362e33362e302f32322d3234203d3e20323636313532.roa (raw, json)
Hash identifier: dIx53gI1Y82svSyBdNoLfHIbghSd79cPPaliBmIs+uY=
Subject key identifier: 8E:D2:8E:04:4C:61:AF:36:09:8E:7D:EE:1D:B9:F3:51:55:15:41:67
Certificate issuer: /CN=0D1F0EF9B6879F5981F0279711EDA3C940B65CC9
Certificate serial: 61831773B5377406D6C9359E7459537722D5D6F2
Authority key identifier: 0D:1F:0E:F9:B6:87:9F:59:81:F0:27:97:11:ED:A3:C9:40:B6:5C:C9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/34352e362e33362e302f32322d3234203d3e20323636313532.roa
Signing time: Thu 03 Apr 2025 23:26:25 +0000
ROA not before: Thu 03 Apr 2025 23:21:25 +0000
ROA not after: Thu 02 Apr 2026 23:26:25 +0000
asID: 266152
IP address blocks: 45.6.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.crl
rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 11 Apr 2025 17:38:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:83:17:73:b5:37:74:06:d6:c9:35:9e:74:59:53:77:22:d5:d6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D1F0EF9B6879F5981F0279711EDA3C940B65CC9
Validity
Not Before: Apr 3 23:21:25 2025 GMT
Not After : Apr 2 23:26:25 2026 GMT
Subject: CN=8ED28E044C61AF36098E7DEE1DB9F35155154167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4a:c2:2f:08:11:fd:00:8f:17:a2:c6:58:0c:
5c:42:56:a7:c4:ab:12:d1:bf:65:7e:de:a1:ba:9c:
f4:d7:46:32:b3:78:11:8b:a3:dd:d1:6d:bc:14:8a:
95:9b:f5:32:04:64:d0:64:27:da:ed:3a:02:fb:6b:
13:83:bb:06:af:fb:85:4e:79:3a:91:77:f2:64:41:
1c:c4:96:50:d0:71:c9:6b:4c:0b:b6:88:4a:90:fb:
ff:92:76:58:39:42:f1:9d:29:1f:4d:3c:be:9a:55:
d8:68:30:54:2e:1c:40:3c:66:3a:38:a8:f9:9b:8c:
99:d2:8b:5f:a1:66:b3:3d:ab:ea:5f:b1:97:e6:26:
6a:4a:9b:f4:0d:82:7e:e3:bf:db:3e:5f:5f:fd:4a:
6b:1e:57:d6:54:fb:c7:8d:69:6b:f7:28:76:55:7e:
e6:c2:0a:7a:0f:40:41:40:de:f7:cf:83:83:f4:f5:
8a:52:8e:6e:ad:7b:28:05:46:62:bd:d1:43:77:ed:
e5:39:8f:b2:45:dd:64:15:25:c1:74:a8:01:ad:80:
f0:79:27:8e:cd:5b:14:7c:12:16:05:9e:e3:1f:ef:
c1:c6:0e:27:9e:d2:61:34:44:8a:c2:df:f3:ae:79:
5e:f7:02:90:e6:ba:af:f0:ac:37:76:8b:dc:9b:e1:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D2:8E:04:4C:61:AF:36:09:8E:7D:EE:1D:B9:F3:51:55:15:41:67
X509v3 Authority Key Identifier:
keyid:0D:1F:0E:F9:B6:87:9F:59:81:F0:27:97:11:ED:A3:C9:40:B6:5C:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/34352e362e33362e302f32322d3234203d3e20323636313532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.36.0/22
Signature Algorithm: sha256WithRSAEncryption
20:3b:e8:4f:e7:5a:1b:e0:2e:9e:66:98:51:7c:62:3f:e6:fc:
79:a6:cc:69:04:28:af:0f:5c:8a:70:29:cf:d7:a0:39:a9:ca:
8c:24:f3:f1:93:82:b5:df:34:14:66:a9:6f:62:91:70:2c:fe:
95:64:e0:4d:5a:3e:b4:57:7f:d8:c7:0f:18:b0:d6:a2:70:60:
0a:bb:e2:d0:b3:28:fb:39:ff:41:36:6b:b6:bc:a8:b1:cf:ad:
30:19:16:bc:ec:9b:57:c3:ea:ca:df:7c:e7:76:f9:af:28:63:
f0:ca:b7:52:a9:89:ba:b9:58:8c:69:61:65:ef:c5:f3:dc:ea:
0d:1c:0d:ea:ee:f3:22:50:66:a8:0c:e4:03:f3:ad:ae:c1:1b:
ba:c9:cc:82:76:45:0d:ce:35:44:93:53:02:23:88:06:f9:d4:
ba:cf:32:2a:2c:47:20:3f:4a:79:e3:46:5d:37:19:69:d2:a5:
b5:64:4f:15:93:f2:71:ac:ff:8a:91:90:06:ef:4b:be:f4:91:
ee:23:6d:b5:62:b3:6d:54:58:28:c1:df:06:32:13:23:c7:7c:
3f:9e:01:33:6b:b2:80:d5:27:92:83:7e:26:4f:57:a7:3f:cb:
99:20:29:da:1a:1c:f1:2c:6a:d8:2c:a5:f9:5e:6b:ef:8d:b4:
0c:6c:1d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:37:48 2025 by rpki-client