Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a313030303a3a2f33372d3337203d3e20323730363330.roa
File: 323830343a366566383a313030303a3a2f33372d3337203d3e20323730363330.roa (raw, json)
Hash identifier: zZPcjbuAHvIh/b30vN7qYjIYBAEbs49mkUfsgRazmfk=
Subject key identifier: 18:1A:B3:BD:1C:D2:D1:5C:16:CF:08:69:E1:C3:41:F8:D2:AA:90:F9
Certificate issuer: /CN=F7FDF8A9EE071B0475D890E4E63DFDC5219615DB
Certificate serial: 0F06988B4EDDCF80FEA1AE096C54D5D8F55EE916
Authority key identifier: F7:FD:F8:A9:EE:07:1B:04:75:D8:90:E4:E6:3D:FD:C5:21:96:15:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a313030303a3a2f33372d3337203d3e20323730363330.roa
Signing time: Tue 25 Mar 2025 20:18:21 +0000
ROA not before: Tue 25 Mar 2025 20:13:21 +0000
ROA not after: Tue 24 Mar 2026 20:18:21 +0000
asID: 270630
IP address blocks: 2804:6ef8:1000::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.crl
rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 00:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:06:98:8b:4e:dd:cf:80:fe:a1:ae:09:6c:54:d5:d8:f5:5e:e9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F7FDF8A9EE071B0475D890E4E63DFDC5219615DB
Validity
Not Before: Mar 25 20:13:21 2025 GMT
Not After : Mar 24 20:18:21 2026 GMT
Subject: CN=181AB3BD1CD2D15C16CF0869E1C341F8D2AA90F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:98:22:b2:8c:98:f2:28:ae:2f:a5:4d:b3:1c:
eb:e4:03:48:f6:3b:3b:d3:a4:8e:45:0e:b3:21:d6:
de:e3:15:3e:f5:81:56:c8:bf:8c:be:f8:17:3c:08:
04:75:b0:dd:25:bb:01:bd:8b:07:86:c0:f0:fe:17:
fa:8d:f1:ab:02:1c:dd:79:65:88:ad:d1:61:b5:0f:
67:3a:f7:df:75:28:e5:f2:83:eb:74:2a:68:41:74:
51:45:b3:17:73:d3:49:79:61:90:cf:fe:50:fe:f1:
69:d6:d8:3a:99:3b:f6:04:85:d7:48:74:ae:58:b2:
78:22:8f:97:8b:f6:57:98:44:31:f0:51:94:5f:34:
1c:1f:4f:16:15:2b:d2:b0:56:ac:b1:1f:f0:c2:18:
ed:58:65:7a:8a:7d:a1:a4:07:c0:0f:69:6d:40:9f:
36:0e:d7:56:ab:bb:98:c6:f0:4a:06:0f:bb:94:50:
e8:4b:36:93:eb:e1:fc:e9:08:97:b6:47:06:fe:54:
e0:ed:3d:15:e5:a2:49:5b:d4:56:04:17:79:9a:d2:
60:af:4d:be:b2:38:56:43:67:61:04:60:84:01:1e:
ef:6d:0a:e5:6b:e2:8f:3d:a2:1d:ca:1e:b1:3c:93:
28:8e:c8:c0:4e:26:a0:4b:91:97:ff:08:0c:69:d3:
2d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1A:B3:BD:1C:D2:D1:5C:16:CF:08:69:E1:C3:41:F8:D2:AA:90:F9
X509v3 Authority Key Identifier:
keyid:F7:FD:F8:A9:EE:07:1B:04:75:D8:90:E4:E6:3D:FD:C5:21:96:15:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a313030303a3a2f33372d3337203d3e20323730363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6ef8:1000::/37
Signature Algorithm: sha256WithRSAEncryption
c1:8b:4d:4b:c9:b9:30:64:39:81:bb:bf:2b:a8:1d:a1:02:ee:
fb:6d:43:cc:82:23:3b:ea:1e:ce:fa:64:8c:2b:3e:c2:d7:da:
b3:ea:e3:96:39:4d:7f:ad:ee:0e:89:41:be:c2:c5:27:17:f2:
0c:76:da:d0:1f:fe:d5:d4:7b:05:2b:e2:0a:86:e5:91:d9:85:
97:e7:cf:2c:08:7f:ce:7a:62:1c:55:56:b5:25:bb:23:f8:1c:
2b:86:9b:ba:89:02:ed:86:bd:e4:b1:b2:d7:08:0b:8f:fa:3e:
88:73:e5:ea:4d:9f:45:19:5f:73:7c:7e:fc:4a:52:62:d1:e0:
5f:9e:37:18:c9:3a:d7:54:02:1d:e7:66:09:f1:1e:2b:f9:63:
5f:ba:45:f6:39:0a:52:32:71:6b:6f:e2:59:d5:28:70:b3:de:
ec:d7:09:a2:cd:14:c3:1c:5c:67:22:7d:93:2e:e2:9b:9d:ed:
53:8e:ff:7d:58:69:42:a9:d1:0f:99:de:de:ff:ec:d7:ba:11:
c2:0d:70:a6:d7:fd:fa:8e:bf:3d:b5:c4:12:bc:d9:d7:58:84:
4b:3e:4f:d8:d9:79:0e:8a:0e:59:6b:7f:49:fe:8d:d0:6e:4e:
b4:a6:ea:0a:51:30:08:b2:f8:ed:82:dc:26:1e:ab:12:8f:38:
9d:74:4e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 13:21:19 2025 by rpki-client