Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a3a2f33352d3335203d3e20323730363330.roa
File: 323830343a366566383a3a2f33352d3335203d3e20323730363330.roa (raw, json)
Hash identifier: pGU7ufvwTAppqpXVeA6dHfklDhmaMD8fRa6aQhqMlwA=
Subject key identifier: 7B:A2:A8:0E:1B:3F:7A:06:19:8E:BA:94:4F:BB:C9:4F:C7:4E:D0:19
Certificate issuer: /CN=F7FDF8A9EE071B0475D890E4E63DFDC5219615DB
Certificate serial: 35DD1A0A18F8ADD21F4695EF708E8F94ECE8BDAB
Authority key identifier: F7:FD:F8:A9:EE:07:1B:04:75:D8:90:E4:E6:3D:FD:C5:21:96:15:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a3a2f33352d3335203d3e20323730363330.roa
Signing time: Tue 25 Mar 2025 20:18:23 +0000
ROA not before: Tue 25 Mar 2025 20:13:23 +0000
ROA not after: Tue 24 Mar 2026 20:18:23 +0000
asID: 270630
IP address blocks: 2804:6ef8::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.crl
rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 00:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:dd:1a:0a:18:f8:ad:d2:1f:46:95:ef:70:8e:8f:94:ec:e8:bd:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F7FDF8A9EE071B0475D890E4E63DFDC5219615DB
Validity
Not Before: Mar 25 20:13:23 2025 GMT
Not After : Mar 24 20:18:23 2026 GMT
Subject: CN=7BA2A80E1B3F7A06198EBA944FBBC94FC74ED019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8b:24:d2:be:5b:39:5f:51:59:36:84:b4:55:
c8:8d:25:be:ff:dd:c8:d7:30:56:9c:c4:d6:1d:fb:
ad:92:17:73:4e:49:d3:ae:8b:28:9b:8e:3c:5b:06:
8b:7b:d8:18:aa:a0:d8:1b:6f:27:bf:b3:c7:58:5e:
7e:a3:dd:27:da:be:2c:f9:4d:dd:1d:1b:16:b8:57:
45:a8:d2:07:ce:7f:c9:27:43:51:07:36:3a:73:d6:
1f:bc:b4:76:f1:e0:52:d8:d0:0c:96:9e:36:0f:77:
c3:f2:03:70:9b:eb:20:42:82:92:39:53:6b:f7:53:
a4:d6:8e:36:4e:01:79:3e:ce:49:8d:eb:82:ee:b1:
4a:11:2f:dc:91:27:85:aa:32:29:fd:58:48:1a:04:
3e:eb:ad:95:49:8d:09:04:bb:b6:dd:0d:79:5e:59:
f0:96:1c:02:88:1c:84:65:47:f9:72:ba:25:47:bd:
08:c8:fc:f3:a0:b8:0b:7e:6a:4d:8d:5f:5f:d6:5c:
32:24:a8:08:7d:91:7e:27:57:88:9a:4f:26:d4:6d:
df:7d:1f:ee:9f:89:f6:a6:c2:cf:d7:3c:df:26:e1:
9b:99:4a:53:ed:3c:39:c1:36:59:be:26:5d:1e:af:
e1:6c:f6:ea:3f:d2:43:e9:a2:71:e5:7d:2f:17:19:
ca:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A2:A8:0E:1B:3F:7A:06:19:8E:BA:94:4F:BB:C9:4F:C7:4E:D0:19
X509v3 Authority Key Identifier:
keyid:F7:FD:F8:A9:EE:07:1B:04:75:D8:90:E4:E6:3D:FD:C5:21:96:15:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a3a2f33352d3335203d3e20323730363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6ef8::/35
Signature Algorithm: sha256WithRSAEncryption
c4:e6:23:9e:e0:a9:e2:69:a2:75:6e:f4:d4:70:cf:45:7c:6a:
8f:c5:c3:2d:6b:9c:f1:19:63:96:31:3c:6b:c6:14:0b:6e:5f:
9e:73:0d:5c:02:6e:51:83:5a:1c:f1:5e:32:da:68:19:cb:a7:
a6:f8:2f:b0:39:09:fb:e6:9b:ce:05:43:2d:e4:aa:e9:44:24:
75:46:a4:e5:03:24:cd:dd:33:87:c4:ed:50:71:a6:1b:7c:53:
39:ab:95:c0:48:72:37:a5:a4:f9:9e:73:e1:f2:1b:d7:42:3b:
cc:22:4f:1c:0d:56:59:0d:cb:8e:cc:64:54:00:29:89:5b:a6:
3d:2f:5a:65:4f:29:42:af:f4:72:a1:1a:72:6e:95:f6:69:38:
48:af:76:e3:41:61:cf:7c:b4:d0:43:8b:89:de:43:04:ea:13:
c3:82:8a:ff:6e:2c:e3:33:9a:48:3c:44:67:f4:0c:fe:6f:3a:
20:bd:15:15:39:aa:57:b8:13:f5:df:be:9e:3d:98:f8:09:cd:
45:b5:54:10:b3:fe:2c:40:f7:b4:d0:5c:a9:05:97:b4:6a:0b:
95:24:53:37:bb:4b:a3:e2:78:38:aa:44:f2:ad:a4:19:18:62:
c1:10:6d:54:a4:cb:c9:c0:13:15:7c:b5:b4:8d:c7:30:03:ec:
17:4f:9d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:20:06 2025 by rpki-client