Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/34352e3138382e3230302e302f32332d3233203d3e20323639353338.roa
File: 34352e3138382e3230302e302f32332d3233203d3e20323639353338.roa (raw, json)
Hash identifier: +AIRD2N+xThn1BRhh11TvWhV5Ye+Si+2eXiNNQIzSU4=
Subject key identifier: 3B:8D:07:4F:4D:97:72:72:ED:26:46:63:25:13:56:C5:5A:61:81:26
Certificate issuer: /CN=6E00496EB796F8397F171C543AFB886D5E9BB93E
Certificate serial: 5F32B8C132348360C509B59D3CB442E078056BF2
Authority key identifier: 6E:00:49:6E:B7:96:F8:39:7F:17:1C:54:3A:FB:88:6D:5E:9B:B9:3E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E00496EB796F8397F171C543AFB886D5E9BB93E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/34352e3138382e3230302e302f32332d3233203d3e20323639353338.roa
Signing time: Thu 21 Nov 2024 14:39:05 +0000
ROA not before: Thu 21 Nov 2024 14:34:05 +0000
ROA not after: Thu 20 Nov 2025 14:39:05 +0000
asID: 269538
IP address blocks: 45.188.200.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/6E00496EB796F8397F171C543AFB886D5E9BB93E.crl
rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/6E00496EB796F8397F171C543AFB886D5E9BB93E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E00496EB796F8397F171C543AFB886D5E9BB93E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 04:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:32:b8:c1:32:34:83:60:c5:09:b5:9d:3c:b4:42:e0:78:05:6b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E00496EB796F8397F171C543AFB886D5E9BB93E
Validity
Not Before: Nov 21 14:34:05 2024 GMT
Not After : Nov 20 14:39:05 2025 GMT
Subject: CN=3B8D074F4D977272ED264663251356C55A618126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:7a:09:80:12:b2:14:13:41:e1:fa:d2:d7:
c2:df:c4:a1:89:67:4c:57:c4:75:4b:9b:8f:5c:67:
4f:ef:81:a1:13:b1:24:6f:65:57:67:4d:e1:71:34:
7a:fd:8c:a8:70:66:b2:47:63:33:57:9f:c2:99:c2:
a3:44:71:fd:1b:0e:44:9d:af:60:7d:38:08:2b:67:
fc:2b:4b:bf:d6:9c:4f:5c:d6:e2:97:75:80:e5:74:
da:5d:4f:78:c7:a5:f2:09:0e:d2:91:ec:40:9c:19:
97:44:35:9b:a0:36:d1:75:00:af:bf:60:10:61:85:
5c:9f:5a:f4:23:e1:8f:61:1b:7c:fa:6a:dc:a9:0a:
0b:c6:81:af:3d:7e:c6:f0:3d:47:9e:60:60:7d:c7:
3e:25:6f:01:56:f8:e1:a6:1c:48:ee:4b:e7:4f:21:
d2:39:38:9a:5d:1d:0a:4e:03:7e:93:63:d0:5f:15:
2f:93:bd:e1:fc:15:47:29:4f:57:21:32:9f:77:3d:
b6:30:a5:5f:4d:b1:36:72:ae:84:8f:77:6b:b9:9f:
db:30:c2:ee:7d:7c:7b:69:c7:5e:cb:9d:bc:d1:29:
30:9e:4e:97:e5:d1:26:b9:ce:22:d5:77:32:db:80:
f8:0a:c4:b7:d3:0b:89:c0:bb:a5:ab:e2:bd:b6:2d:
e8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8D:07:4F:4D:97:72:72:ED:26:46:63:25:13:56:C5:5A:61:81:26
X509v3 Authority Key Identifier:
keyid:6E:00:49:6E:B7:96:F8:39:7F:17:1C:54:3A:FB:88:6D:5E:9B:B9:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/6E00496EB796F8397F171C543AFB886D5E9BB93E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E00496EB796F8397F171C543AFB886D5E9BB93E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/34352e3138382e3230302e302f32332d3233203d3e20323639353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.188.200.0/23
Signature Algorithm: sha256WithRSAEncryption
50:e0:69:0f:e3:11:5c:0b:f8:16:a4:a2:ca:38:b2:1f:1a:6a:
ed:e9:83:29:58:9d:ad:ee:b1:ba:93:f5:d2:fb:ed:98:9d:8c:
a5:a4:29:45:fc:9c:2c:7a:2c:4f:ad:e8:00:ef:82:65:b5:66:
bf:9d:e9:60:6a:69:b1:d0:28:f1:31:09:d9:0c:69:16:b7:02:
66:b5:ff:07:0c:df:22:5b:97:62:e4:d7:b2:55:e1:11:3f:04:
85:e0:a5:35:79:e1:2a:4d:cb:fe:e4:35:67:a3:c1:2b:34:34:
b6:e3:1b:31:50:aa:d5:9a:40:3a:5c:fd:01:b0:91:32:a5:12:
65:58:33:f6:d1:d2:e4:e3:3b:f7:3e:4d:96:72:ce:25:8c:c6:
42:d0:11:0a:5b:da:64:1c:30:df:f5:d5:ba:43:37:3c:25:94:
c3:5c:c5:28:4a:32:d0:79:85:3a:3b:be:b7:29:65:5d:8e:f2:
3d:ba:82:dd:ea:b9:23:6f:74:71:37:f5:df:e1:f2:c1:08:04:
77:f8:31:a8:59:2d:90:51:39:22:fd:4d:7c:fa:93:1a:bf:9d:
37:fe:2e:af:5a:75:0e:d7:fa:0a:e0:ba:fd:da:b9:29:3b:ba:
83:b5:e8:96:c1:ca:f2:94:45:1b:ad:55:17:b4:db:66:c9:7e:
fa:e2:49:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:11:24 2025 by rpki-client