Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37342e302f32342d3234203d3e20323639353137.roa
File: 34352e3138382e37342e302f32342d3234203d3e20323639353137.roa (raw, json)
Hash identifier: mDtBElSH501cqPuLMa/JAR+QsYUM6zuTnRSIYFbjZqk=
Subject key identifier: 20:47:5C:3C:79:50:E9:66:19:83:E3:F9:2D:50:7B:C5:A2:FA:2B:8A
Certificate issuer: /CN=F3FB9757ABE985717A1ED2B2112ECDA2A257E007
Certificate serial: 4369CAB11AB561EF02BDCF51FE63E4EB1516700F
Authority key identifier: F3:FB:97:57:AB:E9:85:71:7A:1E:D2:B2:11:2E:CD:A2:A2:57:E0:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37342e302f32342d3234203d3e20323639353137.roa
Signing time: Sun 16 Feb 2025 13:29:21 +0000
ROA not before: Sun 16 Feb 2025 13:24:21 +0000
ROA not after: Sun 15 Feb 2026 13:29:21 +0000
asID: 269517
IP address blocks: 45.188.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.crl
rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 20:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:69:ca:b1:1a:b5:61:ef:02:bd:cf:51:fe:63:e4:eb:15:16:70:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3FB9757ABE985717A1ED2B2112ECDA2A257E007
Validity
Not Before: Feb 16 13:24:21 2025 GMT
Not After : Feb 15 13:29:21 2026 GMT
Subject: CN=20475C3C7950E9661983E3F92D507BC5A2FA2B8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:16:5e:f5:d1:d8:d1:52:84:48:6c:48:2d:6c:
e4:bb:b7:0f:20:b9:5b:cc:1d:d1:1a:48:e2:c8:50:
90:7f:40:7b:bc:9a:77:3a:cd:42:ca:6b:57:b1:8d:
53:94:c6:23:41:2b:8f:8f:ee:50:0b:87:bc:11:7f:
3f:79:32:67:cc:70:80:05:fa:a6:66:b7:46:77:89:
e7:28:40:67:88:79:d0:43:e4:c1:da:f9:a4:84:0d:
3a:ba:7c:ca:08:f5:77:17:53:f7:97:a9:db:cd:fc:
45:5d:8e:5c:e0:d8:0f:5a:6e:05:a7:58:73:2f:2c:
59:ae:74:a9:1f:06:71:84:c3:fd:d8:f6:5d:a3:78:
78:96:dc:98:9c:f9:f8:eb:e9:38:f1:cb:f8:49:74:
00:84:44:4c:c7:4c:5f:05:6b:6c:58:00:a4:74:ac:
3c:a1:04:53:9c:d0:fb:99:4b:ba:26:bf:8c:6b:9f:
98:02:e0:55:00:25:f1:23:62:0c:61:6b:58:9e:c3:
bc:9c:72:fd:43:bf:2f:5f:d0:36:7a:4d:11:ac:63:
55:71:6f:d2:21:b4:26:81:56:45:3b:a4:f9:91:ba:
50:5e:5c:de:41:97:61:af:5e:6c:22:6b:c9:ce:3f:
b3:a5:af:e9:1b:19:76:2e:86:c8:75:ab:83:34:17:
5e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:47:5C:3C:79:50:E9:66:19:83:E3:F9:2D:50:7B:C5:A2:FA:2B:8A
X509v3 Authority Key Identifier:
keyid:F3:FB:97:57:AB:E9:85:71:7A:1E:D2:B2:11:2E:CD:A2:A2:57:E0:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37342e302f32342d3234203d3e20323639353137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.188.74.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:43:e4:07:55:45:16:1c:84:ba:88:2f:b2:cb:e0:16:61:19:
72:c2:6d:6a:59:e5:87:45:16:fb:ba:91:1f:49:60:c0:3c:81:
73:a3:db:25:9e:4e:11:39:ce:1b:4d:c6:46:e9:82:98:b0:d1:
2d:ba:3b:c3:41:19:fd:b7:39:cc:2d:c9:66:7d:f4:25:2d:a2:
a2:08:66:9a:38:fc:20:37:92:ed:b4:46:ff:28:52:00:18:fa:
8d:64:17:03:87:7b:f9:0e:16:42:76:13:25:3b:40:6c:ac:f2:
64:6b:c7:85:c4:a0:a2:fc:06:0d:70:4e:5a:c1:c2:35:a2:bc:
82:c6:3f:f5:9a:b3:8e:3d:2a:85:2c:d5:e7:d4:4b:72:a3:e2:
4c:30:c8:a2:55:1d:87:4c:3f:17:6b:ed:c2:43:0a:cc:6d:01:
95:52:a8:21:19:44:79:18:a0:70:cb:52:ae:57:2e:61:59:7e:
e7:5e:cc:10:a8:ab:eb:c9:7c:d8:63:34:af:f0:2b:3d:5f:2f:
ff:9e:7c:ba:2b:ae:1a:21:dd:ca:ae:e4:03:4f:e2:0e:79:44:
6f:26:5e:1a:45:17:37:9b:6a:d4:e3:92:a2:31:90:6c:4a:7b:
7e:6d:97:36:81:4c:85:f8:71:bc:e7:cc:22:e5:51:af:43:5f:
39:0d:af:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:47:36 2025 by rpki-client