Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e302e302f32342d3234203d3e20323637353536.roa
File: 34352e37302e302e302f32342d3234203d3e20323637353536.roa (raw, json)
Hash identifier: mongA+Nb6i5ZiO7Ax0MWN9QN77G7PdGihofpnUa0Ahk=
Subject key identifier: F7:9D:2C:95:77:12:AC:DC:10:8D:21:0F:6B:CF:78:99:3E:7C:7E:98
Certificate issuer: /CN=2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E
Certificate serial: 345398E6CF94BB37A80A1F628DBAAF0C75E33D2A
Authority key identifier: 23:83:B3:AF:A3:5A:DB:2A:36:38:A9:F2:AE:0D:9C:27:AF:B5:C5:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e302e302f32342d3234203d3e20323637353536.roa
Signing time: Tue 01 Apr 2025 12:50:33 +0000
ROA not before: Tue 01 Apr 2025 12:45:33 +0000
ROA not after: Tue 31 Mar 2026 12:50:33 +0000
asID: 267556
IP address blocks: 45.70.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.crl
rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 02:14:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:53:98:e6:cf:94:bb:37:a8:0a:1f:62:8d:ba:af:0c:75:e3:3d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E
Validity
Not Before: Apr 1 12:45:33 2025 GMT
Not After : Mar 31 12:50:33 2026 GMT
Subject: CN=F79D2C957712ACDC108D210F6BCF78993E7C7E98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:1a:c0:fc:63:48:8e:c5:6f:ad:0a:59:2c:
ae:20:64:6a:2e:0a:e8:26:36:ab:ef:03:5d:20:8a:
b4:04:3a:cf:da:60:b2:c7:6b:3d:d6:87:da:eb:f6:
56:e6:fe:94:61:2f:c2:0c:81:53:60:e6:3e:7a:bc:
07:14:10:0d:71:b6:3e:b1:21:6d:a2:9e:1a:b2:6a:
06:e4:9c:31:e1:b7:1d:bf:8c:43:0d:9d:57:b6:d3:
fd:00:a8:4e:86:18:f9:5e:88:50:18:df:64:e3:ab:
e1:a8:31:a7:66:d4:af:55:59:3b:23:9d:74:6e:cf:
ca:e5:b7:a6:b8:32:09:d6:58:4e:65:4c:fa:46:eb:
76:7f:b4:ec:7b:50:0b:97:8b:89:52:7c:df:d8:5f:
ce:dc:4e:d4:74:be:79:94:51:f2:5c:01:98:17:ce:
b5:b7:8a:b6:3f:7d:09:e3:23:0a:c9:af:ed:bd:88:
6b:c3:0c:78:8a:6a:06:51:e4:53:c6:01:ad:a8:46:
0d:02:6e:27:18:2c:77:e3:3f:d5:39:12:0a:76:e5:
e0:b7:99:5f:1c:6c:67:b8:e9:13:b1:b3:a6:29:53:
84:5b:72:3a:54:56:c0:9a:3b:00:bc:c3:b0:50:03:
15:91:91:50:c0:c1:3a:e3:51:5d:5d:2c:93:0c:c7:
d1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9D:2C:95:77:12:AC:DC:10:8D:21:0F:6B:CF:78:99:3E:7C:7E:98
X509v3 Authority Key Identifier:
keyid:23:83:B3:AF:A3:5A:DB:2A:36:38:A9:F2:AE:0D:9C:27:AF:B5:C5:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e302e302f32342d3234203d3e20323637353536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:5f:7c:22:b5:56:e0:8b:56:85:63:7a:23:72:25:43:1b:5d:
04:21:7e:04:e8:0c:e3:6f:97:0a:95:cb:6d:6e:db:57:c6:02:
7d:bf:53:d3:a7:95:b9:c5:eb:b1:a5:af:d0:1f:cb:93:15:22:
b1:ec:fd:75:35:25:0c:44:2c:bd:15:94:c4:fb:59:cc:65:3c:
8f:8f:3c:d7:cd:45:ca:4d:fe:97:ec:3c:74:83:32:c5:58:d9:
54:e0:17:69:c1:14:9f:51:61:a9:7a:0e:69:9c:af:b9:2e:9e:
0e:69:70:8f:1b:d8:4d:a2:e3:dc:76:9e:d6:c3:61:8e:89:01:
bf:79:57:9e:6a:52:0f:0b:37:fb:3a:f3:42:e8:f8:3d:38:ff:
fa:1e:f6:a8:59:3b:1d:a6:fa:ab:46:48:b8:df:a4:6e:a3:2d:
8b:3e:4f:28:84:6f:10:67:ac:20:e0:fc:fd:e7:e6:27:be:8d:
d8:dc:05:f0:08:e4:b4:c5:97:bf:bc:f6:36:99:31:3e:1f:7f:
69:11:69:42:f9:86:a8:9f:f9:23:67:84:c5:f7:74:58:09:f3:
aa:38:0e:c5:48:f2:da:a2:1a:e0:48:73:d8:b3:5b:f9:13:0f:
23:b4:76:a4:6c:76:5a:9d:91:f8:49:2b:64:c0:c0:21:fc:b8:
c2:1a:fd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:44:04 2025 by rpki-client