Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/323830343a366536343a3a2f33322d3430203d3e20323730353934.roa
File: 323830343a366536343a3a2f33322d3430203d3e20323730353934.roa (raw, json)
Hash identifier: FJzuXb3rPKEB9M/UrCEVvzbujD6MI9jHBtF6Dpipnxc=
Subject key identifier: 87:76:C6:DD:8B:F8:CB:E6:04:19:4C:CC:CD:D9:21:F9:F7:AC:AB:F9
Certificate issuer: /CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
Certificate serial: 202402324BAD7A1B352637E00A10910105A65F4B
Authority key identifier: 10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/323830343a366536343a3a2f33322d3430203d3e20323730353934.roa
Signing time: Wed 05 Mar 2025 20:59:46 +0000
ROA not before: Wed 05 Mar 2025 20:54:46 +0000
ROA not after: Wed 04 Mar 2026 20:59:46 +0000
asID: 270594
IP address blocks: 2804:6e64::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl
rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 13 Apr 2025 20:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:24:02:32:4b:ad:7a:1b:35:26:37:e0:0a:10:91:01:05:a6:5f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
Validity
Not Before: Mar 5 20:54:46 2025 GMT
Not After : Mar 4 20:59:46 2026 GMT
Subject: CN=8776C6DD8BF8CBE604194CCCCDD921F9F7ACABF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:c6:45:21:2b:26:59:c8:0d:cd:82:8a:68:
b6:d7:2d:c0:57:e7:be:ac:97:03:93:03:d2:28:15:
83:2c:cc:77:51:f7:76:94:66:2c:4a:2e:de:22:eb:
4a:39:0b:cc:36:0d:ba:af:95:e5:8e:08:13:9c:40:
ee:d7:94:2c:03:36:69:c4:a5:b8:49:dd:0d:38:d9:
99:61:b2:19:3b:47:c2:38:d9:12:4b:5f:15:ea:3b:
1a:df:24:22:2b:ef:b7:85:94:1f:0f:b4:5c:f9:6a:
ae:1a:64:50:92:38:81:9e:9d:a9:95:93:94:33:85:
b5:3c:0b:9a:23:ee:bb:43:07:7b:92:40:8c:d7:e6:
57:96:14:f4:8a:97:e4:22:17:14:b0:a8:37:dd:0e:
03:a3:99:60:33:46:5d:2a:fb:66:04:2b:28:f7:f5:
a7:f9:66:c8:e0:fa:14:ae:6f:0e:e6:c4:0c:75:0d:
82:36:9d:70:a7:3b:5c:d1:ae:d9:86:3d:0f:e0:73:
2e:0a:5c:ed:3b:46:a6:1b:10:a7:28:62:62:8c:d4:
57:e0:d1:e7:8b:f5:e6:57:ce:8a:a3:b9:d6:21:50:
e2:25:0f:e0:24:d8:d5:ac:bc:b8:21:74:1c:65:b1:
f9:b0:24:12:ee:fd:9f:33:22:2f:4a:e6:e1:ab:b0:
16:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:76:C6:DD:8B:F8:CB:E6:04:19:4C:CC:CD:D9:21:F9:F7:AC:AB:F9
X509v3 Authority Key Identifier:
keyid:10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/323830343a366536343a3a2f33322d3430203d3e20323730353934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6e64::/32
Signature Algorithm: sha256WithRSAEncryption
05:cd:29:06:4b:e7:9b:c8:5d:74:f7:95:aa:57:3c:c5:6f:e0:
0d:4d:02:d8:f7:32:d7:95:42:f7:00:d5:cb:85:0b:e6:f3:41:
0f:f6:b6:9e:ea:23:9e:14:c0:d4:3f:b1:37:70:33:91:38:81:
bb:7b:88:82:77:c8:f3:1a:7c:82:ce:b8:2e:88:ab:24:36:4f:
63:f3:2b:a1:2b:de:9c:12:80:83:d5:df:8a:9f:d7:a4:12:62:
eb:27:8c:3d:18:b7:7e:7a:52:83:cf:fe:0e:51:fb:36:38:5c:
87:fa:96:a8:d7:d8:d8:05:e1:12:bd:84:25:c3:aa:35:28:e0:
6b:fe:ce:18:b5:9d:0e:61:df:6c:cb:00:20:f6:64:8b:36:49:
16:f7:2a:8d:ea:33:b9:12:5d:94:ce:e2:67:2e:75:22:ec:5c:
e2:bd:08:31:10:34:9c:b1:c1:83:94:02:99:a5:40:e4:a9:36:
76:60:fd:81:09:5d:03:82:cd:83:86:79:ac:83:e2:49:ed:b0:
50:92:6e:06:89:c4:b7:97:2d:4d:8c:f3:6d:26:99:5e:a5:d0:
cb:8c:be:56:d6:ae:72:7c:ee:12:e9:19:83:1b:83:06:a1:49:
fc:75:d7:37:da:72:04:84:63:11:9d:36:90:8c:3f:55:c0:f5:
53:86:1a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:09:41 2025 by rpki-client