Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/34352e3137392e3230382e302f32322d3234203d3e20323639313136.roa
File: 34352e3137392e3230382e302f32322d3234203d3e20323639313136.roa (raw, json)
Hash identifier: sWQ9X+QkollNxKo6GGv+Od7KkQw/OhQs5ELFi/V1kxs=
Subject key identifier: B8:3C:78:D1:51:85:AB:E3:12:ED:92:CB:27:DD:B5:89:A0:B6:37:68
Certificate issuer: /CN=2407042234E050BF2C96DAE987B75BCDB9E2BAC0
Certificate serial: 7ECDB5CC285806A387CB80623A3841964934EACA
Authority key identifier: 24:07:04:22:34:E0:50:BF:2C:96:DA:E9:87:B7:5B:CD:B9:E2:BA:C0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/34352e3137392e3230382e302f32322d3234203d3e20323639313136.roa
Signing time: Thu 06 Mar 2025 16:13:51 +0000
ROA not before: Thu 06 Mar 2025 16:08:51 +0000
ROA not after: Thu 05 Mar 2026 16:13:51 +0000
asID: 269116
IP address blocks: 45.179.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.crl
rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 04:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:cd:b5:cc:28:58:06:a3:87:cb:80:62:3a:38:41:96:49:34:ea:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2407042234E050BF2C96DAE987B75BCDB9E2BAC0
Validity
Not Before: Mar 6 16:08:51 2025 GMT
Not After : Mar 5 16:13:51 2026 GMT
Subject: CN=B83C78D15185ABE312ED92CB27DDB589A0B63768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ce:73:c6:fb:e0:b0:c1:e5:bc:64:81:83:05:
77:23:f6:6c:03:5a:5f:f5:f7:97:e6:27:26:c1:15:
19:e6:32:7f:ec:cb:9f:e5:0c:73:92:f5:ff:90:36:
11:03:de:ef:16:8b:1d:94:63:d6:a9:17:aa:11:ba:
8e:3f:a3:64:7e:cb:d2:19:03:63:d4:55:18:a7:28:
29:1a:1d:eb:87:aa:09:1e:19:fe:64:7e:ba:3c:94:
9c:f7:43:be:cc:45:8d:f9:2d:ab:2e:7d:01:b2:f3:
d8:97:7c:72:d8:e2:86:39:41:41:03:6c:93:7f:49:
fb:fe:39:a1:49:eb:e6:63:89:de:56:59:95:4f:d0:
e6:3f:df:8c:77:7f:20:3a:d6:2c:f9:34:82:39:ca:
3f:35:a0:ca:80:4c:d0:0b:d8:3f:30:1a:ab:d3:4f:
3b:6b:bc:46:7e:92:10:0e:96:84:e6:06:ef:b8:5c:
05:7b:a1:c9:ab:64:e2:ed:ab:24:92:bd:86:d9:a7:
30:69:b5:55:84:c9:0a:e9:b9:b5:96:be:c8:a4:be:
e4:5c:5e:54:1a:d8:2e:ea:cf:01:58:55:42:6e:bf:
b6:3e:10:f4:86:4b:c4:55:33:91:c0:ee:ff:5c:85:
e9:0d:d8:b2:c2:b0:72:7a:7f:6d:5b:ae:c3:34:f2:
38:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3C:78:D1:51:85:AB:E3:12:ED:92:CB:27:DD:B5:89:A0:B6:37:68
X509v3 Authority Key Identifier:
keyid:24:07:04:22:34:E0:50:BF:2C:96:DA:E9:87:B7:5B:CD:B9:E2:BA:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/34352e3137392e3230382e302f32322d3234203d3e20323639313136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.179.208.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:27:c8:f4:3e:8e:33:b2:a8:d1:9d:62:bf:dd:3c:c9:16:fb:
e6:5f:ac:10:49:82:56:eb:14:88:45:28:12:de:3f:8e:e5:d2:
cd:3a:db:8a:77:39:83:3d:0e:52:01:6b:bb:1b:49:78:f6:73:
4a:df:a0:a5:ec:01:13:47:2d:05:fa:bc:b3:39:97:99:13:42:
4e:6a:70:96:f0:66:5e:fb:48:19:7b:5e:e9:a4:84:14:b6:6a:
d1:b2:6a:74:11:f3:e1:40:6c:c2:44:fe:8f:a6:ed:29:c3:f9:
8d:40:7e:ab:e3:d6:8f:86:5c:bf:63:4d:14:ec:c8:eb:63:3d:
62:7f:38:43:f5:df:32:0d:d8:20:ec:35:f4:46:d1:30:3e:61:
bd:05:1b:c8:a8:8b:20:38:4b:ac:a1:62:f6:b0:4a:12:cd:4c:
6e:66:8f:83:35:68:20:9f:fb:e9:5a:78:85:e0:3e:e5:02:ce:
c7:94:8a:9e:41:05:ee:c2:8f:54:56:1b:6f:c2:83:8e:10:f4:
85:d6:0d:49:ed:93:44:65:01:86:68:af:a1:d4:d3:ab:38:bb:
c7:8c:9e:b7:b1:70:b8:c8:b2:8d:be:6b:fd:99:a0:3f:67:74:
ec:ac:bc:c8:b7:a5:84:71:95:b3:23:d9:13:c5:f1:c8:2b:c4:
2c:66:08:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 16:43:27 2025 by rpki-client