Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e34382e302f32322d3232203d3e20323638323035.roa
File: 34352e3233362e34382e302f32322d3232203d3e20323638323035.roa (raw, json)
Hash identifier: 7j1ml5cMBz2z1yRAnv8vStkDBBj0cFyUMmMjwGlXBEA=
Subject key identifier: 3B:2F:00:2A:6C:A7:69:92:E3:EF:61:63:77:F9:2F:F2:A0:C1:DF:61
Certificate issuer: /CN=06EA067E007B9311176981678F208CA96CEFDE1D
Certificate serial: 1D3C92B438D2F4B62EA6C157B80C297A545BF11D
Authority key identifier: 06:EA:06:7E:00:7B:93:11:17:69:81:67:8F:20:8C:A9:6C:EF:DE:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06EA067E007B9311176981678F208CA96CEFDE1D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e34382e302f32322d3232203d3e20323638323035.roa
Signing time: Mon 03 Feb 2025 03:12:21 +0000
ROA not before: Mon 03 Feb 2025 03:07:21 +0000
ROA not after: Mon 02 Feb 2026 03:12:21 +0000
asID: 268205
IP address blocks: 45.236.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/06EA067E007B9311176981678F208CA96CEFDE1D.crl
rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/06EA067E007B9311176981678F208CA96CEFDE1D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06EA067E007B9311176981678F208CA96CEFDE1D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 04:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:3c:92:b4:38:d2:f4:b6:2e:a6:c1:57:b8:0c:29:7a:54:5b:f1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06EA067E007B9311176981678F208CA96CEFDE1D
Validity
Not Before: Feb 3 03:07:21 2025 GMT
Not After : Feb 2 03:12:21 2026 GMT
Subject: CN=3B2F002A6CA76992E3EF616377F92FF2A0C1DF61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:82:d6:86:a1:85:ff:bc:f1:e1:fc:0f:ea:13:
e2:38:99:e7:b4:1d:d3:dc:3f:a5:30:a0:1c:70:1f:
76:07:e7:2f:11:26:01:78:4f:c9:ae:60:23:77:36:
e4:44:34:47:5a:29:49:c8:76:ff:a9:bd:10:30:0e:
9f:fe:cc:20:2a:6a:7c:27:a3:3d:57:99:99:0f:53:
f6:76:ad:b5:5a:99:51:20:f3:e0:31:f9:c2:c3:f4:
01:63:dc:1a:49:97:5c:fa:2b:45:b1:1f:77:25:b2:
a2:d5:a5:ee:fa:79:89:1e:48:2f:b7:54:f1:a3:8a:
09:09:bc:18:17:d2:d2:7b:f6:3f:0b:eb:b4:c3:6c:
dd:68:10:9e:aa:22:e4:59:6c:b7:c3:71:cd:1c:da:
93:45:e2:e8:be:20:f1:7f:1d:68:b5:25:63:9e:da:
28:06:07:32:0e:3d:d3:65:32:90:31:90:d0:8b:a7:
d4:95:7a:e8:c4:62:bd:63:92:93:5a:69:b0:83:cf:
11:76:29:ac:bb:3a:1b:21:3b:35:dd:e3:05:28:82:
d6:59:5d:e2:31:36:e3:85:f3:c4:c2:e6:06:81:43:
07:bf:ee:20:a1:94:2c:f7:a6:ba:b3:ef:59:b1:5f:
fc:0b:e5:8f:4b:ce:17:64:39:0c:79:12:75:a0:84:
b0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2F:00:2A:6C:A7:69:92:E3:EF:61:63:77:F9:2F:F2:A0:C1:DF:61
X509v3 Authority Key Identifier:
keyid:06:EA:06:7E:00:7B:93:11:17:69:81:67:8F:20:8C:A9:6C:EF:DE:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/06EA067E007B9311176981678F208CA96CEFDE1D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06EA067E007B9311176981678F208CA96CEFDE1D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e34382e302f32322d3232203d3e20323638323035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.48.0/22
Signature Algorithm: sha256WithRSAEncryption
04:98:1c:f6:11:5e:84:13:b4:34:36:83:13:6f:65:a9:d6:9f:
fa:f4:f5:d3:87:e8:f2:a2:37:1a:30:ba:bf:b0:60:bf:dd:fa:
09:14:64:5b:1d:59:27:71:07:87:a2:6f:7f:fa:fc:7d:28:e5:
3f:fa:3c:39:2b:88:80:2e:00:fc:0b:a8:c3:87:c0:51:47:69:
53:0b:41:d1:28:79:52:28:bf:1b:79:21:e8:d0:f8:31:52:c6:
f1:0e:eb:b4:a6:3d:31:0a:fd:65:db:4b:95:5b:07:c2:05:23:
21:02:62:b1:11:80:ef:98:9a:81:f4:4a:02:1d:8a:c2:90:b6:
e4:8b:ce:9d:4b:4d:ce:da:65:7f:4f:e3:f7:62:2c:5e:f0:53:
37:a8:42:57:4b:e8:9e:5e:76:73:35:89:52:a3:07:4b:1e:de:
bc:51:0e:9e:c4:db:28:43:1c:0d:17:a1:74:06:c1:46:9a:33:
7f:2a:38:7e:b6:6a:d6:e7:da:85:85:69:a4:83:bb:03:10:02:
c2:99:fa:11:a9:86:dd:aa:b1:9e:a7:59:80:5b:a0:df:04:10:
1f:33:8c:8f:4d:a9:50:a7:f8:c7:97:51:8c:58:f7:bc:e0:a4:
94:b9:1c:79:c3:83:02:2b:f9:08:b5:38:63:98:38:da:ed:64:
0b:68:53:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:58:24 2025 by rpki-client