Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/323830343a313935633a3a2f33332d3333203d3e203631373930.roa
File: 323830343a313935633a3a2f33332d3333203d3e203631373930.roa (raw, json)
Hash identifier: zxoVB0/V+w47xzbIkuWqO0MNlAIMgniNQQdYXcRA3gs=
Subject key identifier: C4:BB:0D:9F:09:B4:EB:50:F1:86:1D:54:B0:1D:CE:89:83:A5:AC:B9
Certificate issuer: /CN=D45EE207E811FF7831A3054740F4FC376DE9C473
Certificate serial: 7B5F1482FE2277B9E5C5A27B817395D39720B4E5
Authority key identifier: D4:5E:E2:07:E8:11:FF:78:31:A3:05:47:40:F4:FC:37:6D:E9:C4:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/323830343a313935633a3a2f33332d3333203d3e203631373930.roa
Signing time: Wed 18 Dec 2024 23:19:55 +0000
ROA not before: Wed 18 Dec 2024 23:14:55 +0000
ROA not after: Wed 17 Dec 2025 23:19:55 +0000
asID: 61790
IP address blocks: 2804:195c::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.crl
rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 12 Apr 2025 07:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:5f:14:82:fe:22:77:b9:e5:c5:a2:7b:81:73:95:d3:97:20:b4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D45EE207E811FF7831A3054740F4FC376DE9C473
Validity
Not Before: Dec 18 23:14:55 2024 GMT
Not After : Dec 17 23:19:55 2025 GMT
Subject: CN=C4BB0D9F09B4EB50F1861D54B01DCE8983A5ACB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:15:01:10:89:b4:a2:85:c9:f6:5b:07:d7:
d7:9b:75:fb:2a:c4:1f:1e:df:04:f9:2f:91:5a:37:
b0:ff:7a:66:f5:f5:43:1a:bb:8e:c7:72:87:96:28:
22:26:f4:84:19:be:fd:b6:5d:43:cc:aa:1b:3f:a7:
6e:73:21:e4:61:3b:56:d8:d1:97:ad:05:cd:db:c5:
12:e3:43:f9:ed:b1:06:ff:d5:a8:af:e7:fb:e0:3e:
ba:06:46:59:4b:76:ef:9c:18:32:9a:13:e7:d5:68:
45:44:47:1f:f0:8e:f8:62:94:f4:28:e1:86:0c:f8:
7d:5f:29:34:7b:ab:19:87:c0:9f:be:3c:53:75:a0:
5f:cd:82:fb:e4:2b:3e:24:2b:ee:b4:47:1b:ce:ac:
83:16:88:80:b1:2c:31:a0:f8:0e:bb:fa:33:88:34:
4c:ea:f0:4f:3e:eb:a2:43:2c:b3:9a:9c:c4:77:28:
75:08:f3:ac:2b:e9:b2:4d:30:01:2c:d0:dc:56:7c:
6e:cf:ac:8a:7a:24:26:75:50:68:d3:35:a8:d8:4e:
b2:ad:e5:4d:ef:2c:fb:79:3c:33:74:01:08:b7:f3:
4d:fa:91:d8:5d:9a:60:22:7d:8d:4e:5d:f8:11:ac:
87:df:bd:4e:18:92:51:a0:4b:e1:44:c6:b3:25:e3:
68:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BB:0D:9F:09:B4:EB:50:F1:86:1D:54:B0:1D:CE:89:83:A5:AC:B9
X509v3 Authority Key Identifier:
keyid:D4:5E:E2:07:E8:11:FF:78:31:A3:05:47:40:F4:FC:37:6D:E9:C4:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/323830343a313935633a3a2f33332d3333203d3e203631373930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:195c::/33
Signature Algorithm: sha256WithRSAEncryption
19:7f:53:0d:0f:f3:bd:ec:80:40:13:2b:ac:23:1a:60:13:a0:
e7:f3:99:6f:9d:dc:8d:ca:fa:61:b7:38:a0:6e:f7:06:f6:f6:
ca:be:70:ce:12:c0:81:b6:d9:c9:e2:4c:00:9a:91:47:c8:9c:
cc:f5:14:5a:24:1b:ae:b9:63:3f:5e:f8:09:48:91:0a:9f:82:
5d:f0:63:56:de:c4:e0:01:78:ef:33:1e:81:20:08:c8:b0:d5:
ef:ab:54:a8:d5:f1:17:03:8b:33:47:19:0d:82:88:14:3e:a2:
2a:d5:77:0e:87:51:3f:98:b7:86:eb:8b:72:44:d3:a0:93:8e:
5c:1d:ce:d6:04:b8:8c:6f:64:c6:5c:72:d1:3d:51:b9:f8:87:
7c:c9:58:a9:59:f3:2f:7d:96:d0:b0:2b:47:4c:68:48:af:f8:
2d:ff:b7:90:04:1d:e3:a2:86:56:e3:fc:a5:00:11:29:e9:47:
f7:b2:2c:d3:f5:37:ba:e6:fe:8d:85:4f:a8:d6:86:1e:38:9d:
44:7e:44:d4:c7:b4:25:90:ab:b2:f4:9b:e4:b7:43:8b:00:31:
d4:38:2c:cf:a5:65:28:ba:bd:c4:d8:85:c8:ec:6e:1b:4f:fa:
6b:6c:d1:b1:01:61:c3:10:a6:ef:a2:1c:2b:87:da:13:7d:e6:
dd:5f:33:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:47:20 2025 by rpki-client