Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/323830343a313164343a3a2f33322d3336203d3e20323633343432.roa
File: 323830343a313164343a3a2f33322d3336203d3e20323633343432.roa (raw, json)
Hash identifier: ZjHIppO8S58r4UufCCbUgVo3HLt+HFAGV3p8lcKLf5I=
Subject key identifier: FD:BF:7B:13:F2:9B:6D:CA:D9:90:D9:17:59:A5:D3:5D:C8:BB:41:CE
Certificate issuer: /CN=864BCB111FFBF71A179480C7DD77FCC664D8AB59
Certificate serial: 290F0776D63CC50D97CAB65C1E0C4813D83965D4
Authority key identifier: 86:4B:CB:11:1F:FB:F7:1A:17:94:80:C7:DD:77:FC:C6:64:D8:AB:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer
Subject info access: rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/323830343a313164343a3a2f33322d3336203d3e20323633343432.roa
Signing time: Thu 06 Feb 2025 11:13:08 +0000
ROA not before: Thu 06 Feb 2025 11:08:08 +0000
ROA not after: Thu 05 Feb 2026 11:13:08 +0000
asID: 263442
IP address blocks: 2804:11d4::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl
rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 11 Apr 2025 14:59:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:0f:07:76:d6:3c:c5:0d:97:ca:b6:5c:1e:0c:48:13:d8:39:65:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864BCB111FFBF71A179480C7DD77FCC664D8AB59
Validity
Not Before: Feb 6 11:08:08 2025 GMT
Not After : Feb 5 11:13:08 2026 GMT
Subject: CN=FDBF7B13F29B6DCAD990D91759A5D35DC8BB41CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:40:50:b7:64:ae:a0:61:99:83:0c:eb:9a:a3:
e5:7b:0c:fd:a7:8e:1d:0c:44:5b:c3:1e:50:36:26:
f7:f5:3c:f4:de:b9:de:d3:94:6e:13:d9:5d:62:4d:
da:21:0c:4a:9f:a2:64:bb:dd:13:32:77:2c:69:0a:
2e:ed:1b:90:27:cb:d5:3c:80:9a:54:b7:c7:cf:dc:
fb:fa:df:20:37:07:57:2a:3d:29:f4:60:a0:f8:ae:
42:bc:0b:94:8a:87:27:da:32:38:d2:11:57:3e:61:
3e:69:a5:c3:e6:56:4c:44:83:22:51:24:9c:ff:8e:
2e:37:f2:49:95:30:cb:ca:71:74:67:d2:b5:f1:f1:
56:f1:23:cb:cb:0d:47:eb:66:c4:ec:91:fe:4c:a8:
f5:a7:c7:30:60:fb:16:ed:66:ed:d9:30:6c:a4:6b:
ad:6e:dc:1a:c3:57:a8:8d:a4:7f:06:99:a3:11:79:
96:4f:23:62:76:e8:f3:88:be:b5:b7:c7:fa:d3:70:
36:d2:55:4c:c8:77:ee:91:6e:5f:69:78:eb:90:8d:
2a:61:cb:52:52:10:0c:9a:7e:96:84:b2:d7:ba:80:
64:8b:c6:98:fc:99:08:73:82:b4:43:9f:4f:2e:32:
3c:c2:5c:f1:cb:bf:57:62:fa:49:32:c0:a2:71:69:
63:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BF:7B:13:F2:9B:6D:CA:D9:90:D9:17:59:A5:D3:5D:C8:BB:41:CE
X509v3 Authority Key Identifier:
keyid:86:4B:CB:11:1F:FB:F7:1A:17:94:80:C7:DD:77:FC:C6:64:D8:AB:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/323830343a313164343a3a2f33322d3336203d3e20323633343432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:11d4::/32
Signature Algorithm: sha256WithRSAEncryption
89:9a:a7:7f:c9:39:4d:b3:65:d0:18:65:f0:a3:b7:49:ce:c1:
b2:04:cd:45:f3:f1:7c:58:b1:e0:6b:b6:3e:86:2b:75:7b:17:
57:8a:ba:82:95:21:15:7d:6f:6c:e1:6d:c4:1f:a4:75:8b:39:
cd:b3:34:bf:20:b4:77:35:b0:6d:c8:27:cd:b9:dd:26:04:df:
46:31:f4:f9:80:04:4b:11:57:e5:ba:8b:4d:df:14:f3:ce:8d:
d6:1b:78:05:82:fd:1a:e5:52:96:c9:a1:b6:e9:b1:fe:14:3b:
7a:d4:51:f2:c6:00:b2:0d:73:80:b3:9b:59:07:6d:06:1f:13:
79:81:31:59:ac:f0:d0:fd:11:b3:61:a1:04:5d:91:28:68:50:
46:6b:9a:be:c9:85:30:ea:84:13:bb:cb:e6:1d:3b:88:bc:0f:
93:78:e0:0f:94:84:e1:3a:ed:a2:94:1a:98:0b:a0:41:56:af:
a3:e8:a9:07:a7:10:75:06:00:6d:6d:2d:11:f6:3b:cf:5f:7f:
b9:45:56:ce:e4:da:82:9b:49:4d:f3:78:dc:c6:64:f1:c2:25:
f2:a4:55:ed:08:8f:53:77:d8:2a:6b:cc:c6:66:35:49:2e:ba:
38:5b:d7:b6:4b:6b:1a:7f:5e:16:57:c1:3b:2c:74:03:08:70:
ee:44:02:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:40:53 2025 by rpki-client