Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa
File: 34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa (raw, json)
Hash identifier: qFvV0B2lXY+FGYZlDHnOaTXzZ8XXRgZcrBslLlOtyKM=
Subject key identifier: E1:D7:FC:27:62:92:F3:84:77:28:56:FB:00:16:6D:3C:43:55:DF:34
Certificate issuer: /CN=E06071166208659C852E797F8525D625D8FA07FC
Certificate serial: 718F084B7424A56346B7949C72F546EEA6AD8086
Authority key identifier: E0:60:71:16:62:08:65:9C:85:2E:79:7F:85:25:D6:25:D8:FA:07:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E06071166208659C852E797F8525D625D8FA07FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa
Signing time: Mon 07 Apr 2025 21:14:53 +0000
ROA not before: Mon 07 Apr 2025 21:09:53 +0000
ROA not after: Mon 06 Apr 2026 21:14:53 +0000
asID: 268746
IP address blocks: 45.171.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/E06071166208659C852E797F8525D625D8FA07FC.crl
rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/E06071166208659C852E797F8525D625D8FA07FC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E06071166208659C852E797F8525D625D8FA07FC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 24 Apr 2025 11:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:8f:08:4b:74:24:a5:63:46:b7:94:9c:72:f5:46:ee:a6:ad:80:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E06071166208659C852E797F8525D625D8FA07FC
Validity
Not Before: Apr 7 21:09:53 2025 GMT
Not After : Apr 6 21:14:53 2026 GMT
Subject: CN=E1D7FC276292F384772856FB00166D3C4355DF34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:1d:27:fc:e5:51:29:ca:25:ae:3a:ba:d3:
d6:10:c1:02:2a:ce:66:59:ba:4a:b1:fd:41:9b:61:
f5:ce:de:69:5b:5b:82:78:99:f2:71:09:80:92:a3:
1b:7a:24:10:04:bf:19:cc:08:e6:7e:02:d9:cf:4a:
e8:bf:a7:57:c1:07:6c:77:55:30:6a:bd:5a:9c:bb:
94:20:0d:ea:dd:16:d1:06:67:e2:ef:72:35:75:bc:
02:4b:69:0f:26:ad:7a:90:11:b1:85:ae:8b:06:42:
8f:de:f0:04:1b:ad:a7:54:a0:e7:9f:1f:70:56:ac:
22:eb:90:3a:09:e9:dd:4d:c1:02:eb:a6:e8:0f:72:
e0:39:63:a2:19:80:99:59:45:10:cb:f6:d6:b6:77:
70:85:f4:b3:b1:f1:a9:15:e3:cc:f5:a6:c9:0f:06:
b1:f6:3b:45:80:af:49:53:ff:e8:2d:58:cb:83:1b:
60:c3:15:4b:07:61:09:90:6e:eb:d5:d8:23:5e:81:
52:a0:71:84:83:49:c9:23:99:5e:a6:38:a1:1b:21:
6e:e1:52:43:7f:37:28:49:89:61:63:b1:99:b2:50:
0d:63:b7:84:70:05:40:06:bf:39:1a:7c:cc:e6:94:
2b:aa:41:15:4a:eb:40:65:62:52:04:fb:bc:d0:23:
58:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D7:FC:27:62:92:F3:84:77:28:56:FB:00:16:6D:3C:43:55:DF:34
X509v3 Authority Key Identifier:
keyid:E0:60:71:16:62:08:65:9C:85:2E:79:7F:85:25:D6:25:D8:FA:07:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/E06071166208659C852E797F8525D625D8FA07FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E06071166208659C852E797F8525D625D8FA07FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.231.0/24
Signature Algorithm: sha256WithRSAEncryption
57:fe:e3:28:97:68:6f:39:e6:dc:41:bd:42:07:14:5e:f0:3a:
26:f0:dc:55:c0:98:aa:8f:50:52:53:f5:2a:31:2c:b4:87:ac:
5b:ce:ca:c4:65:a5:b2:43:bb:22:e2:ee:3c:b8:e6:0c:9e:50:
7c:23:30:11:15:87:3b:cd:3d:cf:01:5d:04:10:b1:a6:9d:f6:
f9:cf:a7:e0:5f:13:2b:9e:75:3a:0b:e5:b5:1f:2f:7a:bb:93:
ca:c0:45:72:5d:65:44:19:85:50:80:0f:6a:92:8e:37:8e:6a:
fb:e0:93:7f:5f:8c:bb:84:63:95:7e:35:f2:a9:2e:e8:a3:cc:
ff:ab:ab:35:2f:e3:ae:31:e6:30:58:e0:d6:ed:eb:9e:c7:3f:
36:fe:52:8d:9c:52:b2:17:23:d6:67:c2:fd:8d:15:c2:b2:de:
7e:46:98:a8:c5:cb:55:c3:5f:4d:dd:2a:85:e2:d1:76:ad:35:
c9:67:cb:ad:f1:e4:00:09:d5:a9:81:08:5f:fa:dd:2f:95:a8:
38:42:9d:ad:9d:78:86:e2:c7:1d:f6:98:f8:4f:26:10:9c:1a:
b9:86:da:9b:98:7e:5d:bc:51:d3:80:29:f1:a6:53:73:c1:29:
a2:9c:33:1f:1a:4a:d9:7d:bc:10:70:41:db:d5:ae:5f:f6:61:
53:cf:ab:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 17:56:03 2025 by rpki-client