Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39322e302f32322d3233203d3e20323639313735.roa
File: 34352e3138312e39322e302f32322d3233203d3e20323639313735.roa (raw, json)
Hash identifier: YA+Iqfn8QFK44tyUbEUrUV4h62S/sEFHLLiKDEU+slA=
Subject key identifier: 09:61:E3:4F:31:37:88:E9:22:A5:17:3B:84:09:8F:C9:90:24:E8:47
Certificate issuer: /CN=D402AAFBAE178D53D194E6E1C2D54048BE15B08E
Certificate serial: 648EA47A50502E5B7485978C5089AD7DEB0A258C
Authority key identifier: D4:02:AA:FB:AE:17:8D:53:D1:94:E6:E1:C2:D5:40:48:BE:15:B0:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D402AAFBAE178D53D194E6E1C2D54048BE15B08E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39322e302f32322d3233203d3e20323639313735.roa
Signing time: Wed 12 Jul 2023 16:00:00 +0000
ROA not before: Wed 12 Jul 2023 15:55:00 +0000
ROA not after: Wed 10 Jul 2024 16:00:00 +0000
asID: 269175
IP address blocks: 45.181.92.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/D402AAFBAE178D53D194E6E1C2D54048BE15B08E.crl
rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/D402AAFBAE178D53D194E6E1C2D54048BE15B08E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D402AAFBAE178D53D194E6E1C2D54048BE15B08E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 10 Jan 2024 05:20:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:8e:a4:7a:50:50:2e:5b:74:85:97:8c:50:89:ad:7d:eb:0a:25:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D402AAFBAE178D53D194E6E1C2D54048BE15B08E
Validity
Not Before: Jul 12 15:55:00 2023 GMT
Not After : Jul 10 16:00:00 2024 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:f4:67:41:a9:66:31:b6:54:01:52:2e:53:
68:3d:1b:dd:94:f6:aa:37:3e:cc:b2:21:61:01:34:
7e:17:97:3f:a3:84:69:95:aa:83:e0:c7:42:bd:ea:
a5:bd:65:0e:b9:18:8a:5c:a8:23:49:b6:c1:0b:41:
66:25:da:09:0d:f6:81:fb:64:59:f2:ea:5c:eb:38:
22:4f:34:93:2f:94:3c:70:53:44:6d:53:f2:5c:a6:
fb:ab:c1:78:af:fa:b6:c5:64:ad:d7:f5:87:34:43:
b9:b9:8d:85:d2:07:56:7b:29:a0:6b:c0:ba:76:26:
44:ee:76:82:d6:bf:24:ff:1c:66:01:ef:c6:5b:a1:
db:bc:a8:8a:7e:82:f6:73:4b:37:b3:81:ec:c6:a9:
e1:69:11:1d:a8:cd:e3:81:7a:be:6e:51:00:b0:2c:
49:2d:50:16:b6:61:be:5e:42:77:88:49:60:70:1b:
44:3d:a5:9f:8b:ff:80:5c:60:fb:87:a5:40:a3:de:
dd:77:fa:87:2d:1b:7a:a9:88:38:27:f8:94:e8:01:
fd:17:60:e9:a2:45:bb:a0:7a:3c:81:38:2a:5b:6d:
2d:84:c6:23:90:9b:09:40:1f:88:52:f1:de:b2:9e:
91:01:c1:06:94:b5:f1:18:95:94:69:7a:aa:1f:00:
98:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:61:E3:4F:31:37:88:E9:22:A5:17:3B:84:09:8F:C9:90:24:E8:47
X509v3 Authority Key Identifier:
keyid:D4:02:AA:FB:AE:17:8D:53:D1:94:E6:E1:C2:D5:40:48:BE:15:B0:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/D402AAFBAE178D53D194E6E1C2D54048BE15B08E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D402AAFBAE178D53D194E6E1C2D54048BE15B08E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39322e302f32322d3233203d3e20323639313735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.181.92.0/22
Signature Algorithm: sha256WithRSAEncryption
57:0e:d9:68:c7:b9:df:69:ac:25:81:59:f4:6b:3b:0b:19:6b:
17:20:c8:06:f5:06:09:af:b0:f3:02:17:14:05:ed:7c:39:50:
d9:dc:10:35:1b:cd:53:66:78:8e:64:8d:38:a8:29:b3:50:4f:
d0:a5:4b:f1:c0:49:0a:bd:74:9e:52:bd:d6:b7:88:4d:8b:43:
e5:3f:0c:65:e0:35:57:12:4d:38:8a:69:73:46:4f:3c:de:b1:
09:83:6c:64:be:70:a0:e6:d5:d1:f8:d5:1a:d8:fb:9b:18:01:
31:a8:8d:70:bd:49:8f:fb:d5:2b:06:10:84:64:7b:2d:13:c5:
36:0f:de:93:db:15:c7:de:04:b8:e9:98:7a:87:8b:b0:9b:3e:
b5:14:3a:ec:89:28:39:5a:a1:1c:ab:b1:00:f6:d9:f0:84:cb:
b1:c4:e7:6b:40:ff:97:ee:27:d1:d1:a7:51:b4:c2:fd:68:c4:
80:b9:d7:d5:f9:cd:97:a6:76:70:f0:04:1e:91:d5:31:99:74:
85:96:b1:5f:eb:51:ec:00:f5:58:b3:ed:9f:3a:52:9e:bb:f2:
32:70:4e:f3:4c:ed:91:f3:78:1e:6f:cc:31:19:2b:39:e0:8f:
12:ed:68:de:41:ca:54:37:1f:72:ee:91:1b:06:fb:93:0d:a8:
79:50:c2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 07:51:19 2024 by rpki-client on console.sobornost.net