Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a343430303a3a2f33382d3338203d3e20323632323936.roa
File: 323830343a6138343a343430303a3a2f33382d3338203d3e20323632323936.roa (raw, json)
Hash identifier: Wf7iD8o73yE8DCC2f7o7ktr3grZpoSvEI01ZXtK3oFE=
Subject key identifier: 46:79:CD:A8:E0:19:FA:60:CE:70:98:BF:7E:AC:F3:85:59:AD:06:6A
Certificate issuer: /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial: 5E7C6344AF58A9C9059A8B3922CDF87732619B85
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a343430303a3a2f33382d3338203d3e20323632323936.roa
Signing time: Mon 31 Mar 2025 17:57:31 +0000
ROA not before: Mon 31 Mar 2025 17:52:31 +0000
ROA not after: Mon 30 Mar 2026 17:57:31 +0000
asID: 262296
IP address blocks: 2804:a84:4400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 13 Apr 2025 19:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:7c:63:44:af:58:a9:c9:05:9a:8b:39:22:cd:f8:77:32:61:9b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Validity
Not Before: Mar 31 17:52:31 2025 GMT
Not After : Mar 30 17:57:31 2026 GMT
Subject: CN=4679CDA8E019FA60CE7098BF7EACF38559AD066A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:aa:c2:21:d3:bf:10:b0:f1:e2:66:f6:d4:
66:b8:32:42:38:d2:6a:77:99:0c:98:ac:4c:e5:4c:
08:d8:43:18:5d:6e:0b:43:7a:20:e2:ec:8d:42:8c:
a4:f4:ad:90:15:f1:b3:97:cb:15:db:9c:d6:6f:b9:
d1:ca:5c:71:09:58:38:84:d8:b1:65:b4:a6:29:57:
2d:0d:db:fe:bf:94:6d:2d:26:47:d1:65:99:93:06:
4f:8b:c9:f7:bd:a8:da:db:a0:97:14:4b:22:c2:ff:
2b:24:bd:ac:c6:3d:78:a6:2e:4f:1d:93:0d:c7:e4:
60:a7:cb:4a:27:62:7b:77:39:6a:04:97:9b:37:64:
01:48:90:f4:74:de:57:fb:02:76:51:75:35:2d:2c:
82:63:26:e1:36:d3:65:7a:4e:2a:4f:ba:2e:61:3b:
2a:46:88:63:42:85:1d:b8:30:d7:fd:02:0f:d6:32:
74:72:0b:30:79:15:1d:c5:2e:77:e7:05:7a:01:72:
66:e0:9d:92:6d:23:0f:b4:7a:37:eb:38:50:28:88:
b2:fe:62:af:a7:45:45:8e:8c:6c:b6:d8:d1:04:9d:
05:b5:ee:81:ab:93:0c:03:8a:53:7a:47:dd:10:ea:
c3:84:93:30:74:18:62:d2:26:05:4a:13:53:79:28:
44:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:79:CD:A8:E0:19:FA:60:CE:70:98:BF:7E:AC:F3:85:59:AD:06:6A
X509v3 Authority Key Identifier:
keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a343430303a3a2f33382d3338203d3e20323632323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:a84:4400::/38
Signature Algorithm: sha256WithRSAEncryption
ad:d9:f5:64:41:8f:20:6e:5e:0c:4b:8b:7c:c9:8f:f7:86:99:
6e:0f:0e:ce:64:89:e2:5f:1f:85:cd:c5:ea:ab:49:19:a6:1b:
3f:6a:e7:a7:2f:0d:fa:10:b9:da:1f:1e:0c:cb:00:a1:84:35:
55:4c:f7:54:60:65:a0:3a:8d:be:c8:e2:4e:2f:30:d7:7a:98:
a9:bd:4f:df:53:e4:1b:fe:cf:27:fc:f7:38:47:17:fe:1e:d2:
e8:26:17:48:0f:71:f4:9c:98:a2:92:04:40:23:88:75:c8:c8:
10:72:2f:c5:72:b2:94:c1:14:aa:ed:13:5e:3c:73:b4:9d:af:
0c:ae:44:9f:e0:d5:fe:52:6d:93:4f:d3:55:1e:ce:67:97:a0:
8e:4f:2f:e1:7f:a6:a5:8c:53:6a:fc:3e:e1:36:58:3a:4d:63:
49:89:d7:bb:a3:23:54:c4:15:4b:84:ca:14:9d:10:bc:4a:ae:
3d:e4:fd:ad:26:e5:ea:e9:b3:21:5d:66:fe:a4:94:9a:0d:91:
ac:42:e2:0f:ae:26:26:e1:70:44:48:a1:8c:ab:78:12:a1:28:
24:7c:00:97:18:45:07:1c:4d:24:8f:d5:c2:7d:5b:90:2c:a7:
f0:53:01:8c:88:a6:9c:35:90:f2:96:9f:4f:6b:7f:5e:f7:e6:
dd:b6:43:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:37:44 2025 by rpki-client