Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/323830343a366261383a3a2f33322d3438203d3e20323730343135.roa
File: 323830343a366261383a3a2f33322d3438203d3e20323730343135.roa (raw, json)
Hash identifier: Gemcb4V5qPaojkbRamJOllDbJN0znPPuJTFFrmwzhmY=
Subject key identifier: B2:43:94:28:73:AD:A8:B0:E0:5E:25:FE:24:D5:B2:98:43:66:95:DB
Certificate issuer: /CN=CE69E090A3A3C45C3EE3F4A2A4068B58948DC994
Certificate serial: 396367A80F12609898C5DCB15E9244AEB3D4500B
Authority key identifier: CE:69:E0:90:A3:A3:C4:5C:3E:E3:F4:A2:A4:06:8B:58:94:8D:C9:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/323830343a366261383a3a2f33322d3438203d3e20323730343135.roa
Signing time: Fri 14 Mar 2025 17:16:18 +0000
ROA not before: Fri 14 Mar 2025 17:11:18 +0000
ROA not after: Fri 13 Mar 2026 17:16:18 +0000
asID: 270415
IP address blocks: 2804:6ba8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.crl
rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 17:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:63:67:a8:0f:12:60:98:98:c5:dc:b1:5e:92:44:ae:b3:d4:50:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE69E090A3A3C45C3EE3F4A2A4068B58948DC994
Validity
Not Before: Mar 14 17:11:18 2025 GMT
Not After : Mar 13 17:16:18 2026 GMT
Subject: CN=B243942873ADA8B0E05E25FE24D5B298436695DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4d:6e:92:cf:3a:db:0f:68:d6:36:ff:ca:d8:
f0:c8:1d:09:4c:fb:7d:e6:24:23:31:5b:b1:40:5e:
74:cc:19:d3:99:53:1a:54:1e:68:b4:9c:43:ab:d1:
99:00:99:16:48:02:8e:4d:41:cb:d2:7d:70:78:81:
dd:29:7f:dc:12:59:ae:a9:2e:b0:7d:df:03:b9:60:
9c:6b:eb:6d:fd:ac:4d:26:73:14:d8:0c:e8:c1:53:
2f:10:dd:1d:31:4a:13:07:4d:03:aa:90:55:94:cc:
13:ff:30:0b:ec:4c:b9:e9:90:fa:4d:f6:5e:77:ca:
de:f4:64:9b:50:0a:09:e7:9e:6a:75:c3:ce:88:58:
86:20:15:79:1c:d4:f4:02:b3:6f:72:fd:50:67:97:
f1:48:95:54:c6:a7:44:1d:cf:9c:8f:ea:09:e2:99:
4a:fa:61:0b:62:f1:59:49:05:79:11:f9:ca:a4:1a:
d3:d6:b5:86:92:f0:55:5b:75:99:f1:bd:b3:5b:1b:
73:9b:7e:4a:01:c3:49:68:0a:59:43:ef:a7:7e:bb:
4b:45:c2:15:bc:95:0c:f1:41:38:b1:83:00:ba:9f:
eb:4f:43:2a:23:8d:35:3e:26:dc:78:09:8c:d3:6c:
7d:eb:81:80:09:90:33:92:c8:7b:cc:2f:4f:4a:35:
41:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:43:94:28:73:AD:A8:B0:E0:5E:25:FE:24:D5:B2:98:43:66:95:DB
X509v3 Authority Key Identifier:
keyid:CE:69:E0:90:A3:A3:C4:5C:3E:E3:F4:A2:A4:06:8B:58:94:8D:C9:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/323830343a366261383a3a2f33322d3438203d3e20323730343135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6ba8::/32
Signature Algorithm: sha256WithRSAEncryption
93:10:9a:48:32:b4:56:c5:eb:e5:27:dd:fb:a8:82:b5:02:0e:
68:d8:f7:4b:45:af:1c:15:af:cd:f2:5d:b1:f5:fd:d3:e0:0c:
4b:f4:73:cf:62:b3:0e:27:33:e8:33:31:83:67:cd:ad:d1:b3:
ec:c3:1d:41:7d:5b:e8:f0:5a:b2:92:44:0b:91:73:8f:c2:38:
7b:fa:6f:f5:38:7e:c2:ce:72:c9:f6:28:e0:76:2c:58:f1:0a:
02:f0:6f:a7:96:13:75:ee:38:69:99:7b:2a:35:7a:4f:46:57:
b4:cf:36:ec:6f:c1:19:ef:04:c5:f7:10:32:4a:f7:d5:b6:4d:
32:4d:29:fb:0c:a0:22:22:33:8f:08:d0:7c:fa:b4:48:5a:28:
b2:a5:bf:d1:42:23:d0:c2:b0:f2:4d:ec:9f:75:66:c6:86:7d:
e5:21:60:09:5c:74:14:58:60:59:45:36:0b:ac:46:59:a0:d4:
e8:62:29:f5:7e:25:cb:68:23:91:00:ec:d3:1f:c7:ab:66:d7:
40:7d:3b:9b:c6:ec:41:e5:7b:a6:8f:83:3c:ec:09:f6:5e:57:
a3:84:88:0e:a3:0f:79:b2:c1:ab:db:d7:1b:08:50:7b:a8:8f:
64:10:cf:da:e4:e4:0e:59:88:a8:e8:dd:a0:88:6d:f8:d3:1c:
b2:f7:3c:02
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOWNnqA8SYJiYxdyxXpJErrPUUAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U2OUUwOTBBM0EzQzQ1QzNFRTNGNEEyQTQwNjhCNTg5
NDhEQzk5NDAeFw0yNTAzMTQxNzExMThaFw0yNjAzMTMxNzE2MThaMDMxMTAvBgNV
BAMTKEIyNDM5NDI4NzNBREE4QjBFMDVFMjVGRTI0RDVCMjk4NDM2Njk1REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATW6SzzrbD2jWNv/K2PDIHQlM
+33mJCMxW7FAXnTMGdOZUxpUHmi0nEOr0ZkAmRZIAo5NQcvSfXB4gd0pf9wSWa6p
LrB93wO5YJxr6239rE0mcxTYDOjBUy8Q3R0xShMHTQOqkFWUzBP/MAvsTLnpkPpN
9l53yt70ZJtQCgnnnmp1w86IWIYgFXkc1PQCs29y/VBnl/FIlVTGp0Qdz5yP6gni
mUr6YQti8VlJBXkR+cqkGtPWtYaS8FVbdZnxvbNbG3ObfkoBw0loCllD76d+u0tF
whW8lQzxQTixgwC6n+tPQyojjTU+Jtx4CYzTbH3rgYAJkDOSyHvML09KNUEpAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUskOUKHOtqLDgXiX+JNWymENmldswHwYDVR0j
BBgwFoAUzmngkKOjxFw+4/SipAaLWJSNyZQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1hoeWFDdXFHVjJHZHZYOGZZeUI2dTFDSFR2Um1NYTlnVmZuS0JVZXBp
S2ovMC9DRTY5RTA5MEEzQTNDNDVDM0VFM0Y0QTJBNDA2OEI1ODk0OERDOTk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNjlFMDkwQTNBM0M0NUMz
RUUzRjRBMkE0MDY4QjU4OTQ4REM5OTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNYaHlhQ3VxR1YyR2R2WDhmWXlCNnUxQ0hUdlJtTWE5Z1ZmbktCVWVwaUtqLzAv
MzIzODMwMzQzYTM2NjI2MTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzQzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARrqDANBgkqhkiG9w0BAQsFAAOCAQEAkxCaSDK0
VsXr5Sfd+6iCtQIOaNj3S0WvHBWvzfJdsfX90+AMS/Rzz2KzDicz6DMxg2fNrdGz
7MMdQX1b6PBaspJEC5Fzj8I4e/pv9Th+ws5yyfYo4HYsWPEKAvBvp5YTde44aZl7
KjV6T0ZXtM827G/BGe8ExfcQMkr31bZNMk0p+wygIiIzjwjQfPq0SFoosqW/0UIj
0MKw8k3sn3VmxoZ95SFgCVx0FFhgWUU2C6xGWaDU6GIp9X4ly2gjkQDs0x/Hq2bX
QH07m8bsQeV7po+DPOwJ9l5Xo4SIDqMPebLBq9vXGwhQe6iPZBDP2uTkDlmIqOjd
oIht+NMcsvc8Ag==
-----END CERTIFICATE-----
Generated at Thu Apr 17 04:18:23 2025 by rpki-client