Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a3a2f33342d3334203d3e20323634393135.roa
File: 323830343a326664383a3a2f33342d3334203d3e20323634393135.roa (raw, json)
Hash identifier: UhRb+WtCkiO402i/r0HEKv+hsEGZNIZctAWJLtPdJIQ=
Subject key identifier: 7A:BE:8F:19:EF:5C:9A:23:90:7E:F4:17:14:E1:4A:AD:99:42:E4:FB
Certificate issuer: /CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
Certificate serial: 58FE0B50E685F90ABFC8EE7BF4E1BDBC971F88D6
Authority key identifier: DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a3a2f33342d3334203d3e20323634393135.roa
Signing time: Thu 13 Mar 2025 18:14:25 +0000
ROA not before: Thu 13 Mar 2025 18:09:25 +0000
ROA not after: Thu 12 Mar 2026 18:14:25 +0000
asID: 264915
IP address blocks: 2804:2fd8::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.crl
rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 14:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:fe:0b:50:e6:85:f9:0a:bf:c8:ee:7b:f4:e1:bd:bc:97:1f:88:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
Validity
Not Before: Mar 13 18:09:25 2025 GMT
Not After : Mar 12 18:14:25 2026 GMT
Subject: CN=7ABE8F19EF5C9A23907EF41714E14AAD9942E4FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:77:93:d7:16:b7:ad:21:12:ab:c9:d3:31:88:
bd:cb:07:e2:28:8a:11:d3:7c:1d:6d:d0:7f:92:04:
4e:ed:3f:3f:28:54:21:83:5b:83:18:05:f0:59:b1:
4f:f6:74:33:65:b6:fd:25:8b:5f:31:71:fe:b0:4e:
f4:08:f9:5b:26:97:58:80:5f:e4:4d:41:78:a7:10:
2c:c2:7f:f0:c4:a9:5d:9f:5d:59:6b:fd:fa:4d:14:
bd:54:d3:76:83:15:f1:bc:8a:33:b7:33:ca:74:39:
4d:5b:4a:4a:7a:7e:35:47:1e:92:b7:9f:ff:7a:42:
9b:a7:cc:21:92:86:1f:39:17:1d:f3:df:fd:b9:3d:
54:98:3b:f1:03:c6:96:c4:4b:df:07:cb:f8:eb:8d:
72:cc:4d:76:bb:40:f8:c3:3e:8d:13:13:21:a9:a7:
bb:9b:40:55:a7:87:87:55:a7:ca:59:c4:60:58:c4:
d9:71:6b:e4:c8:e9:28:61:43:3e:a1:14:b4:af:3b:
c8:68:0a:1f:78:0f:09:e9:6e:ea:b4:78:2f:c8:00:
92:c2:cb:b4:98:39:27:cc:2b:2a:aa:02:04:45:c2:
fb:5f:94:f5:c5:b2:a3:22:d0:d7:68:33:e9:65:ea:
fd:4d:7f:cd:c7:0f:00:d1:94:d3:43:b6:bb:c0:e0:
ea:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BE:8F:19:EF:5C:9A:23:90:7E:F4:17:14:E1:4A:AD:99:42:E4:FB
X509v3 Authority Key Identifier:
keyid:DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a3a2f33342d3334203d3e20323634393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2fd8::/34
Signature Algorithm: sha256WithRSAEncryption
b9:f1:c7:e8:51:5c:0b:96:c2:b0:89:3d:fe:95:97:5f:77:4c:
8e:c7:26:5e:3d:28:56:45:3a:81:5d:a0:93:9b:b4:05:79:75:
07:dd:1a:b8:7e:cb:e3:2c:48:ba:66:16:70:8d:cf:76:65:a7:
22:a3:c3:e3:8b:da:83:78:3b:8d:40:a4:48:dd:32:01:58:0f:
e2:c1:de:14:bf:5f:79:26:e9:50:28:0e:23:41:64:0e:76:05:
63:96:dd:9f:c2:c3:c6:3d:68:58:c5:14:9c:05:2e:56:87:10:
5e:b5:1b:22:0c:33:20:19:9f:27:13:1e:9b:5a:9c:9f:13:49:
0b:09:5a:46:64:52:d8:83:95:8b:21:ee:2b:fa:bf:ee:3d:4e:
dc:c6:f1:7e:99:e0:09:81:4f:96:3c:8a:49:cb:e2:56:c6:77:
61:62:db:c1:d1:50:9a:89:70:25:64:03:5c:30:af:75:a5:a1:
66:31:d6:4b:43:7d:83:6a:52:81:8b:9b:33:5a:30:d3:61:65:
bf:83:1b:d7:12:0b:37:c6:d4:e2:d9:a6:e5:d5:e5:e8:3b:bb:
68:bc:81:90:45:30:c5:b6:56:d0:05:5c:f7:5c:b7:d5:27:1b:
9e:ce:66:55:19:53:d9:76:fe:74:66:31:9b:54:fd:e0:57:38:
e0:92:19:c3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWP4LUOaF+Qq/yO579OG9vJcfiNYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMyOEM1QTJFQTFFNTY0OTVBQTk2NkZCMTk4NEM3RjMw
NjRGREExRDAeFw0yNTAzMTMxODA5MjVaFw0yNjAzMTIxODE0MjVaMDMxMTAvBgNV
BAMTKDdBQkU4RjE5RUY1QzlBMjM5MDdFRjQxNzE0RTE0QUFEOTk0MkU0RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEd5PXFretIRKrydMxiL3LB+Io
ihHTfB1t0H+SBE7tPz8oVCGDW4MYBfBZsU/2dDNltv0li18xcf6wTvQI+Vsml1iA
X+RNQXinECzCf/DEqV2fXVlr/fpNFL1U03aDFfG8ijO3M8p0OU1bSkp6fjVHHpK3
n/96QpunzCGShh85Fx3z3/25PVSYO/EDxpbES98Hy/jrjXLMTXa7QPjDPo0TEyGp
p7ubQFWnh4dVp8pZxGBYxNlxa+TI6ShhQz6hFLSvO8hoCh94Dwnpbuq0eC/IAJLC
y7SYOSfMKyqqAgRFwvtflPXFsqMi0NdoM+ll6v1Nf83HDwDRlNNDtrvA4OoPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUer6PGe9cmiOQfvQXFOFKrZlC5PswHwYDVR0j
BBgwFoAU3CjFouoeVklaqWb7GYTH8wZP2h0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUN6RVI2d0FnUnd2RVRNWmtvcmJxTHhNalhSeWNGTVlMbXBlR0t0Q0s3
a2MvMC9EQzI4QzVBMkVBMUU1NjQ5NUFBOTY2RkIxOTg0QzdGMzA2NEZEQTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDMjhDNUEyRUExRTU2NDk1
QUE5NjZGQjE5ODRDN0YzMDY0RkRBMUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVDekVSNndBZ1J3dkVUTVprb3JicUx4TWpYUnljRk1ZTG1wZUdLdENLN2tjLzAv
MzIzODMwMzQzYTMyNjY2NDM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM0
MzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAQv2AAwDQYJKoZIhvcNAQELBQADggEBALnxx+hR
XAuWwrCJPf6Vl193TI7HJl49KFZFOoFdoJObtAV5dQfdGrh+y+MsSLpmFnCNz3Zl
pyKjw+OL2oN4O41ApEjdMgFYD+LB3hS/X3km6VAoDiNBZA52BWOW3Z/Cw8Y9aFjF
FJwFLlaHEF61GyIMMyAZnycTHptanJ8TSQsJWkZkUtiDlYsh7iv6v+49TtzG8X6Z
4AmBT5Y8iknL4lbGd2Fi28HRUJqJcCVkA1wwr3WloWYx1ktDfYNqUoGLmzNaMNNh
Zb+DG9cSCzfG1OLZpuXV5eg7u2i8gZBFMMW2VtAFXPdct9UnG57OZlUZU9l2/nRm
MZtU/eBXOOCSGcM=
-----END CERTIFICATE-----
Generated at Sun Apr 13 23:33:42 2025 by rpki-client