Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/323830343a323266383a3a2f33322d3332203d3e20323634313335.roa
File: 323830343a323266383a3a2f33322d3332203d3e20323634313335.roa (raw, json)
Hash identifier: ICNvn7Q030Pp0QSqR2JknVO9D5ZXQpRVLDDOPXPj9hI=
Subject key identifier: 60:91:0F:89:CF:D8:F0:80:47:D5:AC:CB:D4:37:D3:53:E6:49:95:13
Certificate issuer: /CN=8810214D39049DAE584E4DE0958ABBECE36C9558
Certificate serial: 71FAA25328F401A50B98D51F7D5D8C03BEBB1283
Authority key identifier: 88:10:21:4D:39:04:9D:AE:58:4E:4D:E0:95:8A:BB:EC:E3:6C:95:58
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8810214D39049DAE584E4DE0958ABBECE36C9558.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/323830343a323266383a3a2f33322d3332203d3e20323634313335.roa
Signing time: Fri 21 Feb 2025 23:52:41 +0000
ROA not before: Fri 21 Feb 2025 23:47:41 +0000
ROA not after: Fri 20 Feb 2026 23:52:41 +0000
asID: 264135
IP address blocks: 2804:22f8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/8810214D39049DAE584E4DE0958ABBECE36C9558.crl
rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/8810214D39049DAE584E4DE0958ABBECE36C9558.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8810214D39049DAE584E4DE0958ABBECE36C9558.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 15:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:fa:a2:53:28:f4:01:a5:0b:98:d5:1f:7d:5d:8c:03:be:bb:12:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810214D39049DAE584E4DE0958ABBECE36C9558
Validity
Not Before: Feb 21 23:47:41 2025 GMT
Not After : Feb 20 23:52:41 2026 GMT
Subject: CN=60910F89CFD8F08047D5ACCBD437D353E6499513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:12:b8:ad:86:88:cc:60:4e:6c:bc:9e:1c:3e:
c2:04:d3:a9:96:52:bb:72:36:c7:9c:8f:6f:d4:c4:
90:21:ca:47:e3:b9:51:42:8b:97:c9:14:d9:50:d0:
de:c3:c3:34:aa:0b:67:86:16:ed:97:a0:3b:95:82:
5a:73:1d:62:97:dc:99:e6:62:c4:78:8e:77:12:ee:
ed:fc:58:c2:f1:e8:83:f4:46:fa:21:a6:cd:7d:63:
bc:ed:5a:23:77:b8:66:c1:14:4e:3b:21:50:40:a6:
9f:90:89:62:7d:01:a7:48:bc:99:4b:56:5e:14:47:
f4:55:03:99:e9:4b:ef:7b:f3:94:49:29:e2:24:41:
08:2b:5c:e9:fc:ab:b6:15:04:2e:64:40:d9:01:d8:
bd:1d:d9:53:b6:76:59:b4:34:ac:d6:54:80:cf:c3:
22:8d:41:34:6c:51:bc:46:21:9c:1a:de:c2:7b:59:
50:9a:c3:a9:b0:c0:d9:54:39:28:87:50:6d:91:66:
b1:37:e7:18:09:20:ff:ad:3d:97:c0:22:3c:42:2f:
46:0e:5b:5a:6b:73:a0:ef:a2:b8:4e:34:06:62:1f:
b1:02:39:9b:16:7c:06:e9:ee:8b:53:00:b9:e5:4b:
c8:f4:e8:ee:43:c9:7a:ec:df:28:28:0f:f9:5b:34:
61:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:91:0F:89:CF:D8:F0:80:47:D5:AC:CB:D4:37:D3:53:E6:49:95:13
X509v3 Authority Key Identifier:
keyid:88:10:21:4D:39:04:9D:AE:58:4E:4D:E0:95:8A:BB:EC:E3:6C:95:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/8810214D39049DAE584E4DE0958ABBECE36C9558.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8810214D39049DAE584E4DE0958ABBECE36C9558.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/323830343a323266383a3a2f33322d3332203d3e20323634313335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:22f8::/32
Signature Algorithm: sha256WithRSAEncryption
4a:90:51:e2:28:b7:35:8c:84:af:4f:00:be:26:1d:3a:87:b1:
1a:48:97:a5:50:10:d0:04:6d:57:f1:6d:c4:b3:d4:ef:f6:22:
7a:58:f1:28:3a:c9:a9:dd:85:92:09:45:0b:f0:a7:b1:be:1f:
3f:f9:b4:6e:d1:68:12:35:97:04:cd:21:3c:3f:c6:25:45:e9:
7e:cb:c8:86:3f:3a:53:10:1d:ca:87:31:23:b3:0a:2d:38:71:
f5:6a:d4:87:70:4b:a6:3d:a7:04:5f:3a:4e:d0:1b:00:7c:92:
71:cf:71:4e:4a:51:b2:60:56:c0:22:62:cd:7c:8a:56:c2:47:
60:4e:95:2a:1b:0a:cd:7a:3b:af:d3:2d:16:bd:06:3f:c3:cd:
8c:8f:56:7b:02:52:05:fd:1b:51:1c:a6:6c:d2:59:b3:93:3c:
88:f8:e4:29:97:39:fe:d6:ff:ff:ee:e8:95:f6:2b:32:93:86:
8c:47:30:ab:67:26:49:c2:4a:44:a6:c1:06:3d:47:3b:80:81:
60:e3:2f:0e:42:a0:32:8e:2a:b7:81:0e:48:22:ea:8a:05:f2:
2a:cd:f1:22:20:08:2f:ae:c3:a1:05:cf:b1:c2:45:34:ee:00:
db:85:46:c7:fd:bd:a7:96:c1:cc:1b:7b:ce:cf:d2:53:59:76:
30:2d:54:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 19:50:06 2025 by rpki-client