Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/323830343a373931633a3a2f33322d3334203d3e20323731323835.roa
File: 323830343a373931633a3a2f33322d3334203d3e20323731323835.roa (raw, json)
Hash identifier: hXTYPt1Yw1sMRL5Z3ykoks6g6LwcdgvcthhRMPh0s10=
Subject key identifier: 4D:AB:6D:FB:E0:61:03:3D:85:A7:57:D8:63:7F:17:A7:B2:84:74:E5
Certificate issuer: /CN=D477F47EB674BB270E21D1DF467090789AFE23F1
Certificate serial: 1F73C04B6C9B367D5E23BBF1702B636C5F33F1DA
Authority key identifier: D4:77:F4:7E:B6:74:BB:27:0E:21:D1:DF:46:70:90:78:9A:FE:23:F1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D477F47EB674BB270E21D1DF467090789AFE23F1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/323830343a373931633a3a2f33322d3334203d3e20323731323835.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 271285
IP address blocks: 2804:791c::/32 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.crl
rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D477F47EB674BB270E21D1DF467090789AFE23F1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 09 Apr 2025 19:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:73:c0:4b:6c:9b:36:7d:5e:23:bb:f1:70:2b:63:6c:5f:33:f1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D477F47EB674BB270E21D1DF467090789AFE23F1
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject: CN=3082010A0282010100BFD747B7C52149ED963F4A403B33250560FA7D1826D9600DD38BB8495B0A6AE4033F456F52A1ECB7278198BBB93E9A4DC80810E09105A9D27CBD25EE4031D81E6034AF0C13347901ADC4F06C2AF60A7DDEEBD3018DF3C692A5AB73A35B4E17C87FC5E75D35013A8A679D26CA1320F8FB1D265EAA6409E6D1D891FBB4A3457EB04EA52E0197FA827D56783D41C6C40AAEE43EB04286A8F72F2162CFC87BABD40D5157F1BD4DCBE1AE6A038DF021123B546CD8E0E6FD4AF9BD93E77C3E8A7F8F6EFAF916165B0C161D75C63B14A14D63DC2A6D8131CEB53C8F9C5F58BD0852AFB36E15D0D251CC2E7DCF0D83E6BFAF331F886BB1A46A56A7E2AFCE14E020F65E0D0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:47:b7:c5:21:49:ed:96:3f:4a:40:3b:33:
25:05:60:fa:7d:18:26:d9:60:0d:d3:8b:b8:49:5b:
0a:6a:e4:03:3f:45:6f:52:a1:ec:b7:27:81:98:bb:
b9:3e:9a:4d:c8:08:10:e0:91:05:a9:d2:7c:bd:25:
ee:40:31:d8:1e:60:34:af:0c:13:34:79:01:ad:c4:
f0:6c:2a:f6:0a:7d:de:eb:d3:01:8d:f3:c6:92:a5:
ab:73:a3:5b:4e:17:c8:7f:c5:e7:5d:35:01:3a:8a:
67:9d:26:ca:13:20:f8:fb:1d:26:5e:aa:64:09:e6:
d1:d8:91:fb:b4:a3:45:7e:b0:4e:a5:2e:01:97:fa:
82:7d:56:78:3d:41:c6:c4:0a:ae:e4:3e:b0:42:86:
a8:f7:2f:21:62:cf:c8:7b:ab:d4:0d:51:57:f1:bd:
4d:cb:e1:ae:6a:03:8d:f0:21:12:3b:54:6c:d8:e0:
e6:fd:4a:f9:bd:93:e7:7c:3e:8a:7f:8f:6e:fa:f9:
16:16:5b:0c:16:1d:75:c6:3b:14:a1:4d:63:dc:2a:
6d:81:31:ce:b5:3c:8f:9c:5f:58:bd:08:52:af:b3:
6e:15:d0:d2:51:cc:2e:7d:cf:0d:83:e6:bf:af:33:
1f:88:6b:b1:a4:6a:56:a7:e2:af:ce:14:e0:20:f6:
5e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AB:6D:FB:E0:61:03:3D:85:A7:57:D8:63:7F:17:A7:B2:84:74:E5
X509v3 Authority Key Identifier:
keyid:D4:77:F4:7E:B6:74:BB:27:0E:21:D1:DF:46:70:90:78:9A:FE:23:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D477F47EB674BB270E21D1DF467090789AFE23F1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/323830343a373931633a3a2f33322d3334203d3e20323731323835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:791c::/32
Signature Algorithm: sha256WithRSAEncryption
01:b4:c6:9b:aa:fb:4b:eb:86:b4:b7:67:91:4d:83:75:3d:31:
d1:02:8b:00:88:98:1d:01:5a:5c:99:c3:96:23:6b:28:55:03:
9b:da:0f:49:5f:a4:fc:91:ab:f6:ad:d0:fa:16:40:56:83:cd:
b0:df:5c:93:8f:5b:19:30:8c:f7:c3:0e:be:72:ce:6d:b9:b0:
31:9a:d7:cb:d8:ca:74:42:97:cf:ee:20:84:8a:3e:e6:12:da:
fd:2d:26:3a:c4:dd:6e:bd:88:ee:ce:52:e6:ad:f7:8f:89:73:
55:3d:a7:b1:f4:7d:43:f9:20:28:e1:9b:76:4f:ad:e3:a5:8d:
28:47:ac:c5:4e:d3:50:39:3f:e3:da:45:1e:a2:54:21:e4:a9:
3d:77:bf:bc:80:d4:51:dc:69:d2:b3:27:e8:ac:4b:1c:5f:8d:
28:6a:cb:39:e6:d3:44:c9:87:48:22:b4:d1:72:e1:57:39:bc:
0b:5c:94:0b:41:56:ff:2d:25:f7:d4:0c:b2:c1:9c:0e:30:a4:
b7:a7:97:a5:16:7d:df:50:97:22:c2:40:9a:d5:85:62:79:ac:
46:dc:05:cb:02:97:9e:38:01:5a:1c:5c:60:e7:18:0c:11:08:
94:ca:66:ec:94:87:39:89:d9:15:13:ae:94:68:85:c0:47:11:
46:70:bb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:16:03 2025 by rpki-client