Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/323830343a356365383a343030303a3a2f34302d3430203d3e20323638393338.roa
File: 323830343a356365383a343030303a3a2f34302d3430203d3e20323638393338.roa (raw, json)
Hash identifier: QZwgqbW2jrLRS6VieWbMj0oPQ8sFw6Moe8CvKsDOoMY=
Subject key identifier: C8:3B:39:1E:65:CA:22:72:C7:C9:7A:EA:0E:6A:9E:5B:F9:CB:77:9C
Certificate issuer: /CN=5BA440224058DF1562003D8FD1746F0E05A2C6F6
Certificate serial: 26E9D41D79A3138E0AFE75717A6755848CE32DC3
Authority key identifier: 5B:A4:40:22:40:58:DF:15:62:00:3D:8F:D1:74:6F:0E:05:A2:C6:F6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/323830343a356365383a343030303a3a2f34302d3430203d3e20323638393338.roa
Signing time: Thu 06 Mar 2025 02:11:59 +0000
ROA not before: Thu 06 Mar 2025 02:06:59 +0000
ROA not after: Thu 05 Mar 2026 02:11:59 +0000
asID: 268938
IP address blocks: 2804:5ce8:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.crl
rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 11 Apr 2025 14:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:e9:d4:1d:79:a3:13:8e:0a:fe:75:71:7a:67:55:84:8c:e3:2d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BA440224058DF1562003D8FD1746F0E05A2C6F6
Validity
Not Before: Mar 6 02:06:59 2025 GMT
Not After : Mar 5 02:11:59 2026 GMT
Subject: CN=C83B391E65CA2272C7C97AEA0E6A9E5BF9CB779C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:b4:ec:3c:45:4d:65:e8:56:2f:e9:48:7c:
04:0b:1b:b7:4c:e7:c7:38:fe:0c:39:a9:31:88:06:
85:50:74:3a:08:5e:a0:0f:e9:59:82:e4:40:ca:07:
6c:4e:c9:d5:19:79:39:09:d1:e1:6e:8b:3f:44:a3:
96:e3:c0:cf:74:e8:7d:af:18:29:41:cf:d6:be:09:
be:1c:b7:d9:2b:08:83:29:de:1a:6a:17:f0:3a:dd:
ae:1b:fe:0c:9e:9e:f1:de:34:63:23:a1:38:20:77:
b3:a1:d5:6e:58:5c:a1:44:08:ad:13:8b:b0:88:ef:
f4:cf:58:d9:29:14:91:83:e7:b6:e9:14:e9:66:77:
f1:ac:da:f9:d2:e8:e7:f4:2d:b6:a3:3d:c1:de:91:
fb:78:73:6b:3f:2f:cf:91:cb:4b:98:e8:ca:e7:48:
51:10:a6:d2:5b:9d:c1:94:6c:4b:5a:bf:85:56:be:
a3:2e:ef:fd:5b:d6:29:fe:05:da:4f:ac:8f:72:a4:
14:53:f1:b3:9c:1d:bc:82:e2:af:0f:13:18:e4:e6:
7c:e0:4b:40:d7:e7:34:cd:70:b0:b5:64:a2:be:96:
af:49:33:ed:05:4a:af:53:32:fa:e9:28:55:1f:bc:
41:e4:8a:14:9a:ba:54:6d:db:33:2a:d3:d0:84:2a:
85:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3B:39:1E:65:CA:22:72:C7:C9:7A:EA:0E:6A:9E:5B:F9:CB:77:9C
X509v3 Authority Key Identifier:
keyid:5B:A4:40:22:40:58:DF:15:62:00:3D:8F:D1:74:6F:0E:05:A2:C6:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/323830343a356365383a343030303a3a2f34302d3430203d3e20323638393338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5ce8:4000::/40
Signature Algorithm: sha256WithRSAEncryption
50:41:7b:60:4a:ec:61:15:b8:5b:61:d7:2f:50:e7:21:5f:1c:
9e:f5:db:1d:d4:90:74:a8:ad:88:c2:6d:f5:f5:db:cf:35:e1:
ed:63:b9:c7:85:4d:e3:00:ac:c0:9b:03:5c:cf:ee:ab:3c:89:
9e:9f:99:f7:5d:c6:ea:77:a2:17:c8:8f:3a:22:db:ea:5b:8c:
05:a2:89:19:54:d9:7f:e2:b6:7d:38:46:d5:d6:4f:93:77:ec:
a0:a5:f2:54:f6:e2:c7:e6:96:ad:01:0e:cc:8b:6e:c3:0a:ee:
15:2f:17:02:46:a6:26:4c:ef:f6:44:b8:42:35:44:10:4e:17:
53:5f:a0:c6:38:11:65:c4:7d:03:47:4b:d5:9b:e0:71:d1:95:
c1:3e:30:c2:34:f3:37:cf:1f:e6:43:01:31:71:3d:03:f4:fb:
10:49:39:19:18:d9:a8:b4:b0:c9:11:3c:36:7c:2b:f3:5a:c2:
17:a8:c2:b5:7f:c6:61:31:27:c7:25:67:c0:72:5d:6e:92:3a:
ec:31:46:6a:2d:55:15:f6:3b:9e:8a:07:1e:70:23:72:dc:f4:
df:36:4f:62:75:20:d1:73:e3:83:c3:6d:56:3a:7d:04:47:30:
23:e9:ad:9c:cc:53:80:a1:7d:ea:ae:66:a8:fe:ec:9b:91:3a:
68:e7:90:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:22:46 2025 by rpki-client