Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33362d3336203d3e20323633303539.roa
File: 323830343a3933343a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier: IdGvaUUhyxV3jDAzEOBZm/GsEqNwcrNLu3gOdHLmxN8=
Subject key identifier: 45:41:B0:F9:7C:52:73:CC:B2:8A:DD:6F:A3:B3:0B:82:DA:BA:AE:7A
Certificate issuer: /CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
Certificate serial: 3176378AFDA2E90CD0DD9397CCE19E0A9B6C4BFC
Authority key identifier: 62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33362d3336203d3e20323633303539.roa
Signing time: Thu 13 Feb 2025 20:50:12 +0000
ROA not before: Thu 13 Feb 2025 20:45:12 +0000
ROA not after: Thu 12 Feb 2026 20:50:12 +0000
asID: 263059
IP address blocks: 2804:934::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl
rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 08:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:76:37:8a:fd:a2:e9:0c:d0:dd:93:97:cc:e1:9e:0a:9b:6c:4b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
Validity
Not Before: Feb 13 20:45:12 2025 GMT
Not After : Feb 12 20:50:12 2026 GMT
Subject: CN=4541B0F97C5273CCB28ADD6FA3B30B82DABAAE7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ab:74:5d:7d:d0:4a:ec:e3:c1:58:11:40:1d:
05:0a:09:5c:f7:22:b6:0c:c5:52:59:e9:9f:0e:46:
fa:3b:ad:af:49:02:2f:53:fb:86:66:da:4c:21:78:
38:46:17:d7:34:29:93:4c:f5:c9:f1:a5:e6:dd:93:
f3:2d:6e:62:42:15:48:26:5a:8b:67:1f:96:d8:b9:
e4:dc:77:6e:fd:69:b9:f6:ea:e5:d4:22:e8:14:21:
75:0a:be:e0:75:04:10:10:b1:00:13:01:05:5d:66:
a2:1e:bd:bc:49:e0:2f:25:28:3c:fc:10:e1:e5:15:
19:67:6b:a5:4f:a1:0d:37:df:7c:e6:9b:15:7c:e6:
df:d2:17:c8:b6:cd:35:2c:e7:d1:0d:65:5d:8a:34:
52:c6:27:99:7a:34:d0:11:e2:88:42:b0:34:95:6c:
00:74:a6:91:98:76:9c:90:0e:a2:b3:18:ca:0c:cb:
bd:49:f2:6e:5d:a1:d9:5e:d6:83:11:4d:26:dc:6a:
a0:ff:56:79:91:e3:de:6c:e9:cd:cf:d8:c3:d3:84:
e9:e7:ec:ee:71:a8:a9:80:2d:9e:f6:1f:11:0f:27:
0f:6e:8b:22:70:3d:5c:05:6d:7a:85:c5:86:fb:e1:
e1:60:ff:ea:ce:46:37:a9:bc:54:83:c6:18:a1:8b:
90:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:41:B0:F9:7C:52:73:CC:B2:8A:DD:6F:A3:B3:0B:82:DA:BA:AE:7A
X509v3 Authority Key Identifier:
keyid:62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33362d3336203d3e20323633303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:934::/36
Signature Algorithm: sha256WithRSAEncryption
95:4a:09:c4:94:6a:83:2e:3c:a0:f8:6c:a0:d9:97:4c:fb:9b:
d8:0c:42:77:53:67:4a:a8:5d:7b:7b:f5:bb:9d:53:16:07:70:
6c:59:3d:86:0c:c4:bf:5a:38:61:ae:f3:32:e2:26:f6:6b:04:
cf:95:57:0c:a5:45:48:21:54:bf:89:bd:77:7b:71:81:98:f3:
b1:90:09:13:1d:88:35:9e:a4:3d:f1:6b:ae:17:ee:82:f7:3c:
8a:5e:bc:75:ee:d1:18:1c:8e:5b:00:86:f6:c2:47:5c:1d:ff:
88:28:97:10:51:5b:76:8b:73:4d:49:a2:3e:43:03:11:7d:81:
8e:20:9d:f0:8a:67:11:9a:e6:bb:71:ef:c2:1b:d0:6d:d5:bd:
38:bc:7d:43:e9:92:92:63:90:cb:74:1b:37:ec:df:df:6f:bd:
00:3e:2a:b4:aa:96:4b:6e:3b:e6:70:d8:c5:b3:e6:64:4a:52:
12:1a:3e:63:ab:85:6f:f0:0a:79:9d:92:25:f9:58:d6:80:2f:
03:63:a8:db:87:1e:ec:4f:97:2a:c0:8b:f1:e5:18:62:de:c6:
e3:a3:2b:1c:56:10:32:f5:f2:c7:ca:7b:95:4c:f3:9d:e1:87:
cd:69:d7:24:ea:72:37:66:7c:4e:28:85:02:97:75:c5:df:6b:
ac:00:f2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:03:49 2025 by rpki-client