Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/323830343a363531343a3a2f33322d313238203d3e20323639343637.roa
File: 323830343a363531343a3a2f33322d313238203d3e20323639343637.roa (raw, json)
Hash identifier: nesYwlq+tPtmEyn0qFNn08s93URusWUJ4VYahxx4SFA=
Subject key identifier: E8:D1:1D:3A:3E:5C:7C:FC:24:56:20:B8:1F:08:08:59:5D:48:D2:43
Certificate issuer: /CN=D027A3C3905699BE1B01BC2FAF77686EEA66C20A
Certificate serial: 6E3BCEE3764860DED08CE827FD6CEAF711DF00A3
Authority key identifier: D0:27:A3:C3:90:56:99:BE:1B:01:BC:2F:AF:77:68:6E:EA:66:C2:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/323830343a363531343a3a2f33322d313238203d3e20323639343637.roa
Signing time: Tue 25 Mar 2025 14:27:11 +0000
ROA not before: Tue 25 Mar 2025 14:22:11 +0000
ROA not after: Tue 24 Mar 2026 14:27:11 +0000
asID: 269467
IP address blocks: 2804:6514::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.crl
rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 01:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:3b:ce:e3:76:48:60:de:d0:8c:e8:27:fd:6c:ea:f7:11:df:00:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D027A3C3905699BE1B01BC2FAF77686EEA66C20A
Validity
Not Before: Mar 25 14:22:11 2025 GMT
Not After : Mar 24 14:27:11 2026 GMT
Subject: CN=E8D11D3A3E5C7CFC245620B81F0808595D48D243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:bb:19:97:b7:58:e5:6a:61:0f:e6:ac:16:
99:46:3a:2b:d5:6c:d1:93:07:2a:d5:4c:90:bd:63:
b7:d3:97:8a:1f:57:4e:53:21:2e:bd:b8:fb:fa:d3:
ec:8d:73:ce:82:5c:67:73:c2:11:19:b5:08:8e:e1:
bc:cd:b7:9e:df:f3:8e:85:77:db:c7:5e:51:ce:b8:
ee:7a:ce:e6:6c:1b:de:62:af:58:46:a0:9f:62:1b:
62:f1:31:fd:3a:fb:08:f2:52:14:d5:6f:dc:be:5a:
c8:b6:e7:6f:ea:cf:0e:cb:cb:60:fd:09:bc:0f:b8:
bd:5a:5a:49:d0:78:e3:9d:a2:90:3c:fc:0d:f8:e0:
47:3c:f6:f3:29:e3:f8:d7:1d:de:e7:a8:38:fa:de:
8b:35:ea:94:45:5d:c6:e3:1d:29:4c:e8:5b:1b:91:
37:77:69:36:6c:d6:a3:c4:83:04:0b:8d:5e:10:98:
ea:a7:f7:d7:a8:4a:6d:9a:67:bf:ff:16:d4:e0:90:
5d:36:e7:34:a3:36:ed:32:1f:4d:8c:d2:88:5e:f8:
66:d7:3b:d0:c1:67:d2:f9:65:a9:b0:05:7b:d8:2e:
67:19:ba:d5:fc:27:d2:9f:0c:7e:e1:52:97:ea:ab:
3f:a4:ee:5e:32:37:2f:9c:ff:07:7c:20:63:e6:82:
a3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D1:1D:3A:3E:5C:7C:FC:24:56:20:B8:1F:08:08:59:5D:48:D2:43
X509v3 Authority Key Identifier:
keyid:D0:27:A3:C3:90:56:99:BE:1B:01:BC:2F:AF:77:68:6E:EA:66:C2:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/323830343a363531343a3a2f33322d313238203d3e20323639343637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6514::/32
Signature Algorithm: sha256WithRSAEncryption
50:e9:a4:b6:9e:a9:ac:17:67:d3:8f:2f:18:03:d5:72:b0:30:
53:11:c2:0e:63:18:9f:40:3d:35:a8:5b:71:e1:be:23:2e:32:
ec:f7:7d:1c:0f:0f:18:be:e4:68:9f:00:90:1f:f1:f6:fa:a3:
6c:23:29:55:dd:34:66:9a:d1:9a:9e:aa:89:6f:25:c4:b6:a3:
f7:26:7b:0e:3c:1b:b4:13:66:fb:f1:0c:8d:23:c5:0e:31:9a:
f1:f5:ea:ac:98:35:bd:97:53:39:f9:c8:78:2d:ec:d3:eb:bd:
1e:61:9d:de:83:fb:77:21:33:f1:52:91:48:f7:0a:d6:34:df:
22:3b:bd:d8:53:4a:29:9c:67:a0:06:7d:b9:b8:a4:26:5d:37:
fd:61:6a:06:a7:71:c9:ee:30:8d:d2:4d:05:b2:61:17:cf:2e:
b1:71:42:d2:c0:e0:f2:b1:26:50:e5:28:87:42:c6:1f:05:a9:
e4:52:94:b0:9f:85:85:b8:d5:18:f8:93:ed:99:4e:3d:7e:1a:
34:22:25:49:86:96:a4:2e:53:6b:3f:8c:38:98:c5:58:25:79:
5d:29:90:4e:07:e6:5c:d3:8a:2c:f0:77:da:a5:9d:ee:be:60:
ab:ed:87:d9:b3:7b:e1:8d:c1:70:f1:52:a6:be:74:2c:db:c5:
fc:e2:68:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:20:09 2025 by rpki-client