Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a3a2f33322d313238203d3e20323638373836.roa
File: 323830343a356161343a3a2f33322d313238203d3e20323638373836.roa (raw, json)
Hash identifier: ohgOp0Lat0NGcrC0C3d9x5KySqv8+zkZCfQ7HWRJI24=
Subject key identifier: 24:97:7E:0F:73:3C:C2:18:0E:2D:89:87:77:2E:47:08:6B:7B:60:A7
Certificate issuer: /CN=0A8D927B2781E10E47E98BEE9B2077654F84695D
Certificate serial: 7C6EE3452B16B147E65C5C291508B26C7FB87887
Authority key identifier: 0A:8D:92:7B:27:81:E1:0E:47:E9:8B:EE:9B:20:77:65:4F:84:69:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a3a2f33322d313238203d3e20323638373836.roa
Signing time: Fri 28 Feb 2025 12:54:52 +0000
ROA not before: Fri 28 Feb 2025 12:49:52 +0000
ROA not after: Fri 27 Feb 2026 12:54:52 +0000
asID: 268786
IP address blocks: 2804:5aa4::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/0A8D927B2781E10E47E98BEE9B2077654F84695D.crl
rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/0A8D927B2781E10E47E98BEE9B2077654F84695D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:6e:e3:45:2b:16:b1:47:e6:5c:5c:29:15:08:b2:6c:7f:b8:78:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A8D927B2781E10E47E98BEE9B2077654F84695D
Validity
Not Before: Feb 28 12:49:52 2025 GMT
Not After : Feb 27 12:54:52 2026 GMT
Subject: CN=24977E0F733CC2180E2D8987772E47086B7B60A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9b:c5:3e:bd:52:14:9c:0f:a5:75:81:b4:9e:
00:b6:b5:9b:e6:ac:9c:7e:47:93:29:f4:f0:fc:07:
27:50:8e:e2:6e:0b:87:e3:94:3d:63:df:db:5f:2d:
5b:f5:4e:5a:0e:c3:a0:27:9d:94:a7:21:f2:da:1e:
1a:3a:e6:09:c0:0d:41:89:16:e5:f9:46:a9:84:70:
b6:29:62:4e:e2:a0:a8:9c:73:8b:93:50:dc:fb:38:
5d:fd:0c:b4:20:c1:45:12:90:bf:00:ac:75:60:7a:
41:f8:e9:5a:3f:94:97:4c:b2:d6:7d:1a:f2:12:7c:
66:27:e9:a6:df:a4:db:e6:0c:0e:32:34:03:de:ee:
ad:6c:dd:d8:a9:10:d0:22:bb:80:08:bc:92:a2:21:
04:3a:72:1c:e8:1d:00:2b:31:30:01:28:85:58:c7:
ea:f6:1d:64:d0:fb:1b:1e:c5:41:02:0c:22:6c:9a:
30:ae:35:a6:e2:26:4a:b7:1b:4b:52:5b:d6:a8:39:
0e:aa:23:b2:b4:70:d7:a0:67:02:d6:95:a7:9e:1b:
7f:11:0c:23:fc:83:eb:49:2d:c8:f3:b5:d6:69:be:
ed:ad:87:b2:c3:9e:07:83:22:b2:a3:09:b8:6c:f2:
aa:ab:9f:c5:df:72:c2:61:d2:3d:7f:ef:81:fd:6b:
8a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:97:7E:0F:73:3C:C2:18:0E:2D:89:87:77:2E:47:08:6B:7B:60:A7
X509v3 Authority Key Identifier:
keyid:0A:8D:92:7B:27:81:E1:0E:47:E9:8B:EE:9B:20:77:65:4F:84:69:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/0A8D927B2781E10E47E98BEE9B2077654F84695D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a3a2f33322d313238203d3e20323638373836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5aa4::/32
Signature Algorithm: sha256WithRSAEncryption
a1:b7:a9:55:28:61:b0:2c:00:93:88:3e:47:2a:b2:80:ca:c9:
fe:47:33:d4:66:ad:6d:e6:2f:97:07:b6:f8:fa:cb:da:5c:00:
ae:4c:33:bb:26:d8:ec:4e:53:1d:9d:70:b5:ce:a7:ac:3f:5b:
0c:30:b7:f0:a6:7b:d2:d1:2e:4d:b8:99:5c:44:1e:95:b9:31:
eb:a0:56:b4:75:b3:98:2a:38:95:72:8e:15:a7:13:7a:83:68:
2a:f4:98:01:4a:3d:e1:f6:d8:a3:db:44:b6:68:53:29:df:15:
a0:bd:10:2c:9e:c7:8f:61:d5:89:d4:e1:a7:0b:b1:33:69:95:
9c:86:21:34:bc:0f:e3:3c:db:11:33:a8:26:19:b5:8c:dc:66:
e9:56:4a:6f:03:3a:ea:26:8f:a3:53:aa:08:45:e3:2c:b3:10:
13:01:31:c9:f5:6d:44:99:bd:14:59:08:55:43:f2:e5:ee:0e:
7b:59:8c:90:e4:a5:76:19:1a:63:24:a4:07:8a:f9:dc:6b:a2:
89:28:69:75:ad:41:3e:92:ec:08:9c:02:02:be:1f:c4:a4:84:
d5:b8:4a:b8:42:50:c3:74:f4:34:9a:f4:f2:ad:b6:3c:0a:af:
10:08:34:79:24:f0:af:6c:2e:ec:a7:dd:97:ff:3b:c1:0b:98:
41:f7:23:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:33:28 2025 by rpki-client