Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a383030303a3a2f33342d3334203d3e20323636303636.roa
File: 323830343a336130383a383030303a3a2f33342d3334203d3e20323636303636.roa (raw, json)
Hash identifier: 4aTxX8bFYVitZgA4DRnQBzv9GlS4yLuu8a6+VuSf3F8=
Subject key identifier: 55:4D:5E:37:F3:F1:E1:77:8D:1D:D6:B9:1C:C2:87:E7:14:F4:22:43
Certificate issuer: /CN=7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0
Certificate serial: 324614493EBD09830E8C809438D4D1903CC50715
Authority key identifier: 7F:2F:B0:D3:B7:92:75:71:94:8A:2C:39:EF:13:D9:F9:C3:C3:23:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a383030303a3a2f33342d3334203d3e20323636303636.roa
Signing time: Mon 03 Mar 2025 22:13:53 +0000
ROA not before: Mon 03 Mar 2025 22:08:53 +0000
ROA not after: Mon 02 Mar 2026 22:13:53 +0000
asID: 266066
IP address blocks: 2804:3a08:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.crl
rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 10 Apr 2025 06:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:46:14:49:3e:bd:09:83:0e:8c:80:94:38:d4:d1:90:3c:c5:07:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0
Validity
Not Before: Mar 3 22:08:53 2025 GMT
Not After : Mar 2 22:13:53 2026 GMT
Subject: CN=554D5E37F3F1E1778D1DD6B91CC287E714F42243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:af:86:1f:ee:f5:b9:a8:70:ba:1e:2b:3d:
35:e1:bc:4f:16:86:7b:99:f0:63:92:40:ff:0a:ac:
c2:8f:a1:2b:cb:bf:7f:7b:d5:eb:65:54:30:8a:29:
4b:3a:fb:33:19:68:6c:66:62:e4:56:fd:c7:e8:9a:
5b:84:57:9c:cb:d7:f2:d9:73:18:b4:0c:28:ee:32:
8d:c5:7d:d7:b0:a5:a4:9f:42:f2:68:64:e9:c2:c6:
ce:63:06:90:5d:4c:23:54:73:2c:fa:0d:da:9e:7b:
05:47:2f:cc:86:bd:b1:60:dd:40:89:bf:23:18:69:
ea:7d:79:f1:fa:53:15:2b:c9:88:12:c9:9d:6f:ca:
8e:4e:03:d8:f7:85:e5:41:43:c1:74:e8:f4:b1:d8:
21:af:53:3e:e1:3f:5a:5d:93:5d:a9:3a:ee:f1:6d:
4e:6d:eb:56:74:6f:fa:e9:4b:a0:67:03:5b:88:38:
64:49:d0:c2:1b:2f:2a:03:82:ba:36:d9:cf:ed:6d:
66:2d:05:bf:90:ab:ca:6c:24:b1:cf:b3:c5:19:95:
3b:66:61:bb:58:f1:e1:2c:3b:9e:e3:a8:4e:63:dd:
df:ee:0c:aa:04:df:89:b7:89:d6:7a:af:d1:4a:6b:
19:b0:7c:58:33:60:27:06:3b:27:27:93:a1:f9:aa:
f3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4D:5E:37:F3:F1:E1:77:8D:1D:D6:B9:1C:C2:87:E7:14:F4:22:43
X509v3 Authority Key Identifier:
keyid:7F:2F:B0:D3:B7:92:75:71:94:8A:2C:39:EF:13:D9:F9:C3:C3:23:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a383030303a3a2f33342d3334203d3e20323636303636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3a08:8000::/34
Signature Algorithm: sha256WithRSAEncryption
0a:0d:4f:fa:89:0a:12:d8:68:f1:2b:07:b7:1c:cc:25:60:d1:
5a:81:97:8b:88:00:d2:41:d5:9f:e4:e3:bf:2e:25:05:a4:7c:
6c:bf:48:c9:3b:77:3d:ba:64:f7:db:f4:0c:8f:2c:c5:e6:86:
6c:fc:13:1b:4c:50:b8:9c:eb:9c:04:03:f0:43:27:e6:8e:7c:
1c:97:d5:a1:19:f9:0f:16:bb:1a:82:83:25:6b:4a:bd:74:c0:
7d:37:11:e2:00:41:c5:a9:23:b1:72:77:a2:b7:96:68:18:6b:
da:22:bd:7b:fb:f8:e6:98:91:0d:79:4a:c2:18:72:0c:dc:b5:
d5:1b:c8:a8:54:a1:86:b8:61:04:aa:8e:77:5c:4e:54:64:b7:
8d:07:95:2a:02:cc:9a:61:27:50:0b:11:18:97:fe:9d:ed:72:
a7:d0:fb:de:1c:d6:b9:b3:76:a7:e2:be:07:5b:e1:71:7c:22:
4a:02:f4:3a:74:18:a6:a3:4a:56:bb:bb:84:c1:02:4a:c2:7b:
2f:81:e6:1a:83:5a:2a:49:13:15:08:08:02:0f:cc:dd:31:e2:
6c:5a:20:fc:d0:f9:70:0a:b2:5d:46:f2:99:a5:a2:00:5d:6b:
ef:67:c7:41:06:1e:65:aa:52:68:5a:ef:c3:7c:5c:50:87:8e:
b7:5a:28:36
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUMkYUST69CYMOjICUONTRkDzFBxUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YyRkIwRDNCNzkyNzU3MTk0OEEyQzM5RUYxM0Q5RjlD
M0MzMjNGMDAeFw0yNTAzMDMyMjA4NTNaFw0yNjAzMDIyMjEzNTNaMDMxMTAvBgNV
BAMTKDU1NEQ1RTM3RjNGMUUxNzc4RDFERDZCOTFDQzI4N0U3MTRGNDIyNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoy6+GH+71uahwuh4rPTXhvE8W
hnuZ8GOSQP8KrMKPoSvLv3971etlVDCKKUs6+zMZaGxmYuRW/cfomluEV5zL1/LZ
cxi0DCjuMo3FfdewpaSfQvJoZOnCxs5jBpBdTCNUcyz6DdqeewVHL8yGvbFg3UCJ
vyMYaep9efH6UxUryYgSyZ1vyo5OA9j3heVBQ8F06PSx2CGvUz7hP1pdk12pOu7x
bU5t61Z0b/rpS6BnA1uIOGRJ0MIbLyoDgro22c/tbWYtBb+Qq8psJLHPs8UZlTtm
YbtY8eEsO57jqE5j3d/uDKoE34m3idZ6r9FKaxmwfFgzYCcGOycnk6H5qvMTAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUVU1eN/Px4XeNHda5HMKH5xT0IkMwHwYDVR0j
BBgwFoAUfy+w07eSdXGUiiw57xPZ+cPDI/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk1DV1hQdXhDd0FjRUxidHo4WHdNek5IaWloM2NHd2VQU21IWGdBekI5
NncvMC83RjJGQjBEM0I3OTI3NTcxOTQ4QTJDMzlFRjEzRDlGOUMzQzMyM0YwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdGMkZCMEQzQjc5Mjc1NzE5
NDhBMkMzOUVGMTNEOUY5QzNDMzIzRjAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JNQ1dYUHV4Q3dBY0VMYnR6OFh3TXpOSGlpaDNjR3dlUFNtSFhnQXpCOTZ3LzAv
MzIzODMwMzQzYTMzNjEzMDM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjMwMzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEOgiAMA0GCSqGSIb3DQEBCwUA
A4IBAQAKDU/6iQoS2GjxKwe3HMwlYNFagZeLiADSQdWf5OO/LiUFpHxsv0jJO3c9
umT32/QMjyzF5oZs/BMbTFC4nOucBAPwQyfmjnwcl9WhGfkPFrsagoMla0q9dMB9
NxHiAEHFqSOxcneit5ZoGGvaIr17+/jmmJENeUrCGHIM3LXVG8ioVKGGuGEEqo53
XE5UZLeNB5UqAsyaYSdQCxEYl/6d7XKn0PveHNa5s3an4r4HW+FxfCJKAvQ6dBim
o0pWu7uEwQJKwnsvgeYag1oqSRMVCAgCD8zdMeJsWiD80PlwCrJdRvKZpaIAXWvv
Z8dBBh5lqlJoWu/DfFxQh463Wig2
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:44:33 2025 by rpki-client