Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/1/323830343a376462633a3a2f33322d313238203d3e20323731353739.roa
File: 323830343a376462633a3a2f33322d313238203d3e20323731353739.roa (raw, json)
Hash identifier: zShg0L1xrHESffELhjsi4AvjnEvi7j5sMg6rTjteXR8=
Subject key identifier: DA:87:16:C0:F0:72:8C:01:1F:E7:D2:83:82:28:E0:95:39:6A:DB:C1
Certificate issuer: /CN=8A6A545B21CA8F70C37A8FB24E9A901800755696
Certificate serial: 41744B0C0DD6114AD28E497493D9A73BBEEF8B09
Authority key identifier: 8A:6A:54:5B:21:CA:8F:70:C3:7A:8F:B2:4E:9A:90:18:00:75:56:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6A545B21CA8F70C37A8FB24E9A901800755696.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/1/323830343a376462633a3a2f33322d313238203d3e20323731353739.roa
Signing time: Thu 06 Mar 2025 15:22:11 +0000
ROA not before: Thu 06 Mar 2025 15:17:11 +0000
ROA not after: Thu 05 Mar 2026 15:22:11 +0000
asID: 271579
IP address blocks: 2804:7dbc::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/1/8A6A545B21CA8F70C37A8FB24E9A901800755696.crl
rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/1/8A6A545B21CA8F70C37A8FB24E9A901800755696.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6A545B21CA8F70C37A8FB24E9A901800755696.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 10 Apr 2025 09:18:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:74:4b:0c:0d:d6:11:4a:d2:8e:49:74:93:d9:a7:3b:be:ef:8b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A6A545B21CA8F70C37A8FB24E9A901800755696
Validity
Not Before: Mar 6 15:17:11 2025 GMT
Not After : Mar 5 15:22:11 2026 GMT
Subject: CN=DA8716C0F0728C011FE7D2838228E095396ADBC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:ad:3b:4c:55:6f:6d:ce:36:ee:7e:1b:4b:
31:4c:6d:03:4e:4a:09:b1:fb:57:ad:99:8b:74:04:
ec:9c:fd:d6:b9:81:1b:77:79:11:6c:d7:2f:65:c4:
b3:59:45:ec:29:d6:51:77:0c:83:df:66:30:db:01:
5e:77:b7:08:8e:3a:8c:14:26:6b:32:76:c2:57:0c:
7a:7f:c3:dc:07:b6:40:26:3a:4e:20:da:c7:66:2c:
78:62:36:a8:ce:0b:48:e8:ac:50:8e:2b:c9:50:bd:
71:ff:0a:d0:e2:1d:2e:58:51:e5:30:f1:36:0c:92:
51:c1:0e:f2:cf:52:5f:3d:35:b8:fc:96:77:3d:29:
b9:bc:35:6c:72:1b:73:33:57:56:68:49:3d:28:f9:
db:f8:7a:be:3d:89:2c:5e:93:01:a5:17:d1:22:23:
bd:f6:81:cd:91:ce:14:0e:a5:f8:d5:be:85:32:05:
02:be:e6:5b:d4:cf:f7:5f:65:05:c8:e9:e9:95:a7:
dc:b5:24:30:a1:e1:1e:2b:8b:f3:26:d3:47:99:e5:
26:42:e4:a7:35:c7:10:18:c4:43:40:d4:ba:95:85:
fa:89:e2:34:9d:03:f1:5e:6e:b2:be:ac:c3:5c:47:
0b:f2:9c:71:2d:be:0c:53:f4:19:09:c9:d0:8c:b3:
46:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:87:16:C0:F0:72:8C:01:1F:E7:D2:83:82:28:E0:95:39:6A:DB:C1
X509v3 Authority Key Identifier:
keyid:8A:6A:54:5B:21:CA:8F:70:C3:7A:8F:B2:4E:9A:90:18:00:75:56:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/1/8A6A545B21CA8F70C37A8FB24E9A901800755696.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6A545B21CA8F70C37A8FB24E9A901800755696.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/1/323830343a376462633a3a2f33322d313238203d3e20323731353739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7dbc::/32
Signature Algorithm: sha256WithRSAEncryption
6f:04:1d:56:c9:aa:3e:b7:4f:4e:a3:6a:09:9e:d6:c8:ac:68:
82:39:4d:fc:21:83:9b:cb:1f:4a:ad:2c:6e:bc:c8:21:d1:f1:
65:d6:36:20:56:c8:12:ed:96:65:25:c6:d9:21:7b:82:1b:79:
1c:47:dd:63:70:90:93:50:c8:c8:c6:ea:b3:f4:47:4f:b1:1f:
92:74:b3:f1:08:f3:24:e9:18:23:0e:1a:b9:54:71:f3:d9:ab:
ed:22:30:da:04:a9:f7:ac:42:2e:b9:6c:4b:db:44:41:d7:25:
6e:4f:34:d4:db:65:a8:8f:a3:b5:75:64:e5:77:b1:35:9d:14:
de:7d:c3:af:b1:f4:d4:10:44:d1:bd:4f:23:14:93:e9:d4:1f:
1b:8d:0a:51:9c:f8:36:3c:75:9f:3a:cf:d5:97:7e:cd:24:b0:
13:7c:01:02:56:cc:bc:09:fc:c0:20:14:c0:5d:43:1b:fb:a9:
35:6e:78:39:f7:15:da:83:18:e7:76:5c:1d:68:79:95:20:e4:
dc:c0:15:30:71:25:df:b8:07:3d:24:52:7d:8d:74:a7:f0:cf:
d9:f2:bf:e8:8e:e4:ca:e9:51:41:c8:52:5c:37:d8:19:a3:84:
2b:93:22:d0:2b:94:0b:a3:17:d1:2f:4c:16:89:a1:6a:5e:41:
43:7c:5f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:04:15 2025 by rpki-client