Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/323830343a6436343a3a2f33322d313238203d3e203532363137.roa
File: 323830343a6436343a3a2f33322d313238203d3e203532363137.roa (raw, json)
Hash identifier: Vjvf+7h+oJqa97TfmPLMG4bVQsJCc4wDU/CW4zjAo4Q=
Subject key identifier: AF:3D:E0:61:A4:67:5F:27:A5:A4:DE:A8:A0:1F:FB:7E:F3:7D:05:1B
Certificate issuer: /CN=D52EA87CB6ED7499343693851F4F93C4D28AAD65
Certificate serial: 0D505114DD1C23343B9C3E018FB8BA72762F28ED
Authority key identifier: D5:2E:A8:7C:B6:ED:74:99:34:36:93:85:1F:4F:93:C4:D2:8A:AD:65
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/323830343a6436343a3a2f33322d313238203d3e203532363137.roa
Signing time: Thu 06 Mar 2025 12:59:16 +0000
ROA not before: Thu 06 Mar 2025 12:54:16 +0000
ROA not after: Thu 05 Mar 2026 12:59:16 +0000
asID: 52617
IP address blocks: 2804:d64::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.crl
rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 12 Apr 2025 05:39:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:50:51:14:dd:1c:23:34:3b:9c:3e:01:8f:b8:ba:72:76:2f:28:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D52EA87CB6ED7499343693851F4F93C4D28AAD65
Validity
Not Before: Mar 6 12:54:16 2025 GMT
Not After : Mar 5 12:59:16 2026 GMT
Subject: CN=AF3DE061A4675F27A5A4DEA8A01FFB7EF37D051B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:d3:87:2b:40:23:76:22:46:82:86:7d:d7:
fa:fe:a9:ac:9f:bd:d8:c8:e0:8b:bc:37:12:34:e5:
69:cd:ea:1c:77:8a:07:a5:de:10:f9:e5:a2:15:e6:
46:70:33:42:28:90:2d:58:38:86:3b:79:14:be:3a:
d6:77:87:3c:fe:c7:00:4b:2c:14:f2:d9:8c:c3:b9:
da:f9:0c:b7:32:e1:88:6f:5b:59:08:01:93:ca:b6:
dd:69:36:69:24:73:3e:bd:a4:5e:f3:4d:d7:1b:6f:
2f:a7:5a:fe:d2:50:ac:4b:bb:5f:5c:c7:c9:92:f2:
e2:7c:db:c9:9f:e5:69:aa:09:c8:16:40:ff:6d:da:
e8:66:58:f9:f7:32:fe:9f:90:e5:fe:b5:97:1e:3a:
32:d9:e5:c0:9d:40:83:39:5a:ac:f3:7d:74:a2:dd:
af:62:21:b5:ab:b2:f0:17:34:d6:8b:68:3b:1b:29:
0b:54:21:7e:cc:f9:76:76:ec:a1:74:17:7d:e8:5c:
30:15:4a:af:16:2a:2e:6a:72:31:d9:1f:ac:99:fc:
94:34:d8:7f:7f:69:39:4e:8d:6c:42:72:9a:54:04:
27:0b:fb:8a:bf:d9:d2:62:9d:eb:4b:27:3b:94:99:
79:b8:c4:05:46:9f:ad:ad:e2:2b:ba:f3:5b:37:c6:
a5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3D:E0:61:A4:67:5F:27:A5:A4:DE:A8:A0:1F:FB:7E:F3:7D:05:1B
X509v3 Authority Key Identifier:
keyid:D5:2E:A8:7C:B6:ED:74:99:34:36:93:85:1F:4F:93:C4:D2:8A:AD:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/323830343a6436343a3a2f33322d313238203d3e203532363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:d64::/32
Signature Algorithm: sha256WithRSAEncryption
a0:06:02:d1:21:ac:35:a3:10:7b:cd:88:97:69:6b:95:28:d5:
f3:68:76:c6:c8:6a:69:2f:4b:24:21:28:d1:8d:0e:66:86:26:
eb:35:a9:f4:5e:72:1a:c6:0e:84:25:61:58:61:e4:17:ae:32:
2c:2c:67:5d:9e:00:19:52:52:64:c5:7f:6d:ea:f2:a3:0a:28:
4b:b9:c1:39:f3:2c:5e:c3:e2:3a:01:d5:f2:a3:2f:90:dc:5c:
a4:ab:13:4c:64:19:fe:2a:2e:2c:f9:27:c0:3b:21:88:e9:ca:
c7:40:ad:41:a7:db:2c:8b:53:8c:f8:c3:78:aa:0c:54:8a:61:
07:8c:72:b8:03:7a:e7:a4:fb:db:43:f7:af:2b:36:29:63:6b:
35:f4:6b:4f:90:b2:cf:d1:aa:1a:c6:61:ba:fc:9f:ea:26:5d:
c4:20:65:36:71:b8:0f:03:98:06:39:7e:0a:ba:59:84:e1:67:
65:3e:a7:77:b2:79:d6:cf:04:b8:f4:a0:a4:a3:fb:f8:50:ad:
bb:a1:00:03:82:d4:6c:6a:a8:25:87:30:0b:0a:ee:77:cd:bc:
83:84:bc:a4:d4:a5:20:1f:61:d2:12:a6:1d:42:0d:65:23:91:
6e:0d:2a:b2:ff:e7:38:c1:5e:48:09:9d:00:64:a0:73:ab:65:
cf:37:49:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:00:39 2025 by rpki-client