Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/323830343a363630633a3a2f33322d313238203d3e20323639353330.roa
File: 323830343a363630633a3a2f33322d313238203d3e20323639353330.roa (raw, json)
Hash identifier: /iaFLxHNFA2V3TjOBiv0XpcHZofInDeTZKuOoA3EzQg=
Subject key identifier: D4:A3:4D:8D:A8:18:4C:37:6B:78:7E:98:34:D5:88:73:DC:4F:92:56
Certificate issuer: /CN=BC834F1ADC6997F0F8557889193E5B0D17827E29
Certificate serial: 0AFA6D8E4193BB02F1425CBE590ECC23588D961C
Authority key identifier: BC:83:4F:1A:DC:69:97:F0:F8:55:78:89:19:3E:5B:0D:17:82:7E:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC834F1ADC6997F0F8557889193E5B0D17827E29.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/323830343a363630633a3a2f33322d313238203d3e20323639353330.roa
Signing time: Wed 26 Mar 2025 18:43:44 +0000
ROA not before: Wed 26 Mar 2025 18:38:44 +0000
ROA not after: Wed 25 Mar 2026 18:43:44 +0000
asID: 269530
IP address blocks: 2804:660c::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.crl
rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC834F1ADC6997F0F8557889193E5B0D17827E29.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 11 Apr 2025 13:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:fa:6d:8e:41:93:bb:02:f1:42:5c:be:59:0e:cc:23:58:8d:96:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC834F1ADC6997F0F8557889193E5B0D17827E29
Validity
Not Before: Mar 26 18:38:44 2025 GMT
Not After : Mar 25 18:43:44 2026 GMT
Subject: CN=D4A34D8DA8184C376B787E9834D58873DC4F9256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:91:36:17:84:8a:e3:85:c2:be:9c:52:95:3d:
ac:cc:0f:84:ef:4f:d4:fb:62:98:74:55:9e:4b:0c:
ab:ca:ce:60:0a:0f:1f:b1:a9:41:70:35:87:3d:e6:
28:32:c4:f0:4d:b2:ce:fd:bd:28:37:71:b6:c2:24:
e9:ec:a9:6e:50:e6:8b:52:2c:7c:4e:b6:d7:5e:5a:
fc:21:bd:98:e9:48:31:8e:a9:b8:07:b1:2f:73:55:
38:ab:ae:fa:a2:5c:0a:1a:8f:78:18:e2:de:e7:3e:
55:56:e7:0d:af:de:a8:c1:b5:f7:17:9b:b5:f4:57:
5e:3b:5b:1a:b5:d6:30:f7:78:4f:ca:74:85:3a:5b:
3a:7d:1f:f0:77:d7:fd:99:31:bf:57:8c:d6:a0:27:
9b:ee:da:6f:1c:30:4b:6b:ac:66:f1:8d:e7:4c:02:
8a:c4:6d:3e:e6:dc:63:e7:98:fa:0f:85:4e:42:a6:
17:bb:5b:45:aa:0f:8d:4f:95:db:25:97:24:3e:80:
12:24:be:1d:dc:c4:57:c0:92:c9:26:57:8e:68:aa:
b5:17:4a:bf:b1:4b:99:a7:52:9a:30:da:52:98:56:
35:09:84:63:4a:6f:2a:13:e3:93:61:14:f4:39:9f:
01:f7:12:33:c4:1d:4d:f4:a2:97:6a:22:66:5c:35:
6f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A3:4D:8D:A8:18:4C:37:6B:78:7E:98:34:D5:88:73:DC:4F:92:56
X509v3 Authority Key Identifier:
keyid:BC:83:4F:1A:DC:69:97:F0:F8:55:78:89:19:3E:5B:0D:17:82:7E:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC834F1ADC6997F0F8557889193E5B0D17827E29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/323830343a363630633a3a2f33322d313238203d3e20323639353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:660c::/32
Signature Algorithm: sha256WithRSAEncryption
84:16:e2:0e:60:bc:c6:81:7d:bf:d0:3d:2a:c6:07:9a:b8:35:
e5:d2:a3:b2:43:ef:4d:2c:20:41:62:ae:1f:91:e7:5d:bb:90:
41:14:39:3f:3f:22:1f:a7:f4:59:21:8f:d4:31:3e:d7:24:73:
2f:98:77:4f:15:30:f9:fc:8c:70:80:02:9e:87:72:60:a9:00:
57:c0:a4:69:d8:54:04:e3:fe:57:c2:98:c4:25:64:25:0a:27:
4a:27:91:31:ac:16:39:c4:e1:08:38:5f:0d:aa:cd:ae:68:22:
a4:09:6f:3b:c7:ac:38:37:25:24:8d:2c:85:a0:26:4c:a9:4a:
cf:68:4a:e7:dd:a9:90:d8:30:2e:68:fc:cd:fd:f9:a6:6b:af:
8b:82:51:08:b9:67:77:17:2e:40:7e:2b:fb:74:b8:a1:a2:78:
90:6e:d1:df:ee:ac:02:66:e8:0c:c5:08:d0:9e:32:a9:58:44:
c8:cf:df:23:82:c8:4e:76:c5:f1:51:e6:a6:b8:da:35:38:34:
dc:5d:db:8a:66:e9:f0:3d:1c:ca:2a:ac:00:47:d9:a6:8b:eb:
ea:73:75:7f:09:56:a0:3a:ab:f7:e0:0f:73:be:dd:f2:af:8b:
22:ac:ec:b5:f5:24:75:1f:83:5a:49:c3:5b:7e:d2:8a:91:b3:
ef:dd:c7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 04:38:50 2025 by rpki-client