Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/323830343a386365303a3a2f33322d3438203d3e20323733333230.roa
File: 323830343a386365303a3a2f33322d3438203d3e20323733333230.roa (raw, json)
Hash identifier: r/BRuiwGDb2l1+/WCN81mTz6dDcGYXbvaF8j78BvAEw=
Subject key identifier: 98:F8:B2:1F:1A:D9:D4:48:4A:C5:7B:F9:DA:AC:05:3A:62:20:93:64
Certificate issuer: /CN=AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D
Certificate serial: 5CB6DA6730B1E2D5C1C066DE2DE3DBACD8385E61
Authority key identifier: AD:38:DC:BC:BE:1A:6D:1E:79:86:85:8F:CA:F4:AD:40:79:14:2D:2D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/323830343a386365303a3a2f33322d3438203d3e20323733333230.roa
Signing time: Mon 05 Aug 2024 20:11:53 +0000
ROA not before: Mon 05 Aug 2024 20:06:53 +0000
ROA not after: Mon 04 Aug 2025 20:11:53 +0000
asID: 273320
IP address blocks: 2804:8ce0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.crl
rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 01:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:b6:da:67:30:b1:e2:d5:c1:c0:66:de:2d:e3:db:ac:d8:38:5e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D
Validity
Not Before: Aug 5 20:06:53 2024 GMT
Not After : Aug 4 20:11:53 2025 GMT
Subject: CN=98F8B21F1AD9D4484AC57BF9DAAC053A62209364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7c:86:a9:83:8e:7d:04:8f:87:88:d5:3e:ac:
2a:17:c5:cf:a7:23:ef:8b:14:c1:4b:c0:cc:b6:64:
6c:f9:6b:81:7a:16:f0:62:2a:8d:0f:03:f6:e2:4b:
41:a5:5e:31:f4:1a:d2:77:81:37:97:f6:9b:42:67:
da:16:e6:c3:29:5e:23:e5:f0:0d:e8:62:cb:34:81:
c8:80:c5:18:64:89:61:b4:58:13:c7:48:4e:08:0a:
5d:ca:e3:5d:f5:fb:fe:4e:83:48:af:b2:80:68:d7:
c1:75:fe:5b:02:d2:9f:21:8c:7c:2e:0a:b4:cc:d4:
86:bb:f9:9d:81:13:8a:72:27:e7:65:8c:b0:7c:0b:
02:1a:32:fc:a7:cf:55:6b:16:4c:72:25:df:cc:2c:
46:7d:d3:d7:ff:d9:ff:d9:24:6b:f4:91:a6:95:c1:
e7:9f:03:6d:e3:0b:a0:0a:1e:cb:9b:7e:58:52:82:
c3:04:47:83:76:c2:a1:25:25:9c:d3:68:ce:d6:6d:
61:6f:3d:20:12:19:52:3c:c6:23:59:3a:05:57:d5:
d8:9f:15:45:5d:a4:da:3c:d5:e6:8e:9b:2b:9a:32:
75:81:c0:23:be:1e:c2:e1:6a:92:80:f3:48:3b:7c:
fa:0a:20:0b:48:e9:4f:8b:e5:32:33:4c:e7:8b:bc:
6a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F8:B2:1F:1A:D9:D4:48:4A:C5:7B:F9:DA:AC:05:3A:62:20:93:64
X509v3 Authority Key Identifier:
keyid:AD:38:DC:BC:BE:1A:6D:1E:79:86:85:8F:CA:F4:AD:40:79:14:2D:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/323830343a386365303a3a2f33322d3438203d3e20323733333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8ce0::/32
Signature Algorithm: sha256WithRSAEncryption
73:0a:fc:f2:1d:46:73:ff:76:64:21:fd:15:f9:5d:af:da:94:
c3:71:3a:c4:06:6a:f9:21:81:46:b4:e7:40:e4:ca:51:90:51:
29:8d:1e:7b:a1:87:2a:79:a0:d4:80:63:31:08:06:63:eb:11:
29:d9:f6:74:52:0d:cb:e6:f7:12:31:bb:78:11:dc:c8:1e:7e:
e7:c9:d5:e6:91:8a:4f:61:3b:ef:2a:57:66:eb:d9:10:fb:9a:
8d:b8:a6:70:2b:5c:d8:86:6a:ae:19:0a:76:a3:61:e8:6c:50:
b2:3f:67:9e:5e:a1:23:16:55:ce:d4:75:02:24:fd:77:f2:a1:
81:33:d0:7d:6d:d5:87:2e:17:8b:12:b3:e9:b9:e5:bf:d1:72:
04:20:0f:43:00:46:4e:c6:bf:98:08:b5:4c:6a:d0:ba:a4:8a:
cf:d4:fc:7d:af:32:69:47:a5:f2:63:82:60:ae:aa:c3:d8:a7:
bd:02:1a:de:61:5a:3c:fa:70:53:9c:1f:4a:e6:9e:fa:34:0a:
ac:9c:b1:34:9d:aa:82:6d:2a:c4:54:fd:39:4c:a8:0d:79:96:
3b:08:68:4b:c4:1f:a1:dd:1f:c9:6d:da:99:19:5d:e7:0f:80:
34:50:e3:fe:f2:ee:0b:13:f8:6d:85:16:ce:75:b4:b9:77:1e:
3d:c2:03:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:09:49 2025 by rpki-client