Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383130303a3a2f34382d3438203d3e20323733333039.roa
File: 323830343a386337633a383130303a3a2f34382d3438203d3e20323733333039.roa (raw, json)
Hash identifier: +hMXhrApZp2vtRz0XQ2iCx2vl6UGIP7j0JBYXeYSNDo=
Subject key identifier: B8:EB:55:71:7E:12:DD:57:5F:6A:4B:93:18:FF:02:5D:AC:39:9C:5C
Certificate issuer: /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial: 5343EE5CA791AC8836F08EE6E81772996D935006
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383130303a3a2f34382d3438203d3e20323733333039.roa
Signing time: Wed 09 Apr 2025 13:53:36 +0000
ROA not before: Wed 09 Apr 2025 13:48:36 +0000
ROA not after: Wed 08 Apr 2026 13:53:36 +0000
asID: 273309
IP address blocks: 2804:8c7c:8100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 06:06:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:43:ee:5c:a7:91:ac:88:36:f0:8e:e6:e8:17:72:99:6d:93:50:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Validity
Not Before: Apr 9 13:48:36 2025 GMT
Not After : Apr 8 13:53:36 2026 GMT
Subject: CN=B8EB55717E12DD575F6A4B9318FF025DAC399C5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:49:3d:3a:11:db:aa:63:4a:09:f5:4e:b6:78:
e6:24:2e:83:50:8b:20:97:61:25:04:65:69:83:54:
65:a7:da:51:67:9f:1a:ca:7d:bd:91:f0:28:e0:bc:
18:43:44:f7:a4:c8:6e:de:72:58:81:1c:9c:f6:51:
f1:79:8e:4e:7d:9d:e5:74:5d:c4:f4:d9:71:db:70:
78:a0:22:47:b1:72:84:fa:1b:3e:2b:c6:14:36:5e:
69:ee:ce:94:28:1b:58:59:f0:9c:b4:67:08:9c:ed:
2a:41:a5:57:a5:c4:7b:3b:3a:b3:43:a1:07:d4:37:
93:22:92:b4:f4:c9:61:78:d4:60:a8:b6:13:f7:50:
c6:35:dc:54:7a:4b:b5:10:85:52:45:b6:7e:9b:e7:
8b:db:77:de:1f:dd:ba:c1:20:2c:86:13:cb:ed:d0:
b9:00:fd:63:ab:93:d7:87:3a:4c:59:77:28:1c:6d:
4e:03:12:c3:72:cb:39:28:b6:b5:2d:ea:48:17:3b:
36:13:b0:ac:b9:93:dd:bd:a1:7a:1b:11:a1:a0:a1:
f0:ba:a2:b1:e7:04:04:a9:3f:0c:fb:44:55:93:60:
26:0e:cd:01:f7:ad:2c:49:ec:dd:93:92:67:67:a6:
ed:3c:c2:15:9f:a7:b8:1f:d9:90:15:05:c2:4e:66:
65:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EB:55:71:7E:12:DD:57:5F:6A:4B:93:18:FF:02:5D:AC:39:9C:5C
X509v3 Authority Key Identifier:
keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383130303a3a2f34382d3438203d3e20323733333039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8c7c:8100::/48
Signature Algorithm: sha256WithRSAEncryption
63:4d:01:3f:91:95:c0:f5:aa:81:91:ad:2d:04:42:2e:5e:bd:
6e:a8:f1:45:d7:ea:0e:fe:4c:0a:6f:02:83:0d:84:82:33:28:
61:1d:a7:a6:6f:d2:4c:6c:2d:4a:b2:6a:07:3a:a5:ff:c8:b8:
15:73:bc:fa:b4:81:3b:3a:2b:7f:0e:8e:4a:58:2c:0b:90:34:
b0:13:b2:7e:f5:49:af:45:7f:0b:69:67:ca:01:29:9b:cb:18:
e7:f0:7a:6e:c2:6d:6b:64:dd:c6:f4:ec:fd:87:4d:d9:e7:cf:
de:c5:0e:40:ee:de:e4:ae:51:2c:5d:2a:e6:ed:9d:a1:66:10:
3b:77:15:3e:c7:d4:f7:12:c6:a9:00:f7:f5:7d:fa:69:d5:b7:
9b:ba:a8:68:65:6f:7a:0c:ba:56:ca:9e:c4:c0:90:c9:71:00:
4e:d5:dc:13:1e:da:bf:eb:09:b1:43:78:f3:4d:d6:bb:b7:69:
54:04:a5:65:82:92:c1:21:e8:53:d6:84:cd:ae:7a:e8:52:15:
2f:32:f5:91:76:2e:e7:61:f4:d2:fc:d5:b5:c8:66:dd:fe:51:
fd:9e:ba:cc:ad:5d:ca:88:58:b9:7d:00:bc:64:56:8e:72:1b:
50:4a:0c:a7:e8:b9:1e:24:07:e8:d2:86:10:4b:22:1f:3f:1b:
20:2a:a2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:40:40 2025 by rpki-client