Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3130333a3a2f34382d3438203d3e20323632363137.roa
File: 323830343a3930633a3130333a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier: SB6oVhEGp144Zb4+7N+MVBtUgtczuKADRrU0SYco+7c=
Subject key identifier: 6D:80:08:63:7E:8F:64:8B:28:76:5B:4E:DA:76:B0:65:C8:CF:D6:E5
Certificate issuer: /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial: 2D3B047A8EE2CC0DED19C170BDA5DA07C8D6DE84
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3130333a3a2f34382d3438203d3e20323632363137.roa
Signing time: Wed 05 Mar 2025 20:35:59 +0000
ROA not before: Wed 05 Mar 2025 20:30:59 +0000
ROA not after: Wed 04 Mar 2026 20:35:59 +0000
asID: 262617
IP address blocks: 2804:90c:103::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 13 Apr 2025 12:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:3b:04:7a:8e:e2:cc:0d:ed:19:c1:70:bd:a5:da:07:c8:d6:de:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Validity
Not Before: Mar 5 20:30:59 2025 GMT
Not After : Mar 4 20:35:59 2026 GMT
Subject: CN=6D8008637E8F648B28765B4EDA76B065C8CFD6E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:38:70:fc:20:5a:22:0c:6b:18:dc:68:07:
c0:2b:f7:2b:42:3a:47:d8:b2:84:f6:75:c1:5c:2b:
3c:e4:35:d3:6a:a8:11:32:63:d8:83:42:6e:66:7b:
56:ac:04:c4:99:61:04:c8:e9:35:f1:cd:85:a0:48:
57:b7:dd:e0:cd:3b:bf:6f:85:8d:84:a6:18:0b:5f:
25:8f:6c:cb:35:cf:fe:21:65:ab:c6:05:3c:10:7a:
49:b2:41:9f:41:7a:9d:00:00:e8:bc:36:12:7b:98:
45:52:ac:e9:8e:5e:a5:4e:db:3c:6d:a6:1a:af:b5:
64:5d:96:cf:ff:bd:f4:55:24:77:f1:b0:3d:48:b4:
c5:6f:d4:87:66:8b:78:2d:27:5b:fa:1c:89:4e:d5:
16:6b:6b:27:8a:fc:1a:cc:8e:e3:fd:a5:91:c9:7d:
a8:fa:d5:16:8c:60:d6:9d:fb:d8:e4:70:73:a9:0e:
7c:a7:91:69:e6:47:b2:e2:b6:85:d6:96:70:7e:ad:
60:1a:83:a5:5c:55:51:c1:f5:54:c5:b8:56:cb:8f:
d6:44:2e:f7:3c:4b:97:ed:c6:11:2f:7d:fa:c9:82:
02:2d:e9:64:92:9c:54:ab:50:e0:a9:77:f3:89:89:
5e:35:e6:bd:b1:de:60:47:16:b8:11:22:d8:f6:a2:
fc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:80:08:63:7E:8F:64:8B:28:76:5B:4E:DA:76:B0:65:C8:CF:D6:E5
X509v3 Authority Key Identifier:
keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3130333a3a2f34382d3438203d3e20323632363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:90c:103::/48
Signature Algorithm: sha256WithRSAEncryption
0f:45:0a:4a:a5:56:68:54:22:63:80:0c:95:c6:0a:18:ad:15:
aa:d4:bf:22:f7:83:4a:8e:a1:f6:61:5b:06:36:fe:49:16:5c:
21:e0:c3:5e:ec:1e:4d:2d:fc:1f:5b:c2:51:2d:47:d2:61:41:
bd:c3:f9:db:14:0b:a7:a5:8b:6e:c9:54:89:4b:bc:dc:99:b5:
5b:14:c4:95:a9:0d:98:32:b7:9d:bb:76:92:9d:77:eb:b0:70:
58:e8:ed:60:b5:18:98:4f:38:92:92:0c:c8:f6:61:87:e5:75:
f3:c7:ba:a6:0f:40:03:dd:90:7b:6a:42:89:fd:a3:a6:99:f9:
b8:57:a1:78:8d:76:e2:3e:ac:e1:6e:b4:4e:d5:f5:41:28:d6:
e6:aa:c0:57:d7:1f:8c:c4:28:88:c2:29:5e:a7:ba:46:50:50:
e2:cc:d5:06:1a:9b:d5:df:aa:8e:4e:13:bf:29:06:ee:7b:05:
e6:b2:b4:61:84:7f:c0:18:23:12:18:55:e2:f6:68:af:1b:04:
ca:45:a2:d3:c0:56:62:af:16:fd:a6:d4:7c:4a:7f:ed:22:3a:
d6:6c:6f:6d:4d:28:65:d4:05:7c:06:20:09:30:84:58:cb:8c:
30:64:d3:3d:e5:88:8d:ab:81:a6:09:0d:59:4e:4d:5b:04:9a:
47:48:af:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:01:38 2025 by rpki-client