Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/323830343a3638343a313030303a3a2f33362d3336203d3e20323632353930.roa
File: 323830343a3638343a313030303a3a2f33362d3336203d3e20323632353930.roa (raw, json)
Hash identifier: quCqG55Z5DzfOHXC7D2QTyHhHkuLDK2XNYibhbmIwuM=
Subject key identifier: 2A:12:C6:67:8C:E2:35:58:EE:9E:1F:21:6E:98:F0:44:29:AA:9A:28
Certificate issuer: /CN=231C01A4C21B4CA32569E7A61F40CB611354C269
Certificate serial: 24BAE641E4AD4C33DE1DCBD1FA5BBECB37BAFAE9
Authority key identifier: 23:1C:01:A4:C2:1B:4C:A3:25:69:E7:A6:1F:40:CB:61:13:54:C2:69
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C01A4C21B4CA32569E7A61F40CB611354C269.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/323830343a3638343a313030303a3a2f33362d3336203d3e20323632353930.roa
Signing time: Tue 11 Mar 2025 16:27:04 +0000
ROA not before: Tue 11 Mar 2025 16:22:04 +0000
ROA not after: Tue 10 Mar 2026 16:27:04 +0000
asID: 262590
IP address blocks: 2804:684:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/231C01A4C21B4CA32569E7A61F40CB611354C269.crl
rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/231C01A4C21B4CA32569E7A61F40CB611354C269.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C01A4C21B4CA32569E7A61F40CB611354C269.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 11 Apr 2025 02:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ba:e6:41:e4:ad:4c:33:de:1d:cb:d1:fa:5b:be:cb:37:ba:fa:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231C01A4C21B4CA32569E7A61F40CB611354C269
Validity
Not Before: Mar 11 16:22:04 2025 GMT
Not After : Mar 10 16:27:04 2026 GMT
Subject: CN=2A12C6678CE23558EE9E1F216E98F04429AA9A28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:08:ff:05:0a:b3:e9:55:bd:55:14:8d:5e:
a1:d0:14:51:72:af:e9:70:82:53:f1:d7:b3:5a:15:
d3:5a:a6:fc:9b:97:c4:0e:05:9b:93:f9:70:29:34:
e1:7d:e5:29:2e:f2:f8:66:bf:be:df:fc:f6:55:41:
47:a2:f3:16:be:c7:44:86:b6:bb:3e:ae:83:33:e6:
4a:99:f8:ea:28:85:47:91:c5:12:88:47:ad:08:a1:
c6:ab:dd:7a:51:1e:56:2f:bd:2d:72:79:1f:12:93:
c2:c8:87:2e:22:53:ce:66:a1:64:85:eb:5f:f1:52:
03:09:66:c7:0f:11:f7:1d:d0:fd:51:f5:86:e8:3d:
a0:d8:5d:70:21:f1:87:52:20:11:5d:89:36:4b:05:
28:a2:0b:11:7a:ba:3a:77:24:a1:23:bb:4e:13:f3:
b4:b1:7d:40:e9:71:8f:2a:9d:22:13:09:16:84:ee:
e6:5e:76:6d:3b:52:0c:0f:4d:82:b7:b5:f6:43:f6:
05:c2:6a:b2:ec:e2:9c:1a:32:ea:9b:c0:aa:04:80:
59:00:82:c6:0f:f2:68:70:cb:b7:47:43:9b:61:9e:
14:0a:8e:f8:05:d7:6f:dd:e1:1e:e3:25:63:85:fc:
b4:ce:7f:7b:14:e1:9e:9b:eb:4f:43:14:2a:60:aa:
e6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:12:C6:67:8C:E2:35:58:EE:9E:1F:21:6E:98:F0:44:29:AA:9A:28
X509v3 Authority Key Identifier:
keyid:23:1C:01:A4:C2:1B:4C:A3:25:69:E7:A6:1F:40:CB:61:13:54:C2:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/231C01A4C21B4CA32569E7A61F40CB611354C269.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C01A4C21B4CA32569E7A61F40CB611354C269.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/323830343a3638343a313030303a3a2f33362d3336203d3e20323632353930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:684:1000::/36
Signature Algorithm: sha256WithRSAEncryption
2a:ce:e0:80:08:1e:56:6d:6c:2c:7a:bb:3e:39:ad:8f:49:19:
f5:af:68:ef:fe:49:09:bd:c9:01:c7:0d:11:d5:f2:12:ad:69:
c3:13:2b:0a:4a:b0:c6:ec:5a:84:7b:d7:9d:08:30:20:8e:9f:
8f:85:8d:26:5f:1c:42:e9:a9:ea:22:b0:4e:a0:5d:bc:97:45:
f3:20:e0:c8:04:49:69:7c:a7:94:69:3f:ac:df:fd:57:bd:b2:
d9:1c:dd:fa:12:41:15:3d:70:d4:0e:a1:a9:0a:9b:28:b8:77:
db:86:ca:81:12:0c:db:48:10:d4:8d:87:f8:d6:0a:5c:d1:4b:
d9:a8:9f:cc:76:2e:1f:ca:98:c2:fc:a9:72:00:3a:bf:20:a9:
9a:09:b6:eb:39:34:4d:a1:2a:38:96:bb:41:1c:f2:1a:a1:d7:
15:f1:f0:c6:1d:53:c6:af:5a:ca:45:37:44:4b:73:28:e1:d2:
76:c8:44:f6:53:6d:6e:64:d8:4b:b0:f7:35:f7:32:71:c9:07:
0a:9d:65:36:81:af:7a:c2:d5:09:6a:4f:37:bf:de:95:1b:8f:
04:fc:d2:e6:ce:94:bc:2a:9f:b9:bc:cc:91:a7:7c:58:6e:06:
8f:74:b2:55:88:99:aa:cc:73:2b:76:5f:46:f1:72:c4:e8:65:
ef:90:66:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJLrmQeStTDPeHcvR+lu+yze6+ukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMxQzAxQTRDMjFCNENBMzI1NjlFN0E2MUY0MENCNjEx
MzU0QzI2OTAeFw0yNTAzMTExNjIyMDRaFw0yNjAzMTAxNjI3MDRaMDMxMTAvBgNV
BAMTKDJBMTJDNjY3OENFMjM1NThFRTlFMUYyMTZFOThGMDQ0MjlBQTlBMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCobgj/BQqz6VW9VRSNXqHQFFFy
r+lwglPx17NaFdNapvybl8QOBZuT+XApNOF95Sku8vhmv77f/PZVQUei8xa+x0SG
trs+roMz5kqZ+OoohUeRxRKIR60Iocar3XpRHlYvvS1yeR8Sk8LIhy4iU85moWSF
61/xUgMJZscPEfcd0P1R9YboPaDYXXAh8YdSIBFdiTZLBSiiCxF6ujp3JKEju04T
87SxfUDpcY8qnSITCRaE7uZedm07UgwPTYK3tfZD9gXCarLs4pwaMuqbwKoEgFkA
gsYP8mhwy7dHQ5thnhQKjvgF12/d4R7jJWOF/LTOf3sU4Z6b609DFCpgquaZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKhLGZ4ziNVjunh8hbpjwRCmqmigwHwYDVR0j
BBgwFoAUIxwBpMIbTKMlaeemH0DLYRNUwmkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTFMMWdyYWt6ZnJlZXB2NVlkb3FuMkpCcld5eVJQdllVSjF2MVhtcnpB
MUcvMC8yMzFDMDFBNEMyMUI0Q0EzMjU2OUU3QTYxRjQwQ0I2MTEzNTRDMjY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzMUMwMUE0QzIxQjRDQTMy
NTY5RTdBNjFGNDBDQjYxMTM1NEMyNjkuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UxTDFncmFremZyZWVwdjVZZG9xbjJKQnJXeXlSUHZZVUoxdjFYbXJ6QTFHLzAv
MzIzODMwMzQzYTM2MzgzNDNhMzEzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM2MzIzNTM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBAaEEDANBgkqhkiG9w0BAQsFAAOC
AQEAKs7ggAgeVm1sLHq7Pjmtj0kZ9a9o7/5JCb3JAccNEdXyEq1pwxMrCkqwxuxa
hHvXnQgwII6fj4WNJl8cQump6iKwTqBdvJdF8yDgyARJaXynlGk/rN/9V72y2Rzd
+hJBFT1w1A6hqQqbKLh324bKgRIM20gQ1I2H+NYKXNFL2aifzHYuH8qYwvypcgA6
vyCpmgm26zk0TaEqOJa7QRzyGqHXFfHwxh1Txq9aykU3REtzKOHSdshE9lNtbmTY
S7D3NfcycckHCp1lNoGvesLVCWpPN7/elRuPBPzS5s6UvCqfubzMkad8WG4Gj3Sy
VYiZqsxzK3ZfRvFyxOhl75Bm4A==
-----END CERTIFICATE-----
Generated at Thu Apr 10 09:18:02 2025 by rpki-client