Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/1/323830343a346639303a3a2f33322d3438203d3e20323638333335.roa
File: 323830343a346639303a3a2f33322d3438203d3e20323638333335.roa (raw, json)
Hash identifier: cjF52cn36Stmgc37Ua7Qxatp+9J3nhBvEcDv7D0975s=
Subject key identifier: 02:82:D5:74:A6:F3:D8:F7:04:20:92:81:EA:33:24:55:CA:11:3E:A1
Certificate issuer: /CN=14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB
Certificate serial: 4EC4B6E3BED9E2409DC3304896DAE13073117A2F
Authority key identifier: 14:FA:C5:8F:DA:D4:E0:FC:86:D9:47:B4:C8:EF:14:D5:C0:A9:EF:EB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/1/323830343a346639303a3a2f33322d3438203d3e20323638333335.roa
Signing time: Thu 06 Mar 2025 18:06:06 +0000
ROA not before: Thu 06 Mar 2025 18:01:06 +0000
ROA not after: Thu 05 Mar 2026 18:06:06 +0000
asID: 268335
IP address blocks: 2804:4f90::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.crl
rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 11 Apr 2025 09:17:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:c4:b6:e3:be:d9:e2:40:9d:c3:30:48:96:da:e1:30:73:11:7a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB
Validity
Not Before: Mar 6 18:01:06 2025 GMT
Not After : Mar 5 18:06:06 2026 GMT
Subject: CN=0282D574A6F3D8F704209281EA332455CA113EA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:01:92:a4:6d:d6:d1:47:f2:a8:1a:a7:52:
41:e5:4e:a8:fc:38:ee:ec:49:d3:5a:db:62:35:ed:
6d:a3:2c:e3:a9:51:7a:36:8c:d3:08:d5:59:cc:16:
ae:20:fc:36:c8:b0:82:e3:52:aa:25:99:c1:d7:08:
c7:ea:1a:76:1f:6b:4d:e8:96:9d:54:69:6f:5d:68:
35:7b:56:66:a7:13:31:3f:1f:fb:3a:7a:ea:20:5e:
d7:9b:7e:94:49:66:57:1b:89:25:1f:21:7c:93:13:
76:01:70:21:05:5a:0e:73:4b:2e:c8:b0:d3:75:4f:
19:4f:fc:36:ae:f4:df:ad:7a:27:4c:97:f1:51:4b:
8d:69:e0:50:71:10:c8:ae:d7:cc:aa:50:7a:83:8b:
67:37:db:c1:64:21:9e:8d:11:5b:2a:02:7f:56:0b:
f6:e4:0e:6f:e0:81:ea:f4:0f:2a:54:d1:ee:f5:e7:
ab:c4:6d:49:46:a6:40:36:05:11:a0:9b:91:df:06:
95:54:cd:db:2f:2a:30:95:7c:0b:e5:9f:70:a7:82:
ea:26:e1:43:fb:83:03:dc:4c:b0:87:52:cc:a3:ef:
cb:fb:c3:28:75:27:f2:f4:3d:37:aa:cc:dc:f1:3e:
75:19:c5:54:6f:4e:07:27:d5:13:df:e5:8f:86:ad:
05:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:82:D5:74:A6:F3:D8:F7:04:20:92:81:EA:33:24:55:CA:11:3E:A1
X509v3 Authority Key Identifier:
keyid:14:FA:C5:8F:DA:D4:E0:FC:86:D9:47:B4:C8:EF:14:D5:C0:A9:EF:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/1/323830343a346639303a3a2f33322d3438203d3e20323638333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4f90::/32
Signature Algorithm: sha256WithRSAEncryption
97:e5:4d:b0:06:d4:2e:07:41:4a:9d:bc:02:47:ee:64:22:4f:
47:4f:32:b1:36:89:c2:1b:ff:45:9b:35:0a:05:79:8f:57:9d:
67:52:cc:55:d9:b7:de:b0:0e:ee:5d:3b:af:8c:89:26:cc:24:
34:ef:54:48:a1:69:fa:49:15:40:3b:6e:18:71:26:d8:b5:ae:
47:86:3c:03:5d:9e:31:60:b0:73:0d:0b:23:56:24:bb:14:67:
6f:34:f4:4a:09:dd:52:1f:2f:a1:fb:cd:ce:38:6e:31:28:ab:
64:93:56:2e:b8:f1:59:ee:be:e7:7e:b6:4f:00:53:b7:b6:89:
4b:5b:50:a8:1b:bf:16:75:2c:b6:0b:58:4c:fc:71:8c:2e:b6:
f9:fb:8b:57:8c:c6:ac:7e:b9:bc:32:fc:c9:09:91:47:84:e7:
5f:af:1c:a1:cf:29:c9:4b:50:99:ff:7a:7e:14:8f:a8:5d:3e:
4d:2b:d7:f6:9c:63:ae:84:f2:4d:55:0d:4a:09:62:36:d2:92:
96:1c:11:c2:3b:e8:04:50:3f:00:49:63:4f:07:14:ef:24:9e:
a8:c3:0e:a1:b1:63:5e:51:80:55:1c:13:c4:2e:33:67:16:7f:
ce:53:3b:26:23:3d:c5:dd:fa:cf:ef:c8:18:bd:b7:8c:98:61:
a0:b7:30:f2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUTsS2477Z4kCdwzBIltrhMHMRei8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTRGQUM1OEZEQUQ0RTBGQzg2RDk0N0I0QzhFRjE0RDVD
MEE5RUZFQjAeFw0yNTAzMDYxODAxMDZaFw0yNjAzMDUxODA2MDZaMDMxMTAvBgNV
BAMTKDAyODJENTc0QTZGM0Q4RjcwNDIwOTI4MUVBMzMyNDU1Q0ExMTNFQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8EgGSpG3W0UfyqBqnUkHlTqj8
OO7sSdNa22I17W2jLOOpUXo2jNMI1VnMFq4g/DbIsILjUqolmcHXCMfqGnYfa03o
lp1UaW9daDV7VmanEzE/H/s6euogXtebfpRJZlcbiSUfIXyTE3YBcCEFWg5zSy7I
sNN1TxlP/Dau9N+teidMl/FRS41p4FBxEMiu18yqUHqDi2c328FkIZ6NEVsqAn9W
C/bkDm/gger0DypU0e7156vEbUlGpkA2BRGgm5HfBpVUzdsvKjCVfAvln3Cnguom
4UP7gwPcTLCHUsyj78v7wyh1J/L0PTeqzNzxPnUZxVRvTgcn1RPf5Y+GrQUPAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUAoLVdKbz2PcEIJKB6jMkVcoRPqEwHwYDVR0j
BBgwFoAUFPrFj9rU4PyG2Ue0yO8U1cCp7+swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUNrVmdidnFXamVQd1d5RWc1ZTNyTjkzeWhSYkFqWWt5SmFONm1oR2Za
VjYvMS8xNEZBQzU4RkRBRDRFMEZDODZEOTQ3QjRDOEVGMTRENUMwQTlFRkVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0RkFDNThGREFENEUwRkM4
NkQ5NDdCNEM4RUYxNEQ1QzBBOUVGRUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VDa1ZnYnZxV2plUHdXeUVnNWUzck45M3loUmJBallreUphTjZtaEdmWlY2LzEv
MzIzODMwMzQzYTM0NjYzOTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzMzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARPkDANBgkqhkiG9w0BAQsFAAOCAQEAl+VNsAbU
LgdBSp28AkfuZCJPR08ysTaJwhv/RZs1CgV5j1edZ1LMVdm33rAO7l07r4yJJswk
NO9USKFp+kkVQDtuGHEm2LWuR4Y8A12eMWCwcw0LI1YkuxRnbzT0SgndUh8vofvN
zjhuMSirZJNWLrjxWe6+5362TwBTt7aJS1tQqBu/FnUstgtYTPxxjC62+fuLV4zG
rH65vDL8yQmRR4TnX68coc8pyUtQmf96fhSPqF0+TSvX9pxjroTyTVUNSgliNtKS
lhwRwjvoBFA/AEljTwcU7ySeqMMOobFjXlGAVRwTxC4zZxZ/zlM7JiM9xd36z+/I
GL23jJhhoLcw8g==
-----END CERTIFICATE-----
Generated at Fri Apr 11 01:50:34 2025 by rpki-client