Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/323830343a336638303a3a2f33322d3332203d3e20323635383937.roa
File: 323830343a336638303a3a2f33322d3332203d3e20323635383937.roa (raw, json)
Hash identifier: Kblo3np4OMstlSWFSs6iOVj1jNo1wAWwaHXT/VBQsWg=
Subject key identifier: 9E:F8:99:73:7A:0D:C0:61:E9:90:12:BF:7C:60:80:D5:0A:A7:EC:8C
Certificate issuer: /CN=5A5E26B1B0F12ABA275375436239BFDD76E5189A
Certificate serial: 4A3FD28F19DA336773C74AECC5CEC12E5D09B712
Authority key identifier: 5A:5E:26:B1:B0:F1:2A:BA:27:53:75:43:62:39:BF:DD:76:E5:18:9A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/323830343a336638303a3a2f33322d3332203d3e20323635383937.roa
Signing time: Wed 05 Mar 2025 19:52:43 +0000
ROA not before: Wed 05 Mar 2025 19:47:43 +0000
ROA not after: Wed 04 Mar 2026 19:52:43 +0000
asID: 265897
IP address blocks: 2804:3f80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.crl
rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 11 Apr 2025 21:12:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:3f:d2:8f:19:da:33:67:73:c7:4a:ec:c5:ce:c1:2e:5d:09:b7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A5E26B1B0F12ABA275375436239BFDD76E5189A
Validity
Not Before: Mar 5 19:47:43 2025 GMT
Not After : Mar 4 19:52:43 2026 GMT
Subject: CN=9EF899737A0DC061E99012BF7C6080D50AA7EC8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:72:9a:e9:97:99:13:36:96:8c:04:2d:2c:0a:
f4:77:28:92:ca:13:2c:77:94:ba:65:10:e5:41:c3:
94:e8:ac:de:f3:e9:93:a5:15:05:dc:ff:52:3e:01:
b3:18:bb:8b:4b:c7:84:3a:1d:c2:a8:fe:e8:76:d3:
7c:e0:9a:58:56:63:bf:8c:21:85:10:7c:f6:68:d4:
21:6b:30:16:d0:a8:a2:c4:5e:5c:1f:57:6c:a1:75:
3c:d9:fd:2c:64:e5:b7:d2:7a:d0:69:44:95:a0:e1:
cf:ea:9b:d3:12:a1:98:8f:36:48:62:83:b4:f3:b8:
65:db:7c:00:38:9f:b7:1d:0f:83:98:5e:af:aa:d4:
cc:3c:d1:9b:5c:40:cf:76:af:ac:36:7b:6f:95:df:
bd:02:8d:3c:ab:35:ca:ed:42:25:1b:15:69:17:53:
7c:81:07:7a:2b:78:91:b0:29:ba:1b:ea:0f:ad:df:
76:86:89:40:3a:d4:e0:f5:f9:b4:0e:5b:aa:9f:6f:
1f:6b:dd:7b:35:8b:88:99:19:7b:16:96:e2:c1:22:
a0:6b:25:b3:b5:83:d4:bc:3b:67:09:cd:b9:95:f8:
d6:d7:2e:ac:56:a4:a8:3d:bf:86:4a:25:0f:38:c4:
0b:65:5f:46:ef:2c:fa:20:7d:b2:d4:a0:0f:a8:bf:
70:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F8:99:73:7A:0D:C0:61:E9:90:12:BF:7C:60:80:D5:0A:A7:EC:8C
X509v3 Authority Key Identifier:
keyid:5A:5E:26:B1:B0:F1:2A:BA:27:53:75:43:62:39:BF:DD:76:E5:18:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/323830343a336638303a3a2f33322d3332203d3e20323635383937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3f80::/32
Signature Algorithm: sha256WithRSAEncryption
98:49:3f:a4:62:8e:9b:2d:a3:c8:fc:9b:72:65:77:8e:56:5d:
1b:f0:ad:7f:d7:95:26:07:2f:94:29:45:ea:0b:07:37:7f:ef:
51:c8:bb:0a:4d:03:95:cf:ac:a1:bf:cb:09:12:97:5d:56:6e:
f8:76:5e:1b:98:e9:b6:d8:e7:58:fc:72:37:25:e8:ab:ec:6e:
e1:99:1a:48:35:2d:46:f6:6f:57:89:e1:47:56:e7:6b:c2:11:
bc:86:64:b5:16:f2:94:c2:b4:01:b7:67:f0:4b:7e:51:64:91:
3e:22:67:81:40:80:b1:25:30:cb:61:8a:38:16:d3:19:94:f6:
33:28:91:25:07:63:06:d1:99:e7:3a:be:c8:f1:37:17:30:a9:
bf:81:7c:a1:15:45:0b:51:7f:2c:2e:1c:63:84:c8:55:14:dc:
e2:ee:48:87:83:26:f7:2f:01:ec:f3:42:76:a6:79:12:12:e3:
26:bd:87:b8:b5:3d:bf:f1:e6:18:48:cb:ec:89:13:0b:f5:ec:
a8:d0:ec:24:44:7b:38:02:6b:ef:09:90:43:cf:84:5d:f6:19:
a8:61:b2:c7:90:d0:1c:45:c1:43:a1:31:24:34:69:15:7d:16:
1b:58:8e:5c:e8:a7:bd:76:14:8d:3f:57:bb:a7:bb:2a:4f:62:
91:f4:16:cd
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSj/SjxnaM2dzx0rsxc7BLl0JtxIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE1RTI2QjFCMEYxMkFCQTI3NTM3NTQzNjIzOUJGREQ3
NkU1MTg5QTAeFw0yNTAzMDUxOTQ3NDNaFw0yNjAzMDQxOTUyNDNaMDMxMTAvBgNV
BAMTKDlFRjg5OTczN0EwREMwNjFFOTkwMTJCRjdDNjA4MEQ1MEFBN0VDOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbcprpl5kTNpaMBC0sCvR3KJLK
Eyx3lLplEOVBw5TorN7z6ZOlFQXc/1I+AbMYu4tLx4Q6HcKo/uh203zgmlhWY7+M
IYUQfPZo1CFrMBbQqKLEXlwfV2yhdTzZ/Sxk5bfSetBpRJWg4c/qm9MSoZiPNkhi
g7TzuGXbfAA4n7cdD4OYXq+q1Mw80ZtcQM92r6w2e2+V370CjTyrNcrtQiUbFWkX
U3yBB3oreJGwKbob6g+t33aGiUA61OD1+bQOW6qfbx9r3Xs1i4iZGXsWluLBIqBr
JbO1g9S8O2cJzbmV+NbXLqxWpKg9v4ZKJQ84xAtlX0bvLPogfbLUoA+ov3DrAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUnviZc3oNwGHpkBK/fGCA1Qqn7IwwHwYDVR0j
BBgwFoAUWl4msbDxKronU3VDYjm/3XblGJowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkRhUWpNMlpOZ2hRZDZrTTlCMUFjTnNmVVY0Rk1IWnpjMnUzb052eGQ5
ZzUvMS81QTVFMjZCMUIwRjEyQUJBMjc1Mzc1NDM2MjM5QkZERDc2RTUxODlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBNUUyNkIxQjBGMTJBQkEy
NzUzNzU0MzYyMzlCRkRENzZFNTE4OUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZEYVFqTTJaTmdoUWQ2a005QjFBY05zZlVWNEZNSFp6YzJ1M29OdnhkOWc1LzEv
MzIzODMwMzQzYTMzNjYzODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzgzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ/gDANBgkqhkiG9w0BAQsFAAOCAQEAmEk/pGKO
my2jyPybcmV3jlZdG/Ctf9eVJgcvlClF6gsHN3/vUci7Ck0Dlc+sob/LCRKXXVZu
+HZeG5jpttjnWPxyNyXoq+xu4ZkaSDUtRvZvV4nhR1bna8IRvIZktRbylMK0Abdn
8Et+UWSRPiJngUCAsSUwy2GKOBbTGZT2MyiRJQdjBtGZ5zq+yPE3FzCpv4F8oRVF
C1F/LC4cY4TIVRTc4u5Ih4Mm9y8B7PNCdqZ5EhLjJr2HuLU9v/HmGEjL7IkTC/Xs
qNDsJER7OAJr7wmQQ8+EXfYZqGGyx5DQHEXBQ6ExJDRpFX0WG1iOXOinvXYUjT9X
u6e7Kk9ikfQWzQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 01:29:44 2025 by rpki-client