Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/323830343a336635343a3130303a3a2f34302d3430203d3e203533313835.roa
File: 323830343a336635343a3130303a3a2f34302d3430203d3e203533313835.roa (raw, json)
Hash identifier: UDICf61ydrt8vnuRcgqQyLpBx1glsSSUpENmNSOIJug=
Subject key identifier: 67:A8:48:BC:11:5B:74:7A:B1:F7:7B:ED:9F:DE:80:64:52:CA:E6:C1
Certificate issuer: /CN=94C381CC9333C07A86D3A11282068476C5196FE6
Certificate serial: 37681C9D2641445577AF21F2AEB652F874732B01
Authority key identifier: 94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/323830343a336635343a3130303a3a2f34302d3430203d3e203533313835.roa
Signing time: Thu 06 Mar 2025 18:39:22 +0000
ROA not before: Thu 06 Mar 2025 18:34:22 +0000
ROA not after: Thu 05 Mar 2026 18:39:22 +0000
asID: 53185
IP address blocks: 2804:3f54:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl
rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 04:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:68:1c:9d:26:41:44:55:77:af:21:f2:ae:b6:52:f8:74:73:2b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94C381CC9333C07A86D3A11282068476C5196FE6
Validity
Not Before: Mar 6 18:34:22 2025 GMT
Not After : Mar 5 18:39:22 2026 GMT
Subject: CN=67A848BC115B747AB1F77BED9FDE806452CAE6C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:aa:e9:02:5c:d0:4d:65:5e:85:83:f3:4f:45:
af:67:49:4b:9e:20:56:dc:ca:02:28:ee:67:86:23:
c1:94:ac:6f:a3:88:94:f9:86:b7:05:77:81:66:37:
96:d6:ba:2d:f5:b8:42:a1:5a:a0:5d:09:95:ec:5b:
08:6e:2c:08:26:df:b2:93:ba:fa:95:9a:d2:cc:cf:
c4:a8:db:02:82:15:53:47:24:0d:a4:5d:43:c7:ca:
c5:f3:64:7b:75:20:7a:ff:55:03:c7:e3:e6:1f:3b:
d4:09:01:ed:cf:0d:d8:df:4b:c6:36:ec:fa:c0:17:
0e:ca:8e:76:1d:7c:62:f2:ac:4d:fb:f9:04:1c:28:
1b:cd:a4:18:54:35:c0:e8:b2:db:31:79:b5:6d:1a:
c3:85:3f:a1:ed:20:0c:75:1f:80:a2:53:4c:f6:7f:
3f:d8:32:ab:a7:93:e6:b5:8f:61:db:01:a9:41:19:
5d:ea:ed:66:4f:96:d6:ed:b9:d0:c6:09:1b:3b:af:
01:62:98:b8:5c:6c:41:76:5a:d1:e4:18:a2:33:a0:
98:4d:02:39:ac:13:ec:8a:e1:a8:11:bc:a2:df:a9:
a7:dc:f2:03:6c:1e:7e:4d:71:78:a7:0d:2c:97:5c:
4a:b7:6f:c4:81:c2:8e:85:bb:3e:09:6a:b0:fc:3c:
bc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A8:48:BC:11:5B:74:7A:B1:F7:7B:ED:9F:DE:80:64:52:CA:E6:C1
X509v3 Authority Key Identifier:
keyid:94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/323830343a336635343a3130303a3a2f34302d3430203d3e203533313835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3f54:100::/40
Signature Algorithm: sha256WithRSAEncryption
7c:4d:22:23:d1:7f:f2:8e:3f:2e:c6:42:db:31:fa:fe:c2:48:
1a:da:69:20:5c:fa:7d:44:4f:d9:7d:28:97:66:14:24:7a:9f:
15:02:af:51:bb:c7:cb:19:d5:0d:55:ea:72:81:b1:b9:ca:0d:
0a:9f:8a:cd:4d:07:14:20:f1:29:04:8c:0f:86:28:07:4f:f6:
6d:9a:9d:46:4e:4a:e8:95:00:f8:5a:91:f5:3a:ab:3a:21:c6:
42:3b:c1:02:48:8d:0e:6e:ed:71:27:db:0f:64:b9:df:e6:9b:
32:6c:cf:8e:10:b5:1d:9c:3c:2b:68:d4:3b:b6:3e:f2:fd:3b:
6f:a8:3a:e3:9c:be:2c:50:82:ec:e7:2f:ea:a3:d8:91:d0:0b:
75:a8:8e:40:fd:56:2e:b2:4b:00:13:4f:16:3e:0b:e1:81:d0:
c9:00:85:49:fc:31:c6:a1:52:07:07:fb:dd:ae:d3:58:45:e4:
21:ac:3d:10:78:0b:17:11:1b:9e:4c:be:80:f3:66:54:28:3c:
d8:dc:75:7c:46:ff:23:7f:d3:c6:d4:ff:2d:32:e3:94:f8:37:
42:e1:ef:70:14:64:d6:48:b8:c7:eb:91:6c:97:2e:19:6c:8f:
af:f4:63:9d:61:d2:a5:f2:32:75:a5:3e:19:b8:61:74:f6:4e:
11:32:08:15
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUN2gcnSZBRFV3ryHyrrZS+HRzKwEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRDMzgxQ0M5MzMzQzA3QTg2RDNBMTEyODIwNjg0NzZD
NTE5NkZFNjAeFw0yNTAzMDYxODM0MjJaFw0yNjAzMDUxODM5MjJaMDMxMTAvBgNV
BAMTKDY3QTg0OEJDMTE1Qjc0N0FCMUY3N0JFRDlGREU4MDY0NTJDQUU2QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaqukCXNBNZV6Fg/NPRa9nSUue
IFbcygIo7meGI8GUrG+jiJT5hrcFd4FmN5bWui31uEKhWqBdCZXsWwhuLAgm37KT
uvqVmtLMz8So2wKCFVNHJA2kXUPHysXzZHt1IHr/VQPH4+YfO9QJAe3PDdjfS8Y2
7PrAFw7KjnYdfGLyrE37+QQcKBvNpBhUNcDostsxebVtGsOFP6HtIAx1H4CiU0z2
fz/YMqunk+a1j2HbAalBGV3q7WZPltbtudDGCRs7rwFimLhcbEF2WtHkGKIzoJhN
AjmsE+yK4agRvKLfqafc8gNsHn5NcXinDSyXXEq3b8SBwo6Fuz4JarD8PLzJAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUZ6hIvBFbdHqx93vtn96AZFLK5sEwHwYDVR0j
BBgwFoAUlMOBzJMzwHqG06ESggaEdsUZb+YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlB0Smd1Q1ByZHJ3ZFUyMVdUV0wyOTFyVnpOaWdrYk0yODVINGZXVVBV
M0gvMS85NEMzODFDQzkzMzNDMDdBODZEM0ExMTI4MjA2ODQ3NkM1MTk2RkU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0QzM4MUNDOTMzM0MwN0E4
NkQzQTExMjgyMDY4NDc2QzUxOTZGRTYuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZQdEpndUNQcmRyd2RVMjFXVFdMMjkxclZ6Tmlna2JNMjg1SDRmV1VQVTNILzEv
MzIzODMwMzQzYTMzNjYzNTM0M2EzMTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzNTMzMzEzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAQ/VAEwDQYJKoZIhvcNAQELBQADggEB
AHxNIiPRf/KOPy7GQtsx+v7CSBraaSBc+n1ET9l9KJdmFCR6nxUCr1G7x8sZ1Q1V
6nKBsbnKDQqfis1NBxQg8SkEjA+GKAdP9m2anUZOSuiVAPhakfU6qzohxkI7wQJI
jQ5u7XEn2w9kud/mmzJsz44QtR2cPCto1Du2PvL9O2+oOuOcvixQguznL+qj2JHQ
C3WojkD9Vi6ySwATTxY+C+GB0MkAhUn8McahUgcH+92u01hF5CGsPRB4CxcRG55M
voDzZlQoPNjcdXxG/yN/08bU/y0y45T4N0Lh73AUZNZIuMfrkWyXLhlsj6/0Y51h
0qXyMnWlPhm4YXT2ThEyCBU=
-----END CERTIFICATE-----
Generated at Sun Apr 13 16:43:09 2025 by rpki-client