Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/323830343a346262303a3a2f33322d3438203d3e20323637333234.roa
File: 323830343a346262303a3a2f33322d3438203d3e20323637333234.roa (raw, json)
Hash identifier: VJdH/xHpD6ecg3kwn9yL7bslKKlhAKJoZBYlUI+LMxk=
Subject key identifier: 95:0B:35:8E:30:78:84:CD:B1:0F:5A:7F:A2:34:62:46:2D:B5:9E:FC
Certificate issuer: /CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4
Certificate serial: 4A57A0D9B1A29FF2E8010BAE130C1A40F9B4E38B
Authority key identifier: CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/323830343a346262303a3a2f33322d3438203d3e20323637333234.roa
Signing time: Thu 06 Mar 2025 04:01:05 +0000
ROA not before: Thu 06 Mar 2025 03:56:05 +0000
ROA not after: Thu 05 Mar 2026 04:01:05 +0000
asID: 267324
IP address blocks: 2804:4bb0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl
rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 10 Apr 2025 08:40:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:57:a0:d9:b1:a2:9f:f2:e8:01:0b:ae:13:0c:1a:40:f9:b4:e3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4
Validity
Not Before: Mar 6 03:56:05 2025 GMT
Not After : Mar 5 04:01:05 2026 GMT
Subject: CN=950B358E307884CDB10F5A7FA23462462DB59EFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:fb:7e:6c:44:78:86:2c:0f:fb:19:93:c5:
8e:46:74:f4:e7:d6:91:77:49:f0:15:27:60:54:ed:
79:4f:7e:d8:41:4b:f4:3e:7e:02:a0:1f:fa:b4:35:
1b:8b:a8:a7:2c:a4:5b:68:60:b5:e2:bd:12:88:89:
5a:31:fd:76:3d:ae:ce:00:b9:25:04:07:84:03:f7:
45:61:88:20:11:11:82:ef:9b:a1:67:93:cf:bc:14:
e1:4e:aa:0b:eb:38:23:3d:af:66:6b:b2:63:9b:62:
01:5b:7b:df:58:aa:e3:aa:c9:f7:83:d6:01:4b:18:
f4:45:13:85:e1:e6:20:68:fa:31:6c:67:94:dd:a7:
c6:b4:6e:04:fa:e2:2c:01:87:c6:14:cb:d2:70:e1:
c2:60:8a:19:f9:ed:37:01:bd:18:08:1c:16:06:9e:
57:f2:8a:b0:4d:ea:e5:77:10:7c:c7:26:6d:a4:71:
ec:6c:32:d9:ae:62:33:45:94:2e:72:ce:87:c6:8d:
6a:ed:c3:b5:4d:4d:60:86:5a:5f:63:30:14:f7:ab:
a9:e1:25:19:20:01:3a:66:46:26:c2:bd:0d:be:49:
07:b7:49:89:ac:40:44:89:65:d0:ec:8d:5e:60:c4:
54:e9:f6:ca:54:8f:7e:ad:c3:31:82:80:1f:57:ba:
64:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0B:35:8E:30:78:84:CD:B1:0F:5A:7F:A2:34:62:46:2D:B5:9E:FC
X509v3 Authority Key Identifier:
keyid:CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/323830343a346262303a3a2f33322d3438203d3e20323637333234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4bb0::/32
Signature Algorithm: sha256WithRSAEncryption
10:b0:e7:07:62:b5:91:c3:9a:24:3b:11:ce:27:ad:b3:3f:1c:
d2:18:3a:3b:30:93:be:dd:49:5a:af:fd:d8:36:c3:d0:94:9d:
e3:a9:be:95:03:5e:66:57:c8:6e:1b:56:c1:77:39:bc:04:5e:
86:90:22:da:aa:b3:38:d2:b0:b5:f4:42:86:f4:34:40:48:94:
bf:2b:ec:15:31:d2:ec:95:c4:73:6f:cc:27:30:f9:f4:98:11:
11:18:7b:f6:e2:ba:89:68:c1:1f:8c:a8:f2:f8:68:d5:a2:59:
ff:d0:e1:38:36:c4:95:bf:87:20:60:e3:12:89:32:5d:06:b1:
89:f0:2d:d6:d8:d1:23:c3:3f:da:9b:97:eb:bb:b3:92:18:f2:
b8:85:bc:b8:07:4e:83:35:b9:f6:ef:ba:05:5e:76:c5:96:91:
20:66:28:c8:c5:bb:1a:d7:d1:42:7e:89:d0:5e:f8:1a:3e:02:
4e:d2:78:96:13:ff:2e:75:cc:e5:c5:cd:47:54:b8:f9:d8:a9:
9e:02:9f:e8:65:7d:0a:2a:3a:50:a7:17:63:e7:97:7b:09:f0:
3f:13:1f:47:80:dd:2d:10:5e:a5:43:c7:97:eb:cf:ee:55:51:
e2:09:d8:2f:33:c0:a6:9f:14:97:2b:72:d6:21:51:bb:7b:5a:
94:6a:ff:3b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSleg2bGin/LoAQuuEwwaQPm044swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q2ODE4MjVBNzVGM0RGM0IwMzNEMzU0NEY4ODI2NDg4
RjNGQThBNDAeFw0yNTAzMDYwMzU2MDVaFw0yNjAzMDUwNDAxMDVaMDMxMTAvBgNV
BAMTKDk1MEIzNThFMzA3ODg0Q0RCMTBGNUE3RkEyMzQ2MjQ2MkRCNTlFRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF//t+bER4hiwP+xmTxY5GdPTn
1pF3SfAVJ2BU7XlPfthBS/Q+fgKgH/q0NRuLqKcspFtoYLXivRKIiVox/XY9rs4A
uSUEB4QD90VhiCAREYLvm6Fnk8+8FOFOqgvrOCM9r2ZrsmObYgFbe99YquOqyfeD
1gFLGPRFE4Xh5iBo+jFsZ5Tdp8a0bgT64iwBh8YUy9Jw4cJgihn57TcBvRgIHBYG
nlfyirBN6uV3EHzHJm2kcexsMtmuYjNFlC5yzofGjWrtw7VNTWCGWl9jMBT3q6nh
JRkgATpmRibCvQ2+SQe3SYmsQESJZdDsjV5gxFTp9spUj36twzGCgB9XumT/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUlQs1jjB4hM2xD1p/ojRiRi21nvwwHwYDVR0j
BBgwFoAUzWgYJadfPfOwM9NUT4gmSI8/qKQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDR5cExVd2Uya3ZubWpnWFluTlpEeUQyUzNKYzZRc3lnb1RhQThNUkw5
aW4vMS9DRDY4MTgyNUE3NUYzREYzQjAzM0QzNTQ0Rjg4MjY0ODhGM0ZBOEE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NENjgxODI1QTc1RjNERjNC
MDMzRDM1NDRGODgyNjQ4OEYzRkE4QTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g0eXBMVXdlMmt2bm1qZ1hZbk5aRHlEMlMzSmM2UXN5Z29UYUE4TVJMOWluLzEv
MzIzODMwMzQzYTM0NjI2MjMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzMzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARLsDANBgkqhkiG9w0BAQsFAAOCAQEAELDnB2K1
kcOaJDsRzietsz8c0hg6OzCTvt1JWq/92DbD0JSd46m+lQNeZlfIbhtWwXc5vARe
hpAi2qqzONKwtfRChvQ0QEiUvyvsFTHS7JXEc2/MJzD59JgRERh79uK6iWjBH4yo
8vho1aJZ/9DhODbElb+HIGDjEokyXQaxifAt1tjRI8M/2puX67uzkhjyuIW8uAdO
gzW59u+6BV52xZaRIGYoyMW7GtfRQn6J0F74Gj4CTtJ4lhP/LnXM5cXNR1S4+dip
ngKf6GV9Cio6UKcXY+eXewnwPxMfR4DdLRBepUPHl+vP7lVR4gnYLzPApp8Ulyty
1iFRu3talGr/Ow==
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:30:24 2025 by rpki-client