Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HrcxeBmxXM9RtYXjuQ6PsotYtbEdrZHCE8cavqp5wfrc/1/323830343a383335383a3a2f33322d3438203d3e20323732313932.roa
File: 323830343a383335383a3a2f33322d3438203d3e20323732313932.roa (raw, json)
Hash identifier: HZLOwwFPOWp4SgJoULEX5k1gWxcRraAF+oCRN52KuX4=
Subject key identifier: 38:BD:D1:34:E7:F7:30:83:73:9D:32:08:F9:3E:25:1F:31:8D:0D:5C
Certificate issuer: /CN=4BEBE1FD76533487F2EE184784556E532323C3ED
Certificate serial: 6AB24F88A706F683565140B3E01B7207FD70A8A0
Authority key identifier: 4B:EB:E1:FD:76:53:34:87:F2:EE:18:47:84:55:6E:53:23:23:C3:ED
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BEBE1FD76533487F2EE184784556E532323C3ED.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HrcxeBmxXM9RtYXjuQ6PsotYtbEdrZHCE8cavqp5wfrc/1/323830343a383335383a3a2f33322d3438203d3e20323732313932.roa
Signing time: Thu 06 Mar 2025 04:01:06 +0000
ROA not before: Thu 06 Mar 2025 03:56:06 +0000
ROA not after: Thu 05 Mar 2026 04:01:06 +0000
asID: 272192
IP address blocks: 2804:8358::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HrcxeBmxXM9RtYXjuQ6PsotYtbEdrZHCE8cavqp5wfrc/1/4BEBE1FD76533487F2EE184784556E532323C3ED.crl
rsync://rpki-repo.registro.br/repo/HrcxeBmxXM9RtYXjuQ6PsotYtbEdrZHCE8cavqp5wfrc/1/4BEBE1FD76533487F2EE184784556E532323C3ED.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BEBE1FD76533487F2EE184784556E532323C3ED.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 11 Apr 2025 14:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:b2:4f:88:a7:06:f6:83:56:51:40:b3:e0:1b:72:07:fd:70:a8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BEBE1FD76533487F2EE184784556E532323C3ED
Validity
Not Before: Mar 6 03:56:06 2025 GMT
Not After : Mar 5 04:01:06 2026 GMT
Subject: CN=38BDD134E7F73083739D3208F93E251F318D0D5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:80:b1:de:3b:73:de:0e:72:99:5d:69:ee:
94:ee:0b:3f:f8:1d:e0:99:19:23:7a:9f:04:c1:77:
f4:0c:75:bd:fc:a1:01:2e:b3:0f:0a:09:d2:d1:e3:
04:6b:2c:b5:ad:ab:e9:7a:67:e2:2e:91:7e:00:3f:
c6:63:1b:c6:9f:89:c6:c8:3d:e1:3c:89:e8:6d:b6:
93:d9:4a:7d:3d:85:9b:18:38:63:76:92:b1:d4:39:
05:f3:37:8d:a0:63:4a:86:69:e5:0a:41:8b:c4:b7:
4c:cb:fa:fc:79:5e:f3:c7:d3:f3:32:5e:b6:46:d3:
a6:95:7c:78:32:ec:83:23:19:b6:13:5d:00:14:f3:
78:dd:a9:af:93:ae:ef:47:25:6c:c4:9f:7b:48:b2:
3f:77:6c:a0:41:fd:e8:3f:56:4e:04:1a:75:0a:b9:
63:10:26:01:a7:84:35:7f:55:42:df:a0:8b:8c:8c:
33:61:88:a5:c0:77:81:24:83:82:26:2c:02:67:9a:
b1:a9:85:e7:10:ba:68:24:e6:ea:4f:eb:f5:3a:b6:
a7:40:87:8e:aa:37:f6:0a:6d:47:67:a1:68:89:73:
fa:fb:a5:75:90:e1:72:7c:85:68:8d:f2:d8:86:ef:
d2:48:6c:7d:24:ba:2f:79:e7:d0:a1:9d:da:d9:3e:
ba:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BD:D1:34:E7:F7:30:83:73:9D:32:08:F9:3E:25:1F:31:8D:0D:5C
X509v3 Authority Key Identifier:
keyid:4B:EB:E1:FD:76:53:34:87:F2:EE:18:47:84:55:6E:53:23:23:C3:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HrcxeBmxXM9RtYXjuQ6PsotYtbEdrZHCE8cavqp5wfrc/1/4BEBE1FD76533487F2EE184784556E532323C3ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BEBE1FD76533487F2EE184784556E532323C3ED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrcxeBmxXM9RtYXjuQ6PsotYtbEdrZHCE8cavqp5wfrc/1/323830343a383335383a3a2f33322d3438203d3e20323732313932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8358::/32
Signature Algorithm: sha256WithRSAEncryption
4d:df:31:ce:ef:87:71:35:b6:77:ab:6e:87:08:cd:66:5b:68:
69:72:c5:f4:ec:e9:1f:26:3e:23:f4:6c:d1:37:98:e6:f3:b4:
ad:29:79:39:30:27:51:78:d6:9d:2b:5d:a5:21:89:ac:38:a3:
3a:92:52:57:cc:dc:a4:71:9c:89:6c:60:d6:92:0a:6a:ae:92:
13:8f:6c:00:2e:a2:a5:27:8a:a9:bc:47:dc:88:fa:4f:2b:48:
47:d4:2c:d4:79:f6:98:7f:c4:f4:40:a6:89:bf:8d:fb:59:e5:
24:15:38:8e:ec:da:47:32:6f:e3:4a:06:68:43:8c:4a:f9:11:
e1:f2:a4:f3:11:1d:bf:a1:bb:41:37:3b:6b:53:55:fd:6a:1c:
ac:40:89:6f:7d:64:db:a4:1d:68:ec:7f:ad:3c:81:57:db:e8:
6e:5c:48:cc:1d:c6:51:1e:69:91:3d:42:d4:74:16:e3:68:eb:
85:24:e8:33:04:a8:6b:2e:72:d8:4a:ee:12:3e:bb:62:72:ac:
5a:e6:78:27:6f:0c:ba:d2:80:25:76:e1:78:9f:20:3d:94:d3:
b9:7d:d8:4e:50:1a:56:50:bd:9b:ed:c9:cd:89:93:e0:73:00:
12:fd:e6:b6:95:d0:25:4b:98:c5:d2:98:67:f2:9b:83:79:bd:
a5:03:24:31
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUarJPiKcG9oNWUUCz4BtyB/1wqKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJFQkUxRkQ3NjUzMzQ4N0YyRUUxODQ3ODQ1NTZFNTMy
MzIzQzNFRDAeFw0yNTAzMDYwMzU2MDZaFw0yNjAzMDUwNDAxMDZaMDMxMTAvBgNV
BAMTKDM4QkREMTM0RTdGNzMwODM3MzlEMzIwOEY5M0UyNTFGMzE4RDBENUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC79oCx3jtz3g5ymV1p7pTuCz/4
HeCZGSN6nwTBd/QMdb38oQEusw8KCdLR4wRrLLWtq+l6Z+IukX4AP8ZjG8aficbI
PeE8iehttpPZSn09hZsYOGN2krHUOQXzN42gY0qGaeUKQYvEt0zL+vx5XvPH0/My
XrZG06aVfHgy7IMjGbYTXQAU83jdqa+Tru9HJWzEn3tIsj93bKBB/eg/Vk4EGnUK
uWMQJgGnhDV/VULfoIuMjDNhiKXAd4Ekg4ImLAJnmrGphecQumgk5upP6/U6tqdA
h46qN/YKbUdnoWiJc/r7pXWQ4XJ8hWiN8tiG79JIbH0kui9559ChndrZPrqxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUOL3RNOf3MINznTII+T4lHzGNDVwwHwYDVR0j
BBgwFoAUS+vh/XZTNIfy7hhHhFVuUyMjw+0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJjeGVCbXhYTTlSdFlYanVRNlBzb3RZdGJFZHJaSENFOGNhdnFwNXdm
cmMvMS80QkVCRTFGRDc2NTMzNDg3RjJFRTE4NDc4NDU1NkU1MzIzMjNDM0VELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCRUJFMUZENzY1MzM0ODdG
MkVFMTg0Nzg0NTU2RTUzMjMyM0MzRUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyY3hlQm14WE05UnRZWGp1UTZQc290WXRiRWRyWkhDRThjYXZxcDV3ZnJjLzEv
MzIzODMwMzQzYTM4MzMzNTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMy
MzEzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASDWDANBgkqhkiG9w0BAQsFAAOCAQEATd8xzu+H
cTW2d6tuhwjNZltoaXLF9OzpHyY+I/Rs0TeY5vO0rSl5OTAnUXjWnStdpSGJrDij
OpJSV8zcpHGciWxg1pIKaq6SE49sAC6ipSeKqbxH3Ij6TytIR9Qs1Hn2mH/E9ECm
ib+N+1nlJBU4juzaRzJv40oGaEOMSvkR4fKk8xEdv6G7QTc7a1NV/WocrECJb31k
26QdaOx/rTyBV9voblxIzB3GUR5pkT1C1HQW42jrhSToMwSoay5y2EruEj67YnKs
WuZ4J28MutKAJXbheJ8gPZTTuX3YTlAaVlC9m+3JzYmT4HMAEv3mtpXQJUuYxdKY
Z/Kbg3m9pQMkMQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 02:04:27 2025 by rpki-client