Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J7wPLxobGZUuKfUKstopvBiDWqUNaTqH6cheqLBkqpa1/0/323830343a336334343a3a2f33322d3438203d3e20323636323030.roa
File: 323830343a336334343a3a2f33322d3438203d3e20323636323030.roa (raw, json)
Hash identifier: nk/utM+tR0YW34NmCpFzcMQNzQt33eQ4dU98KR9KL+o=
Subject key identifier: AF:36:C8:55:7E:91:19:35:58:13:0F:E2:20:E0:94:11:F4:60:EF:AD
Certificate issuer: /CN=2001EDAB33F718E926EE051A5D4EEFC09551D26A
Certificate serial: 530343BCAB85A309A0849370BCF95C1266BD43CC
Authority key identifier: 20:01:ED:AB:33:F7:18:E9:26:EE:05:1A:5D:4E:EF:C0:95:51:D2:6A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2001EDAB33F718E926EE051A5D4EEFC09551D26A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J7wPLxobGZUuKfUKstopvBiDWqUNaTqH6cheqLBkqpa1/0/323830343a336334343a3a2f33322d3438203d3e20323636323030.roa
Signing time: Tue 18 Mar 2025 17:04:43 +0000
ROA not before: Tue 18 Mar 2025 16:59:43 +0000
ROA not after: Tue 17 Mar 2026 17:04:43 +0000
asID: 266200
IP address blocks: 2804:3c44::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/J7wPLxobGZUuKfUKstopvBiDWqUNaTqH6cheqLBkqpa1/0/2001EDAB33F718E926EE051A5D4EEFC09551D26A.crl
rsync://rpki-repo.registro.br/repo/J7wPLxobGZUuKfUKstopvBiDWqUNaTqH6cheqLBkqpa1/0/2001EDAB33F718E926EE051A5D4EEFC09551D26A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2001EDAB33F718E926EE051A5D4EEFC09551D26A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 04:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:03:43:bc:ab:85:a3:09:a0:84:93:70:bc:f9:5c:12:66:bd:43:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2001EDAB33F718E926EE051A5D4EEFC09551D26A
Validity
Not Before: Mar 18 16:59:43 2025 GMT
Not After : Mar 17 17:04:43 2026 GMT
Subject: CN=AF36C8557E91193558130FE220E09411F460EFAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8b:60:6c:a9:ec:3a:c8:28:6a:b6:53:fd:5e:
10:91:02:07:b4:9f:70:91:35:75:51:cb:e4:66:42:
a7:ae:a2:c4:b3:4a:6b:c4:7a:58:f6:87:00:e2:85:
6e:72:f1:1f:5e:97:65:aa:43:17:4b:26:41:d6:1d:
c3:2f:bc:e6:5f:c3:ee:60:7f:0d:44:35:75:18:b8:
9f:0a:c0:a9:85:f0:1f:11:8d:cc:2c:a4:66:23:69:
55:c9:5c:7e:9e:5f:e7:f0:88:ef:04:48:31:c1:e2:
ec:ae:7b:77:c7:c2:33:83:ad:b0:99:6d:00:23:35:
4e:da:66:ce:9e:9e:7a:58:1c:cd:14:85:3a:5f:70:
5b:b8:ea:f2:b8:04:2b:92:46:0d:7e:68:eb:92:a1:
c4:7f:be:f6:ea:4c:d3:93:27:bc:bd:3a:0c:86:77:
9e:5b:f9:b3:cc:85:a1:77:50:5d:97:80:06:1c:96:
50:72:50:37:61:d4:2f:f9:e3:7d:fe:9e:c3:94:68:
a8:e8:04:59:ae:98:cf:e9:6b:81:f8:ce:39:f2:77:
57:61:e2:79:ef:f0:89:c0:b8:a4:b6:29:6b:0e:49:
20:22:c8:72:2c:84:c4:51:97:cb:43:58:3b:e8:6d:
ba:7f:ab:f9:12:0a:ba:9e:72:53:de:a2:a7:b9:23:
3f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:36:C8:55:7E:91:19:35:58:13:0F:E2:20:E0:94:11:F4:60:EF:AD
X509v3 Authority Key Identifier:
keyid:20:01:ED:AB:33:F7:18:E9:26:EE:05:1A:5D:4E:EF:C0:95:51:D2:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J7wPLxobGZUuKfUKstopvBiDWqUNaTqH6cheqLBkqpa1/0/2001EDAB33F718E926EE051A5D4EEFC09551D26A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2001EDAB33F718E926EE051A5D4EEFC09551D26A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7wPLxobGZUuKfUKstopvBiDWqUNaTqH6cheqLBkqpa1/0/323830343a336334343a3a2f33322d3438203d3e20323636323030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3c44::/32
Signature Algorithm: sha256WithRSAEncryption
58:9c:4b:2a:1b:6e:e3:78:46:fe:72:e9:66:b0:d8:f3:ea:d8:
bd:7d:32:23:d5:8c:64:fa:da:bf:0b:31:bf:71:a8:27:c3:0a:
ca:08:c2:04:63:34:ac:96:85:68:73:38:de:66:c4:f3:9a:60:
7c:ff:23:b0:f3:eb:c9:81:02:10:d9:d9:df:ea:9d:bd:05:be:
70:2e:2d:00:0d:93:c0:c1:f7:d6:e6:a6:58:17:00:7b:4a:c0:
df:2d:45:5f:7e:72:48:ab:c2:af:68:8c:ca:fd:84:4f:3a:29:
7d:30:1f:f5:b1:c8:3f:93:18:36:a2:ef:0d:3b:57:02:7a:79:
7a:23:1e:45:0d:2b:44:f0:db:24:8b:44:b2:3e:a0:e6:4c:75:
ad:89:de:6b:15:a1:40:d2:d5:d1:27:09:b3:b8:93:1f:9b:a5:
76:f5:dc:96:8e:d0:b3:b5:ef:d4:72:16:c3:12:d2:c0:52:3d:
4a:5a:ed:e0:ad:c9:7c:52:36:99:bf:f8:be:29:eb:13:af:72:
cd:3f:f8:f7:8d:63:e1:67:d5:34:7d:cc:15:55:00:0b:9f:88:
c5:f6:1a:6d:85:31:0c:cf:9d:9c:43:0d:11:8e:7c:7a:8d:38:
b3:3d:19:d1:93:54:10:bb:49:5d:a6:55:e9:07:fc:a4:5d:fe:
7f:eb:99:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:11:07 2025 by rpki-client