Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/323830343a386264383a3a2f33322d313238203d3e20323733373633.roa
File: 323830343a386264383a3a2f33322d313238203d3e20323733373633.roa (raw, json)
Hash identifier: x2RASG8oUkkKHOt5D2/hfCWIXMlKowWVRp9kxJNZnO0=
Subject key identifier: 0B:7C:A8:42:03:69:29:ED:51:E9:B6:25:EF:0E:81:70:49:5F:DF:3E
Certificate issuer: /CN=FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD
Certificate serial: 36D9542C33AE97821E66EE29043734A4DBF044E3
Authority key identifier: FE:37:39:3A:C5:C8:D2:83:40:27:EE:7B:AE:80:CB:6B:AA:05:1C:AD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/323830343a386264383a3a2f33322d313238203d3e20323733373633.roa
Signing time: Thu 06 Mar 2025 15:54:52 +0000
ROA not before: Thu 06 Mar 2025 15:49:52 +0000
ROA not after: Thu 05 Mar 2026 15:54:52 +0000
asID: 273763
IP address blocks: 2804:8bd8::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.crl
rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 20:21:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:d9:54:2c:33:ae:97:82:1e:66:ee:29:04:37:34:a4:db:f0:44:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD
Validity
Not Before: Mar 6 15:49:52 2025 GMT
Not After : Mar 5 15:54:52 2026 GMT
Subject: CN=0B7CA842036929ED51E9B625EF0E8170495FDF3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:42:c0:7c:ba:06:9a:19:40:9e:f2:39:62:
1e:ec:41:77:49:79:a7:08:8d:86:cf:42:15:7d:00:
32:33:09:f8:88:58:4b:bb:57:a1:17:37:cb:13:b4:
2e:27:51:04:e5:e2:9d:52:ab:ef:1c:37:03:46:93:
07:a8:d4:bb:18:92:de:2d:ce:be:cd:5e:7d:f7:9c:
42:75:f3:e6:c5:7c:67:60:23:e5:e3:36:fa:9d:f5:
da:4b:e5:79:38:ac:17:17:72:06:c0:bb:13:bd:ad:
2e:49:9a:b2:6a:b7:30:da:bb:cc:a9:55:ac:7a:37:
94:53:27:49:15:98:2e:ba:2f:bc:22:69:a6:f4:0c:
75:02:42:3d:e0:38:d7:48:d0:e8:1d:cd:fe:a2:a6:
41:fd:fb:8d:3a:a2:f9:8a:45:61:d4:da:b1:31:7c:
99:a6:ae:78:05:6c:25:df:94:4d:f3:0a:20:25:ad:
a6:63:32:84:7f:d7:15:2d:77:56:a8:13:e8:26:d0:
fa:6e:2a:9f:d9:a3:07:74:70:91:ef:05:d4:d5:49:
60:2a:b3:b9:22:ab:c4:3e:b5:08:fa:df:53:26:e1:
ff:d1:b8:98:60:0a:cc:21:c8:71:db:48:c5:44:a1:
88:7c:59:15:ff:8b:c9:c2:0c:6d:f5:66:0f:d6:a5:
fb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7C:A8:42:03:69:29:ED:51:E9:B6:25:EF:0E:81:70:49:5F:DF:3E
X509v3 Authority Key Identifier:
keyid:FE:37:39:3A:C5:C8:D2:83:40:27:EE:7B:AE:80:CB:6B:AA:05:1C:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/323830343a386264383a3a2f33322d313238203d3e20323733373633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8bd8::/32
Signature Algorithm: sha256WithRSAEncryption
16:1e:b3:04:f1:fb:9f:d6:a9:c5:3a:f8:f1:e5:14:3e:0a:2d:
6d:c8:ca:5e:f5:bb:a5:43:11:cc:38:85:8f:63:7e:eb:f9:63:
b6:52:70:76:e4:9f:76:f7:ae:91:5b:f4:4c:63:38:e3:23:41:
a9:4b:83:22:35:7f:9a:b3:a2:fc:f4:0f:47:96:51:c6:3a:36:
3f:73:0d:62:31:1f:cc:a9:ee:ca:fd:1f:55:38:53:33:8f:50:
1e:97:b6:c6:45:71:a6:ea:20:0c:e6:4d:cf:b2:ba:d1:98:80:
ba:56:6c:42:91:38:45:1f:ad:99:1c:a2:2f:a8:ad:5d:48:e8:
23:2a:94:47:5c:10:5f:45:14:a6:ed:1e:a9:10:ff:1c:7e:e1:
bd:cd:ef:aa:02:6a:9d:2e:c6:71:4c:ec:0d:3c:4e:de:0d:7e:
82:35:b2:33:0a:5b:9b:a7:17:5f:58:2a:fe:d0:ae:14:4e:80:
85:bf:43:d0:09:49:71:2e:b5:5c:dc:a6:4c:d6:da:1b:db:bf:
e9:8b:3c:df:55:8b:cc:8d:9f:52:ec:be:72:66:ef:0b:39:d5:
a4:e6:27:06:69:f4:62:98:03:2a:de:a3:93:21:9c:c0:6c:e8:
0b:85:da:5d:b9:5a:5f:2c:0d:18:dc:1e:99:de:93:b5:63:54:
82:6e:6d:63
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNtlULDOul4IeZu4pBDc0pNvwROMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkUzNzM5M0FDNUM4RDI4MzQwMjdFRTdCQUU4MENCNkJB
QTA1MUNBRDAeFw0yNTAzMDYxNTQ5NTJaFw0yNjAzMDUxNTU0NTJaMDMxMTAvBgNV
BAMTKDBCN0NBODQyMDM2OTI5RUQ1MUU5QjYyNUVGMEU4MTcwNDk1RkRGM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+5ELAfLoGmhlAnvI5Yh7sQXdJ
eacIjYbPQhV9ADIzCfiIWEu7V6EXN8sTtC4nUQTl4p1Sq+8cNwNGkweo1LsYkt4t
zr7NXn33nEJ18+bFfGdgI+XjNvqd9dpL5Xk4rBcXcgbAuxO9rS5JmrJqtzDau8yp
Vax6N5RTJ0kVmC66L7wiaab0DHUCQj3gONdI0Ogdzf6ipkH9+406ovmKRWHU2rEx
fJmmrngFbCXflE3zCiAlraZjMoR/1xUtd1aoE+gm0PpuKp/Zowd0cJHvBdTVSWAq
s7kiq8Q+tQj631Mm4f/RuJhgCswhyHHbSMVEoYh8WRX/i8nCDG31Zg/WpfshAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUC3yoQgNpKe1R6bYl7w6BcElf3z4wHwYDVR0j
BBgwFoAU/jc5OsXI0oNAJ+57roDLa6oFHK0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9NcVlXU2Z5R2dKbWMzcEJ0R2NpN2dOcU1ZYlllZTNvajRpZzM3WjhtekN6
LzEvRkUzNzM5M0FDNUM4RDI4MzQwMjdFRTdCQUU4MENCNkJBQTA1MUNBRC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GRTM3MzkzQUM1QzhEMjgzNDAy
N0VFN0JBRTgwQ0I2QkFBMDUxQ0FELmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9N
cVlXU2Z5R2dKbWMzcEJ0R2NpN2dOcU1ZYlllZTNvajRpZzM3WjhtekN6LzEvMzIz
ODMwMzQzYTM4NjI2NDM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3MzMz
NzM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBIvYMA0GCSqGSIb3DQEBCwUAA4IBAQAWHrME8fuf
1qnFOvjx5RQ+Ci1tyMpe9bulQxHMOIWPY37r+WO2UnB25J92966RW/RMYzjjI0Gp
S4MiNX+as6L89A9HllHGOjY/cw1iMR/Mqe7K/R9VOFMzj1Ael7bGRXGm6iAM5k3P
srrRmIC6VmxCkThFH62ZHKIvqK1dSOgjKpRHXBBfRRSm7R6pEP8cfuG9ze+qAmqd
LsZxTOwNPE7eDX6CNbIzClubpxdfWCr+0K4UToCFv0PQCUlxLrVc3KZM1tob27/p
izzfVYvMjZ9S7L5yZu8LOdWk5icGafRimAMq3qOTIZzAbOgLhdpduVpfLA0Y3B6Z
3pO1Y1SCbm1j
-----END CERTIFICATE-----
Generated at Thu Apr 17 13:31:11 2025 by rpki-client