Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/323830343a313230303a3a2f33322d313238203d3e20323633343530.roa
File: 323830343a313230303a3a2f33322d313238203d3e20323633343530.roa (raw, json)
Hash identifier: xf5V30GrFuexySATg7rUcR1aWqQpdI2Wh0yrR3PUOME=
Subject key identifier: 64:06:F2:20:43:42:57:36:8B:03:77:C6:EF:C9:5E:EB:DC:82:90:D1
Certificate issuer: /CN=5E82705FF857324984E1087AAFCCE6BD46657C71
Certificate serial: 451614125A2489AC2A95309651C4DD0344922105
Authority key identifier: 5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/323830343a313230303a3a2f33322d313238203d3e20323633343530.roa
Signing time: Wed 05 Feb 2025 13:10:40 +0000
ROA not before: Wed 05 Feb 2025 13:05:40 +0000
ROA not after: Wed 04 Feb 2026 13:10:40 +0000
asID: 263450
IP address blocks: 2804:1200::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.crl
rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 20:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:16:14:12:5a:24:89:ac:2a:95:30:96:51:c4:dd:03:44:92:21:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E82705FF857324984E1087AAFCCE6BD46657C71
Validity
Not Before: Feb 5 13:05:40 2025 GMT
Not After : Feb 4 13:10:40 2026 GMT
Subject: CN=6406F220434257368B0377C6EFC95EEBDC8290D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0d:a6:52:26:7c:27:73:bc:a6:7c:1f:72:70:
df:b1:d3:d5:b7:0e:23:4e:83:a3:2c:07:45:e1:ca:
8b:3f:4f:3c:91:bd:68:62:e5:6c:24:aa:3e:2d:fc:
ce:25:ed:9e:e7:99:b0:4f:55:91:db:a3:16:61:0a:
1f:09:eb:5c:58:42:e7:10:ac:08:24:66:81:e7:df:
79:18:ca:df:7e:f8:be:ee:0a:e6:69:3d:6f:5e:2b:
79:13:27:56:9b:91:7e:73:34:86:bf:f8:b7:fe:4e:
df:0b:34:2f:fc:3a:92:4a:69:0a:57:2c:3e:08:5e:
75:64:b5:22:6c:b7:60:fd:0b:cd:1b:25:25:91:d1:
ea:f4:16:73:ca:9a:c9:46:c0:b2:6b:52:8e:14:cb:
8f:a9:58:f1:4d:e0:5a:f3:ce:ac:9c:e3:52:9d:d6:
2b:23:4c:9a:55:1b:e0:70:d9:a6:b5:d7:69:87:12:
82:28:a8:5e:0f:ab:28:59:c4:3a:4e:da:30:bc:55:
54:34:09:ed:1a:67:a9:11:46:46:ee:4c:f5:be:a4:
64:bc:18:cf:c0:44:91:ab:f3:65:d0:6e:3c:15:7e:
16:2c:d5:75:01:13:d6:55:ae:3e:94:fa:4d:e0:37:
a3:32:5d:33:cc:be:d7:4f:2c:8a:d7:6a:0c:d6:fd:
d8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:06:F2:20:43:42:57:36:8B:03:77:C6:EF:C9:5E:EB:DC:82:90:D1
X509v3 Authority Key Identifier:
keyid:5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/323830343a313230303a3a2f33322d313238203d3e20323633343530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1200::/32
Signature Algorithm: sha256WithRSAEncryption
0d:6e:bc:dd:e8:98:93:29:b2:5a:2d:42:b3:e1:a3:1b:e6:6f:
0a:5e:ae:2f:85:41:8b:28:0e:ae:22:c0:a2:b8:87:1e:c4:83:
fc:15:a4:d2:6b:4b:dd:5b:48:d6:eb:87:94:e7:ee:c5:30:90:
5a:13:6b:51:1c:35:2a:9e:1f:fe:35:13:39:5b:44:3f:55:23:
76:40:08:c3:bf:24:54:75:6c:f9:ab:42:42:f1:56:5c:a3:b7:
ba:81:99:e1:bc:3f:e7:66:3b:fd:42:e4:a7:96:f2:82:a3:de:
e5:54:2d:5e:14:32:b0:e6:c2:53:af:0f:a7:13:3a:64:55:fa:
9b:f2:2c:37:63:a4:8e:36:a4:9d:13:fd:88:02:24:83:ca:b8:
b1:cd:f7:78:5b:52:29:e5:02:aa:f6:97:3f:f8:fc:37:56:38:
de:34:a0:d4:bb:2c:9f:f4:08:26:20:b8:0f:0d:73:fb:1c:6b:
5c:60:d0:2e:33:06:51:9b:2f:18:83:27:29:8c:aa:5a:3f:9d:
40:89:b0:6f:45:c9:e2:ed:45:99:07:c0:7b:60:32:d1:e4:9a:
84:71:0e:ec:bc:95:d8:71:1e:5a:97:af:fa:4a:ca:60:1e:fd:
85:3c:36:33:68:fd:e5:7f:96:89:d1:d6:cd:7d:c5:58:e1:7a:
15:b5:60:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:26:04 2025 by rpki-client