Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/323830343a316634383a3a2f33322d3332203d3e203533303136.roa
File:                     323830343a316634383a3a2f33322d3332203d3e203533303136.roa (raw, json)
Hash identifier:          KayLJAStuIOvvYMmJFrMpo+naULyvvF34Hm42l0goaM=
Subject key identifier:   AE:6C:52:49:2C:65:FB:53:62:F9:B3:C0:AD:15:05:91:9C:05:5F:6D
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       729C8374D91B410FDA894DECE4C9603A61FA60E2
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/323830343a316634383a3a2f33322d3332203d3e203533303136.roa
Signing time:             Thu 20 Mar 2025 19:40:26 +0000
ROA not before:           Thu 20 Mar 2025 19:35:26 +0000
ROA not after:            Thu 19 Mar 2026 19:40:26 +0000
asID:                     53016
IP address blocks:        2804:1f48::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9c:83:74:d9:1b:41:0f:da:89:4d:ec:e4:c9:60:3a:61:fa:60:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Mar 20 19:35:26 2025 GMT
            Not After : Mar 19 19:40:26 2026 GMT
        Subject: CN=AE6C52492C65FB5362F9B3C0AD1505919C055F6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:78:13:ea:08:d3:ab:6b:ae:b1:01:95:7e:dc:
                    81:c4:e2:16:ba:0b:3f:ec:0e:b2:9a:50:d4:64:09:
                    45:35:b9:a6:63:87:cd:c0:05:bf:78:2d:e2:dc:aa:
                    85:34:81:f4:30:59:6a:49:50:4e:1a:62:ef:8a:39:
                    cd:e2:4f:1d:13:1e:4b:92:38:ea:16:2f:cb:ad:2a:
                    db:0f:08:66:31:1e:ef:43:09:62:ef:0d:f9:60:5e:
                    b0:96:19:ce:85:08:f9:c6:56:bd:18:26:f4:80:d4:
                    7f:86:86:0b:83:d9:1a:1f:a4:09:6b:ea:dd:4c:19:
                    4f:13:76:44:9f:66:b9:8b:43:33:94:27:54:27:5b:
                    86:4f:db:a3:64:8c:3e:fb:2a:64:3e:cd:68:d8:a1:
                    a9:6e:70:fb:78:13:12:ee:ec:56:27:74:9c:bf:4f:
                    4e:ce:72:87:dc:08:2a:88:45:47:bb:4c:36:6b:5d:
                    7d:43:53:66:b4:cd:3e:1e:64:fa:96:81:15:2b:fe:
                    ff:af:64:07:fc:f1:94:fc:ea:69:7b:f6:9a:86:8b:
                    b4:be:2a:eb:97:5b:3e:48:42:ff:f3:d7:4f:b2:93:
                    c2:38:48:1d:06:98:71:2d:21:78:8c:b6:3f:1d:da:
                    73:8b:86:48:bb:c8:55:00:ac:a8:c4:c4:5c:60:f7:
                    01:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6C:52:49:2C:65:FB:53:62:F9:B3:C0:AD:15:05:91:9C:05:5F:6D
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/323830343a316634383a3a2f33322d3332203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f48::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:0d:10:77:cb:0a:39:c9:45:f3:01:f4:eb:16:78:bd:7d:b4:
         4d:bc:e7:f3:1c:19:15:83:bd:e8:68:b3:77:77:8d:f4:b6:a4:
         cd:e6:be:8f:a5:a6:c1:d5:c2:91:16:44:f7:aa:99:6c:5d:51:
         26:75:b1:9f:5d:9f:0c:c9:13:60:80:bb:72:e8:28:b3:b1:cf:
         2c:ba:08:19:e2:38:e8:c1:f2:ed:d9:63:3f:c5:ec:6b:df:7b:
         6d:9d:87:f7:d3:b4:20:6d:69:18:dc:fb:d2:cb:68:76:27:3d:
         21:52:ac:9b:50:f9:c2:75:ea:13:d0:13:cc:a8:96:8a:91:78:
         7c:a1:fe:92:c3:1d:db:27:35:22:05:99:58:e7:c8:9b:c0:9d:
         1f:89:35:2d:22:f4:85:6c:73:ff:a0:ce:25:d2:0a:d5:44:f2:
         91:62:3e:68:a4:4b:11:c9:6d:b3:e6:d5:35:de:bf:45:e3:ca:
         0e:a9:63:d2:90:d6:e5:87:e4:6d:70:a3:44:80:a6:af:d5:48:
         36:d0:ef:8e:6b:d0:55:40:b1:f7:61:d6:ec:a9:8e:6e:f9:a1:
         04:3e:78:a3:64:e9:bd:72:11:c1:32:e6:b2:e8:56:e6:7b:68:
         6b:8c:41:b6:4b:36:bd:55:64:1f:72:53:ca:f6:46:94:c7:bc:
         0e:22:58:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:12 2025 by rpki-client on console.sobornost.net