Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/323830343a373639303a3a2f33322d3334203d3e20323731313230.roa
File:                     323830343a373639303a3a2f33322d3334203d3e20323731313230.roa (raw, json)
Hash identifier:          35WEcEG3QWk/zVJzYYzvfaiposzmcV1hcfKo2NLYw2E=
Subject key identifier:   79:93:E7:FC:A1:2C:87:AF:A0:BB:38:E8:BC:46:B5:A2:1D:87:8D:FC
Certificate issuer:       /CN=7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0
Certificate serial:       7818986DDDEB6E9E0B0C985B50AD65D23E175EAC
Authority key identifier: 7C:A0:4A:87:EA:A3:58:34:E1:17:2C:5B:B9:6D:5D:B0:D0:B2:3D:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/323830343a373639303a3a2f33322d3334203d3e20323731313230.roa
Signing time:             Fri 10 Jan 2025 15:21:35 +0000
ROA not before:           Fri 10 Jan 2025 15:16:35 +0000
ROA not after:            Fri 09 Jan 2026 15:21:35 +0000
asID:                     271120
IP address blocks:        2804:7690::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.crl
                          rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:50:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:18:98:6d:dd:eb:6e:9e:0b:0c:98:5b:50:ad:65:d2:3e:17:5e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0
        Validity
            Not Before: Jan 10 15:16:35 2025 GMT
            Not After : Jan  9 15:21:35 2026 GMT
        Subject: CN=7993E7FCA12C87AFA0BB38E8BC46B5A21D878DFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:8a:0e:b7:df:fe:96:4c:00:43:49:94:cc:
                    18:fe:4b:fd:a8:ff:2c:e7:67:6a:bc:cc:ff:d6:6c:
                    2e:77:71:f4:90:3b:10:f4:99:6c:09:15:01:7c:ad:
                    38:c6:8d:e2:a0:60:ed:53:69:03:8b:45:6e:5c:79:
                    42:e3:9a:74:b7:c0:cc:76:99:65:1d:bf:58:1d:2a:
                    79:28:08:ea:0e:10:51:c5:fc:08:ee:de:bf:24:bc:
                    2b:ef:fc:cf:8c:a2:85:fa:b2:38:54:42:2f:59:d6:
                    1f:67:59:20:9c:d2:e3:83:38:1a:2c:b4:ef:54:9c:
                    c9:5b:f7:5d:a1:e2:11:1a:e9:a4:b9:1c:6c:8b:00:
                    f8:39:2b:8c:31:60:4e:b9:09:aa:98:63:6a:cb:2a:
                    64:93:a2:a1:de:47:d0:f6:9c:9a:83:c1:3f:62:6d:
                    2a:82:cc:f6:0d:09:10:19:2a:97:c0:d5:88:4a:a6:
                    08:79:90:7e:ef:22:3b:0f:9b:1a:8a:9d:12:8a:c3:
                    ee:dd:0b:b8:91:21:3e:75:a4:fa:c2:b7:eb:73:a8:
                    70:f9:08:72:60:35:96:27:34:15:97:ca:f0:b8:e0:
                    03:99:e6:a5:6c:d6:d4:52:28:4e:66:26:6c:84:32:
                    29:82:86:e3:2d:de:ef:8a:71:a2:d1:d3:5d:83:ed:
                    ff:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:93:E7:FC:A1:2C:87:AF:A0:BB:38:E8:BC:46:B5:A2:1D:87:8D:FC
            X509v3 Authority Key Identifier:
                keyid:7C:A0:4A:87:EA:A3:58:34:E1:17:2C:5B:B9:6D:5D:B0:D0:B2:3D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/323830343a373639303a3a2f33322d3334203d3e20323731313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7690::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:1e:04:27:e0:19:4e:e5:53:f4:07:36:e5:f1:04:6d:9d:73:
         a8:f0:b2:30:af:f0:52:24:8e:58:4a:3c:c1:2d:ed:b9:25:b6:
         a5:30:f1:c5:04:fe:26:15:1b:4e:9b:4a:bf:e2:cd:dc:a9:0a:
         97:ff:d5:ff:08:61:d2:35:ef:03:fd:83:d0:3b:0d:25:44:f5:
         bb:e2:10:32:6e:6c:d8:09:9d:d8:20:7e:bd:db:7a:45:31:0a:
         b8:59:d4:99:53:30:1a:60:89:ff:8f:99:c3:57:23:4e:65:4a:
         2e:9d:6a:ae:8d:bf:c0:f9:e0:13:46:ac:91:f3:e9:94:44:fc:
         d5:e4:97:71:45:00:d4:6c:5a:fe:b0:5f:b8:95:77:c5:fe:92:
         a8:c0:c8:0a:67:9f:0b:35:eb:97:6e:2c:28:3c:51:8b:3f:95:
         e0:87:a1:3e:9a:68:e1:a9:1d:a0:e7:d4:f1:8c:96:c2:13:f6:
         4d:2f:ec:43:76:a8:3d:5a:4a:03:b3:ad:49:11:b4:90:2c:58:
         ee:00:90:99:48:3e:c1:b1:b5:35:3c:53:97:97:4e:5c:fc:56:
         fb:6d:1d:f2:36:c0:a3:db:69:4d:08:23:6e:a0:20:77:6a:d2:
         ec:bb:f3:b9:6a:5f:00:24:38:f5:44:94:20:a8:13:4b:de:43:
         16:40:e3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:18 2025 by rpki-client on console.sobornost.net