Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26UE9MgXgrAqmRmad62XrR1DPbRedNDZsakBPAKPmxPy/1/323830343a346564303a3a2f33322d3438203d3e20323638323834.roa
File:                     323830343a346564303a3a2f33322d3438203d3e20323638323834.roa (raw, json)
Hash identifier:          /szR1bx96vshTOEz3wQAtlt46X630MMTkt/arGh10h4=
Subject key identifier:   08:79:74:50:80:0A:E2:87:20:91:9F:E2:74:EB:26:FE:A6:96:93:99
Certificate issuer:       /CN=2018095BF530FC3CA0AAD06E607CF9D16F4F8790
Certificate serial:       245FDAA88B6A9BB23120E4E86EDEC19A56BABFC4
Authority key identifier: 20:18:09:5B:F5:30:FC:3C:A0:AA:D0:6E:60:7C:F9:D1:6F:4F:87:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2018095BF530FC3CA0AAD06E607CF9D16F4F8790.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26UE9MgXgrAqmRmad62XrR1DPbRedNDZsakBPAKPmxPy/1/323830343a346564303a3a2f33322d3438203d3e20323638323834.roa
Signing time:             Thu 03 Apr 2025 13:02:57 +0000
ROA not before:           Thu 03 Apr 2025 12:57:57 +0000
ROA not after:            Thu 02 Apr 2026 13:02:57 +0000
asID:                     268284
IP address blocks:        2804:4ed0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/26UE9MgXgrAqmRmad62XrR1DPbRedNDZsakBPAKPmxPy/1/2018095BF530FC3CA0AAD06E607CF9D16F4F8790.crl
                          rsync://rpki-repo.registro.br/repo/26UE9MgXgrAqmRmad62XrR1DPbRedNDZsakBPAKPmxPy/1/2018095BF530FC3CA0AAD06E607CF9D16F4F8790.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2018095BF530FC3CA0AAD06E607CF9D16F4F8790.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 04:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5f:da:a8:8b:6a:9b:b2:31:20:e4:e8:6e:de:c1:9a:56:ba:bf:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2018095BF530FC3CA0AAD06E607CF9D16F4F8790
        Validity
            Not Before: Apr  3 12:57:57 2025 GMT
            Not After : Apr  2 13:02:57 2026 GMT
        Subject: CN=08797450800AE28720919FE274EB26FEA6969399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0a:3d:d1:ff:14:ba:64:f2:14:d1:d1:8b:4c:
                    a1:2b:59:16:de:58:31:cb:69:d5:8c:6f:d2:e4:f6:
                    bf:e2:ca:0e:d0:df:c5:f6:3c:5e:bf:e7:c7:dd:84:
                    65:cb:f6:a2:27:96:61:25:12:5b:84:fb:62:4e:59:
                    c7:9b:a4:31:fb:b8:4f:34:ab:05:97:0b:53:e5:ff:
                    4d:87:0b:6e:4c:c0:98:47:e0:bd:d5:4f:89:9e:2b:
                    84:4a:a8:37:85:03:0f:66:23:3f:4f:9e:55:bd:a1:
                    73:0c:d2:ee:98:d8:ec:be:4a:ae:66:b0:3e:e8:ec:
                    80:5c:25:27:d0:83:e1:7e:2b:4c:1b:15:d4:e6:02:
                    82:87:d1:d9:a0:b4:c8:8e:59:f8:ef:f8:7c:61:ec:
                    99:bb:45:02:14:1a:f0:85:5a:b8:3e:ed:c7:59:da:
                    87:c5:5b:ed:a2:62:1f:b5:36:b1:1f:40:4a:60:3b:
                    0e:fb:cd:d3:e7:ae:97:be:41:8e:8a:31:0a:3d:d7:
                    4f:00:0a:20:12:12:74:a3:7f:54:ef:d5:53:9b:18:
                    07:48:70:ed:8c:7d:bd:7a:49:53:58:53:e6:1f:f7:
                    3d:5e:91:52:2c:14:e5:c6:3a:05:4b:90:35:42:41:
                    4c:72:c9:95:64:6a:3e:7d:4c:02:8c:26:5a:7c:75:
                    71:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:79:74:50:80:0A:E2:87:20:91:9F:E2:74:EB:26:FE:A6:96:93:99
            X509v3 Authority Key Identifier:
                keyid:20:18:09:5B:F5:30:FC:3C:A0:AA:D0:6E:60:7C:F9:D1:6F:4F:87:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26UE9MgXgrAqmRmad62XrR1DPbRedNDZsakBPAKPmxPy/1/2018095BF530FC3CA0AAD06E607CF9D16F4F8790.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2018095BF530FC3CA0AAD06E607CF9D16F4F8790.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26UE9MgXgrAqmRmad62XrR1DPbRedNDZsakBPAKPmxPy/1/323830343a346564303a3a2f33322d3438203d3e20323638323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ed0::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:85:78:c1:5a:15:bc:08:89:ba:3f:83:18:44:c8:76:98:23:
         51:83:52:2f:57:6b:25:c9:46:40:1c:c6:10:63:30:60:30:90:
         f1:db:b1:4b:05:26:b0:98:12:19:13:f1:7c:5d:de:db:7e:c6:
         69:26:3e:e3:6b:92:9c:5f:3c:67:4f:fa:8c:73:d4:3c:f6:6e:
         60:14:f8:65:b2:89:da:81:27:6c:f3:c1:f4:f9:ef:e6:f5:79:
         4b:be:ff:53:35:86:91:dd:9f:ab:c1:c4:21:bd:8b:14:d6:e6:
         21:15:5b:5e:62:82:cb:77:94:e4:e4:1c:58:cd:32:eb:7a:69:
         da:87:2b:2c:19:09:3f:d6:97:d2:77:c0:9b:51:1a:45:1d:0a:
         fd:37:19:c0:89:4f:e0:47:01:3c:b3:ce:53:0f:36:64:7b:f1:
         e1:b7:10:3f:47:85:30:65:d8:c7:b2:4b:9d:ea:cb:a4:ac:2a:
         41:e0:cb:70:5f:28:0b:e6:e5:de:8f:05:66:e9:61:ef:58:5f:
         81:4a:62:88:24:d9:2a:9e:04:2a:d3:c8:36:d9:9e:55:65:d1:
         dd:55:ae:56:44:e0:90:cf:37:39:38:c9:71:41:96:c0:68:0e:
         65:b5:27:7b:7d:de:b1:ed:a0:15:4e:68:9f:54:66:a3:a8:d3:
         03:1c:a7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:35 2025 by rpki-client on console.sobornost.net