Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/323830343a3931383a3a2f33322d3438203d3e203238353834.roa
File:                     323830343a3931383a3a2f33322d3438203d3e203238353834.roa (raw, json)
Hash identifier:          ZVn5cT6QUgasFxz5AQZu1JkjvYGIgaLLshWl+FfBTY0=
Subject key identifier:   B5:C2:A9:47:AF:95:47:07:6D:26:37:5C:C0:54:B4:DA:0A:FE:E0:86
Certificate issuer:       /CN=1233961E0559F239AED4F50437087EF6837DC5E3
Certificate serial:       4EF0C49EC4A63E26AB96EE8F8B62A6ED05B85555
Authority key identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/323830343a3931383a3a2f33322d3438203d3e203238353834.roa
Signing time:             Tue 08 Apr 2025 19:19:58 +0000
ROA not before:           Tue 08 Apr 2025 19:14:58 +0000
ROA not after:            Tue 07 Apr 2026 19:19:58 +0000
asID:                     28584
IP address blocks:        2804:918::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl
                          rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 13:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f0:c4:9e:c4:a6:3e:26:ab:96:ee:8f:8b:62:a6:ed:05:b8:55:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1233961E0559F239AED4F50437087EF6837DC5E3
        Validity
            Not Before: Apr  8 19:14:58 2025 GMT
            Not After : Apr  7 19:19:58 2026 GMT
        Subject: CN=B5C2A947AF9547076D26375CC054B4DA0AFEE086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ed:8c:58:43:2b:da:d6:c2:1e:6f:5d:6c:10:
                    1f:c4:e7:bf:de:64:a9:12:b1:d6:81:9f:2c:f6:cd:
                    81:98:42:95:8a:6c:8f:12:45:5b:33:7d:97:0f:26:
                    97:c3:04:12:81:52:33:3f:a7:a6:a9:a8:c1:32:77:
                    e0:a6:2a:8d:fd:a6:b6:43:53:bd:44:f2:a9:a6:59:
                    ce:59:f1:43:b8:af:91:85:62:ea:a9:c4:b2:36:39:
                    1a:eb:e9:2c:67:7c:68:53:8b:c1:f9:79:dc:81:67:
                    9e:fe:f3:4d:2a:21:6c:e6:61:0a:71:86:c7:08:cd:
                    7b:8a:65:00:3b:a3:6d:5a:10:b4:54:ba:1d:95:03:
                    b5:6e:76:46:e3:22:96:1d:19:9c:40:ff:25:98:62:
                    40:98:7e:f9:e7:94:7b:8d:83:8e:f2:64:a7:70:28:
                    eb:68:1c:1b:f3:b5:89:e7:07:a6:a7:c8:bf:15:58:
                    44:d5:75:d4:3e:59:52:65:44:90:56:49:59:e5:3d:
                    f5:85:a9:3d:23:9c:06:59:26:35:01:81:27:eb:cc:
                    8a:48:87:a8:de:75:c1:54:b8:f5:6c:4d:e4:20:dd:
                    a0:a2:db:c0:ff:d3:46:1b:9f:4e:68:b7:b7:bf:8c:
                    2d:38:c3:80:d4:57:04:3b:fa:b4:b4:3b:91:1c:ac:
                    bf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C2:A9:47:AF:95:47:07:6D:26:37:5C:C0:54:B4:DA:0A:FE:E0:86
            X509v3 Authority Key Identifier:
                keyid:12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/323830343a3931383a3a2f33322d3438203d3e203238353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:918::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:6c:81:bc:73:5d:16:ea:d5:4f:de:7e:91:86:07:41:0d:72:
         2d:dd:9c:9b:d2:e9:2b:e5:52:6f:65:48:75:2c:92:3f:32:7f:
         fb:93:01:da:44:d0:9e:0c:b5:db:13:d8:dc:39:d7:35:f1:cf:
         81:d7:79:7f:b4:d1:33:c2:fe:93:0c:fd:3f:e0:dd:3f:68:b1:
         4a:ed:32:b9:c8:38:86:38:ba:82:d7:25:c5:18:c5:a3:ac:bd:
         a3:4e:cb:dc:2d:16:5d:c2:12:54:33:8d:38:29:58:20:36:38:
         fe:b6:df:74:3b:09:b6:0a:c2:72:5e:2e:fb:a3:91:02:fa:04:
         18:75:d7:87:54:83:a1:e1:99:a5:f9:6d:16:bd:8b:95:1f:96:
         4c:42:a2:ce:9d:76:65:d9:4c:74:fa:2b:01:c0:91:5f:79:4b:
         e4:f7:17:32:29:1c:e6:4c:29:cd:b7:f0:91:c4:27:3d:52:0c:
         42:c7:d7:e8:8c:bd:f9:9f:6c:ea:be:34:b8:4e:a5:68:4f:d0:
         4c:5a:0b:84:de:38:d5:36:82:68:89:81:2c:7e:c6:72:40:bb:
         41:38:03:7c:25:63:88:77:10:82:f1:d0:d3:e7:dd:cd:4c:fd:
         30:b7:3c:9f:25:3f:c8:ed:e4:11:a0:4e:0a:0f:53:69:57:98:
         4f:37:f2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:53 2025 by rpki-client on console.sobornost.net