Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/1/323830343a333530343a666630303a3a2f34302d3438203d3e20323635343935.roa
File:                     323830343a333530343a666630303a3a2f34302d3438203d3e20323635343935.roa (raw, json)
Hash identifier:          Je5e3xLXiTd/su9+x35RwEdj8XLqLVIMlTJ3E6b5uTg=
Subject key identifier:   55:69:BD:34:48:88:FE:FE:59:E5:69:77:88:FD:DA:FE:A2:F0:84:5A
Certificate issuer:       /CN=B48FB69D109B757E2D156676A89BE567826A35D5
Certificate serial:       22028A53182F289985FF1533DF4929314608B1A6
Authority key identifier: B4:8F:B6:9D:10:9B:75:7E:2D:15:66:76:A8:9B:E5:67:82:6A:35:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48FB69D109B757E2D156676A89BE567826A35D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/1/323830343a333530343a666630303a3a2f34302d3438203d3e20323635343935.roa
Signing time:             Fri 07 Mar 2025 02:11:16 +0000
ROA not before:           Fri 07 Mar 2025 02:06:16 +0000
ROA not after:            Fri 06 Mar 2026 02:11:16 +0000
asID:                     265495
IP address blocks:        2804:3504:ff00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/1/B48FB69D109B757E2D156676A89BE567826A35D5.crl
                          rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/1/B48FB69D109B757E2D156676A89BE567826A35D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48FB69D109B757E2D156676A89BE567826A35D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:02:8a:53:18:2f:28:99:85:ff:15:33:df:49:29:31:46:08:b1:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48FB69D109B757E2D156676A89BE567826A35D5
        Validity
            Not Before: Mar  7 02:06:16 2025 GMT
            Not After : Mar  6 02:11:16 2026 GMT
        Subject: CN=5569BD344888FEFE59E5697788FDDAFEA2F0845A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5b:b6:32:73:20:3f:1a:c9:49:02:d5:c4:b1:
                    78:6a:c8:15:f7:91:19:87:b7:bd:db:36:ee:c3:d1:
                    14:47:b2:19:c9:1f:26:11:33:87:7d:ca:8b:b6:ba:
                    c6:17:b2:08:8f:9e:27:43:be:3d:f9:87:4c:a6:d2:
                    4d:0d:8d:6b:70:d2:64:f6:db:b3:e1:ae:43:66:a6:
                    22:c0:d5:99:c6:66:ae:9d:8a:db:64:5d:6c:cd:43:
                    9f:a5:1c:9e:b3:1a:9d:7e:9c:95:f0:be:30:ba:58:
                    51:c5:25:30:c2:e5:7e:1c:f5:13:eb:c2:49:f4:34:
                    d8:30:d0:e7:9a:e4:39:ce:73:5b:a7:f2:b2:d2:c5:
                    68:9e:15:c9:32:9f:78:b7:07:d7:83:1a:4c:a8:7c:
                    cc:30:fc:d2:0d:0f:d4:16:7e:93:61:69:18:1d:55:
                    af:c5:1a:ac:8f:52:5e:0d:7a:43:fa:da:87:84:1e:
                    56:48:f2:9e:74:b8:dc:66:45:6a:76:3b:0b:6d:39:
                    d1:a1:7c:85:f2:1a:25:12:86:93:8c:9e:35:24:a9:
                    01:50:cf:a6:0e:51:dd:0b:20:2e:fb:b7:e4:d1:25:
                    05:91:92:de:3d:a5:56:de:9e:7b:6d:5d:1b:15:6d:
                    84:39:9c:6e:18:8a:58:b5:0f:67:1d:ad:6d:2a:db:
                    e9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:69:BD:34:48:88:FE:FE:59:E5:69:77:88:FD:DA:FE:A2:F0:84:5A
            X509v3 Authority Key Identifier:
                keyid:B4:8F:B6:9D:10:9B:75:7E:2D:15:66:76:A8:9B:E5:67:82:6A:35:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/1/B48FB69D109B757E2D156676A89BE567826A35D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48FB69D109B757E2D156676A89BE567826A35D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/1/323830343a333530343a666630303a3a2f34302d3438203d3e20323635343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3504:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:f9:e6:d4:d6:aa:b2:b5:70:07:11:76:3f:bc:27:0b:b1:53:
         aa:95:d7:e4:ae:fe:26:89:d4:8f:8b:2b:7e:6a:f4:8f:9f:23:
         76:1a:7a:70:f2:ae:53:e8:13:ff:28:75:d5:07:55:f5:40:5c:
         31:35:4c:f3:bb:5d:cc:0e:e8:95:c7:3d:4d:ef:62:14:4b:e2:
         17:59:d7:02:e4:8c:7f:53:83:7f:26:5b:66:87:f9:0d:07:40:
         41:24:39:ae:eb:1c:90:9a:7e:25:c4:5e:7a:76:1d:74:04:80:
         fd:59:e5:74:f5:b0:4d:8b:4b:ec:30:7d:f8:2d:f6:bb:25:fe:
         2a:02:0f:7e:7e:a4:80:a0:48:1b:6b:93:99:15:d0:07:b0:54:
         13:6b:c3:4d:a5:58:41:2c:73:04:df:8f:ed:15:b2:e1:57:f1:
         b8:af:b5:4a:cd:fc:08:9f:3e:e0:a0:60:29:72:aa:76:8f:44:
         be:5d:ce:68:d8:08:37:a2:9b:f6:b1:6c:30:b0:9d:e9:6b:bb:
         e0:64:cb:94:26:29:25:e6:6a:02:eb:29:7c:90:2f:38:49:8e:
         a3:88:21:a4:65:d3:27:e1:a9:0f:a1:0c:94:e5:f9:1e:e7:ed:
         24:b8:a9:3b:d1:62:64:a4:e4:eb:af:de:5e:7f:21:90:de:6e:
         fe:39:df:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:19 2025 by rpki-client on console.sobornost.net