Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/323830343a333334343a3a2f33322d313238203d3e20323635333835.roa
File:                     323830343a333334343a3a2f33322d313238203d3e20323635333835.roa (raw, json)
Hash identifier:          /Q/JaZ+icLikHWHv6dzvxz7VzZzgz++sE7gytxv6cx0=
Subject key identifier:   33:F6:76:8A:75:9C:95:40:E5:8F:12:B9:81:FD:07:40:CC:A2:85:D7
Certificate issuer:       /CN=6CCF865AC90751CCEF5EF29C83DA400ECDC00353
Certificate serial:       5EA33F1D18FE5BA017C279D19636F759BBA735EE
Authority key identifier: 6C:CF:86:5A:C9:07:51:CC:EF:5E:F2:9C:83:DA:40:0E:CD:C0:03:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/323830343a333334343a3a2f33322d313238203d3e20323635333835.roa
Signing time:             Fri 21 Mar 2025 11:07:24 +0000
ROA not before:           Fri 21 Mar 2025 11:02:24 +0000
ROA not after:            Fri 20 Mar 2026 11:07:24 +0000
asID:                     265385
IP address blocks:        2804:3344::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.crl
                          rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a3:3f:1d:18:fe:5b:a0:17:c2:79:d1:96:36:f7:59:bb:a7:35:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CCF865AC90751CCEF5EF29C83DA400ECDC00353
        Validity
            Not Before: Mar 21 11:02:24 2025 GMT
            Not After : Mar 20 11:07:24 2026 GMT
        Subject: CN=33F6768A759C9540E58F12B981FD0740CCA285D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d0:82:cc:7b:96:b3:2d:7b:93:a7:b8:93:30:
                    79:a9:ae:75:76:95:d3:31:de:52:41:6d:a7:8c:75:
                    0f:4c:d6:f5:82:94:39:89:94:e3:79:5a:83:4a:14:
                    14:e4:7a:bc:5b:49:29:86:b4:45:58:1d:79:9a:bb:
                    c2:1a:99:1e:33:39:9c:9e:89:6d:7f:e6:fd:0d:a1:
                    5f:df:9d:15:4f:1d:6d:bb:3b:a6:38:0c:92:a4:35:
                    2b:b9:05:3e:68:4e:10:b1:02:8d:3d:2b:2c:ac:36:
                    4c:d5:b3:bd:3c:fc:21:b1:99:7a:bc:be:38:79:2f:
                    3f:9d:5a:ae:a0:ec:ab:91:a9:2e:da:80:fe:72:5c:
                    2e:37:07:34:b5:94:85:b7:87:b4:23:9d:f4:61:63:
                    a1:2f:ae:e6:7c:1d:06:fe:6a:ae:fd:10:bf:cb:79:
                    84:83:0e:3f:1f:30:23:01:2e:bf:5b:04:26:32:5a:
                    9b:91:13:78:b9:a1:08:03:fa:2e:6b:cc:0e:56:51:
                    33:5c:be:13:8c:ca:c6:aa:b3:bd:53:f9:47:7d:d2:
                    63:db:45:e4:6c:70:cb:42:df:12:40:9a:72:77:65:
                    85:0f:5c:6a:79:7f:87:42:13:84:78:c9:b6:e1:b6:
                    76:c6:53:44:33:4a:6a:14:f8:b4:da:26:6e:bd:8f:
                    d1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F6:76:8A:75:9C:95:40:E5:8F:12:B9:81:FD:07:40:CC:A2:85:D7
            X509v3 Authority Key Identifier:
                keyid:6C:CF:86:5A:C9:07:51:CC:EF:5E:F2:9C:83:DA:40:0E:CD:C0:03:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/323830343a333334343a3a2f33322d313238203d3e20323635333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3344::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:3d:0f:17:ec:5d:0f:58:c1:c0:b5:4e:4c:94:85:bd:76:d0:
         7c:e4:2a:96:07:5e:88:33:5b:77:f2:25:40:8e:54:7d:a6:78:
         1e:a2:44:26:89:ce:4a:b9:e7:d1:e9:9a:e4:ed:be:2f:88:ae:
         23:62:19:f7:0d:d5:4d:f9:33:5b:85:a0:ef:cb:6b:1a:e7:c3:
         90:af:73:d4:0b:3f:ba:83:aa:29:31:2f:38:16:98:0a:32:bf:
         57:08:cb:d1:88:27:25:f8:21:7a:4b:c2:19:ae:7a:4c:dd:73:
         8f:c7:c5:73:f9:0a:5b:34:e9:e4:75:89:9b:7f:85:f0:3d:b3:
         71:4c:ff:fe:c2:c5:62:56:c2:16:38:7c:d3:e0:a6:82:dd:e9:
         28:9a:c4:ef:36:e7:bf:ed:e8:35:74:65:e5:c6:21:3b:db:55:
         ad:5d:26:85:31:e7:63:53:34:c6:ef:70:4d:ea:96:91:f6:4e:
         78:67:43:05:0c:b1:00:37:d5:a8:b6:1b:36:e7:0f:c8:1c:53:
         41:c3:7b:4f:16:da:89:b1:2b:48:7f:2f:21:51:83:96:fa:01:
         cb:ba:1c:fd:3f:bc:57:46:d7:28:c8:1d:43:24:7d:4a:9e:d8:
         e9:9d:0f:4a:78:d3:a3:22:7c:ee:c6:3d:fa:f7:49:df:ef:d6:
         84:11:12:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:01 2025 by rpki-client on console.sobornost.net