Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/323830343a383133303a3a2f33332d3333203d3e20323732343338.roa
File:                     323830343a383133303a3a2f33332d3333203d3e20323732343338.roa (raw, json)
Hash identifier:          UJHultIWjbAXcPu4zHAQA8RYVXSJDV/OMtT7Tth+/8Q=
Subject key identifier:   64:FA:22:DA:2A:06:E1:36:19:A7:C7:19:28:00:C0:FE:24:5E:70:5F
Certificate issuer:       /CN=5445B268F95C5A86AE66A9F2C23E2E41A58C3D78
Certificate serial:       7FAA80F3FC1FEAFE7E0A9487C9DDEDB55220B2FE
Authority key identifier: 54:45:B2:68:F9:5C:5A:86:AE:66:A9:F2:C2:3E:2E:41:A5:8C:3D:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/323830343a383133303a3a2f33332d3333203d3e20323732343338.roa
Signing time:             Sat 26 Apr 2025 14:59:45 +0000
ROA not before:           Sat 26 Apr 2025 14:54:45 +0000
ROA not after:            Sat 25 Apr 2026 14:59:45 +0000
asID:                     272438
IP address blocks:        2804:8130::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.crl
                          rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 17:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:aa:80:f3:fc:1f:ea:fe:7e:0a:94:87:c9:dd:ed:b5:52:20:b2:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5445B268F95C5A86AE66A9F2C23E2E41A58C3D78
        Validity
            Not Before: Apr 26 14:54:45 2025 GMT
            Not After : Apr 25 14:59:45 2026 GMT
        Subject: CN=64FA22DA2A06E13619A7C7192800C0FE245E705F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:c0:a8:ce:3f:b0:d3:0f:4f:b5:46:fa:ea:
                    b4:c5:13:c6:49:bd:67:5c:23:0e:a5:ab:c1:28:de:
                    d5:ab:34:91:3f:f3:4c:0e:b3:a1:8c:3e:2f:26:8b:
                    64:55:97:f5:99:2e:b2:f3:71:42:b0:c0:b8:35:f2:
                    34:e4:01:a9:a3:60:fe:5b:8a:06:8b:40:11:91:15:
                    a4:5d:14:85:cd:97:b3:3a:92:ab:44:0c:06:f3:17:
                    d8:45:60:eb:71:4e:0d:88:95:56:9c:43:44:91:00:
                    c3:a7:55:c3:4c:5e:fb:b4:d9:52:25:a4:11:9d:ad:
                    32:9c:73:d7:63:d0:ae:94:39:16:7b:48:2f:31:32:
                    9d:72:0a:a6:73:d7:f6:b8:a6:d3:98:4b:40:8d:5c:
                    19:dc:90:53:fa:b2:06:b8:f8:cf:d0:10:66:32:6c:
                    f2:16:26:e4:ab:7c:15:c0:7f:6a:a1:fd:7b:19:d3:
                    03:14:4e:be:04:4d:a6:92:d2:c3:37:1e:30:56:6a:
                    cd:7c:94:ed:ce:e6:5c:7b:ea:d1:b1:b0:26:d5:fc:
                    ac:9e:e8:92:20:bf:18:06:6d:5e:97:f1:b7:db:f0:
                    50:d5:af:d2:e2:ea:5d:a2:16:2a:4e:22:d0:f7:3c:
                    5d:a4:2f:f6:1c:88:6b:0c:70:cb:5c:a4:3e:cb:07:
                    f9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FA:22:DA:2A:06:E1:36:19:A7:C7:19:28:00:C0:FE:24:5E:70:5F
            X509v3 Authority Key Identifier:
                keyid:54:45:B2:68:F9:5C:5A:86:AE:66:A9:F2:C2:3E:2E:41:A5:8C:3D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/323830343a383133303a3a2f33332d3333203d3e20323732343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8130::/33

    Signature Algorithm: sha256WithRSAEncryption
         36:3f:d3:ac:00:73:41:10:7f:23:50:c4:61:05:3b:d8:68:ca:
         ac:81:cc:3c:1e:9f:8c:70:89:99:15:d4:e2:3c:a2:f9:88:6d:
         b0:c5:d2:69:6a:6c:32:d1:56:9d:a6:ed:6e:b7:e9:ba:7d:21:
         6f:87:7d:1b:26:07:75:d0:a9:be:61:f8:98:88:31:c8:1b:cb:
         e3:d0:a2:0f:b4:bb:ef:c5:87:6d:17:18:0d:72:cc:31:72:03:
         0d:f4:ed:11:eb:c3:81:61:95:82:73:be:ec:6a:b5:1b:8a:7d:
         69:05:8f:9f:0b:8f:ca:ab:0e:ec:53:8c:73:82:aa:3c:25:58:
         40:19:5e:9b:7d:6a:16:93:88:5f:16:21:66:db:4c:f6:a8:40:
         da:2f:79:8e:67:9d:ed:1c:24:a9:62:86:e4:63:9a:47:18:87:
         8b:36:1a:e0:df:89:10:d5:de:35:41:ed:61:ac:d9:5f:13:3c:
         2c:f5:f9:41:dc:49:42:cc:ed:f7:2d:65:45:6a:4f:2b:e2:54:
         d5:47:f9:14:0d:30:62:52:0b:70:6a:1a:53:51:de:6f:54:e7:
         14:2c:64:1b:58:98:97:58:61:41:ef:0b:00:24:d5:4d:8f:2f:
         a5:19:3d:61:05:61:d3:25:ce:69:51:63:89:6e:73:22:bc:3c:
         16:be:bd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:08 2025 by rpki-client on console.sobornost.net