Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3LcG97bQ18Y6D6gTBQtsbCfnWDZd84DCTdTY7MS6apH9/0/323830343a393330383a3a2f33322d3438203d3e20323734373530.roa
File:                     323830343a393330383a3a2f33322d3438203d3e20323734373530.roa (raw, json)
Hash identifier:          Xp8ZN5IkjZjaEWj+XSEGN1jakKZSI2b4mz3iIZMeT3k=
Subject key identifier:   C0:60:80:D6:24:70:2C:DB:EB:34:6F:4A:33:5B:F4:58:14:07:1F:16
Certificate issuer:       /CN=9856FE421768AFE066631022179F53F835166F2E
Certificate serial:       47724F7A98CC281C2B2A455F6ED546DCE5BC91F7
Authority key identifier: 98:56:FE:42:17:68:AF:E0:66:63:10:22:17:9F:53:F8:35:16:6F:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9856FE421768AFE066631022179F53F835166F2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3LcG97bQ18Y6D6gTBQtsbCfnWDZd84DCTdTY7MS6apH9/0/323830343a393330383a3a2f33322d3438203d3e20323734373530.roa
Signing time:             Wed 02 Apr 2025 12:32:24 +0000
ROA not before:           Wed 02 Apr 2025 12:27:24 +0000
ROA not after:            Wed 01 Apr 2026 12:32:24 +0000
asID:                     274750
IP address blocks:        2804:9308::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3LcG97bQ18Y6D6gTBQtsbCfnWDZd84DCTdTY7MS6apH9/0/9856FE421768AFE066631022179F53F835166F2E.crl
                          rsync://rpki-repo.registro.br/repo/3LcG97bQ18Y6D6gTBQtsbCfnWDZd84DCTdTY7MS6apH9/0/9856FE421768AFE066631022179F53F835166F2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9856FE421768AFE066631022179F53F835166F2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:72:4f:7a:98:cc:28:1c:2b:2a:45:5f:6e:d5:46:dc:e5:bc:91:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9856FE421768AFE066631022179F53F835166F2E
        Validity
            Not Before: Apr  2 12:27:24 2025 GMT
            Not After : Apr  1 12:32:24 2026 GMT
        Subject: CN=C06080D624702CDBEB346F4A335BF45814071F16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:43:6c:7c:39:8b:59:fb:e6:cc:67:e1:e6:17:
                    48:0d:df:35:05:4b:43:98:8e:42:16:79:f6:34:a7:
                    65:53:f1:ed:12:57:98:0e:dc:69:e4:23:e0:50:97:
                    92:8f:c0:74:fd:dc:29:e4:14:25:19:7a:ed:0e:e8:
                    4f:bb:e8:8c:6c:af:22:82:70:65:c9:74:e1:94:88:
                    1b:bd:72:b2:13:28:ed:8d:ed:f6:d4:f1:ac:36:e6:
                    d8:53:f6:3b:79:e4:5e:7f:ca:62:1b:cd:ab:39:0e:
                    cb:7a:30:a1:9e:18:85:0c:86:7c:a2:a6:ef:74:b7:
                    26:5e:09:05:f3:29:5a:76:52:f4:79:95:bd:30:d7:
                    22:eb:9e:22:a2:b0:ec:c2:f0:db:d5:37:8a:bf:ee:
                    83:d8:ce:16:b8:a1:4b:a5:d6:ea:fe:70:e5:33:4b:
                    b0:89:4f:18:c5:d4:ea:af:41:77:c6:96:ad:1c:6c:
                    3c:0a:2a:82:9a:0f:d3:ed:09:a8:87:00:f6:f5:55:
                    ab:3c:68:d0:d7:14:4f:fb:c5:17:54:ba:f1:48:13:
                    a8:9d:95:43:b3:ed:6f:1d:51:99:e6:68:ee:93:32:
                    47:12:04:73:9f:c1:50:2d:33:a2:5e:c1:a4:20:65:
                    9f:2d:75:28:d1:b6:32:55:c3:d5:3c:9b:62:86:6b:
                    6b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:60:80:D6:24:70:2C:DB:EB:34:6F:4A:33:5B:F4:58:14:07:1F:16
            X509v3 Authority Key Identifier:
                keyid:98:56:FE:42:17:68:AF:E0:66:63:10:22:17:9F:53:F8:35:16:6F:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3LcG97bQ18Y6D6gTBQtsbCfnWDZd84DCTdTY7MS6apH9/0/9856FE421768AFE066631022179F53F835166F2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9856FE421768AFE066631022179F53F835166F2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LcG97bQ18Y6D6gTBQtsbCfnWDZd84DCTdTY7MS6apH9/0/323830343a393330383a3a2f33322d3438203d3e20323734373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9308::/32

    Signature Algorithm: sha256WithRSAEncryption
         ee:18:81:05:a9:be:37:c5:26:cb:c4:1b:7f:96:70:77:31:e2:
         2d:50:db:1f:d4:02:c3:b7:98:a5:1b:95:69:b9:2e:0e:50:5c:
         1b:04:49:08:4f:b4:7b:2d:22:df:73:84:39:26:5b:61:13:47:
         74:16:db:8b:80:63:f6:cb:ef:73:e1:dd:4c:86:13:83:eb:27:
         e5:19:b4:29:b4:03:2a:6e:4b:9b:e7:6c:e7:35:55:4d:90:91:
         03:47:a2:64:ef:6b:79:fb:64:59:33:c3:e7:b6:13:cf:8a:46:
         cc:fe:6b:b8:dc:24:23:1b:51:b6:32:89:3b:7e:4b:ca:4f:f3:
         b5:a5:cd:70:44:08:ac:0f:1d:92:d5:8b:e2:59:b2:81:20:69:
         d0:e2:c3:52:e2:83:5c:6b:30:9c:48:e4:49:ea:bf:76:50:87:
         b0:b6:c3:db:20:67:dc:bb:a8:26:ce:85:91:20:82:a5:c0:f2:
         23:86:3a:d4:ba:97:8f:12:eb:38:e1:94:8f:09:c7:55:5b:ce:
         d8:d5:9a:7f:d3:7b:7d:f5:55:d8:69:d7:8a:d1:75:54:52:6e:
         cf:d4:54:08:40:a3:34:55:dc:d8:fb:01:cf:7b:4e:0a:a7:a5:
         c2:a4:66:82:1e:37:cb:13:62:cb:5b:69:b9:89:dc:8d:ad:f0:
         57:c2:dc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:00 2025 by rpki-client on console.sobornost.net