Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a383030303a3a2f34382d3438203d3e20323632323936.roa
File:                     323830343a6138343a383030303a3a2f34382d3438203d3e20323632323936.roa (raw, json)
Hash identifier:          ByyvDV5i5n+I+OUQ6dP6Lfb0weIsyknb6dbvoZdfzo4=
Subject key identifier:   8D:54:DC:FF:E5:CA:C6:76:77:28:D7:A9:99:07:84:BE:ED:7F:A8:2F
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       6D8A92350893395DC3AF5B0C79673A29334E4A48
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a383030303a3a2f34382d3438203d3e20323632323936.roa
Signing time:             Mon 31 Mar 2025 17:57:30 +0000
ROA not before:           Mon 31 Mar 2025 17:52:30 +0000
ROA not after:            Mon 30 Mar 2026 17:57:30 +0000
asID:                     262296
IP address blocks:        2804:a84:8000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 04:13:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:8a:92:35:08:93:39:5d:c3:af:5b:0c:79:67:3a:29:33:4e:4a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar 31 17:52:30 2025 GMT
            Not After : Mar 30 17:57:30 2026 GMT
        Subject: CN=8D54DCFFE5CAC6767728D7A9990784BEED7FA82F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:03:87:22:c4:79:a8:28:69:59:80:81:74:
                    ef:a9:54:84:98:f2:85:02:63:7e:e5:e6:ed:79:c2:
                    4c:55:25:e9:38:01:0c:d8:e9:c1:14:61:10:ce:8d:
                    d6:df:f9:47:3c:f6:d7:1a:41:1d:ba:92:17:ed:b4:
                    91:7a:26:ef:fe:29:1f:f5:1c:14:08:f8:9d:4f:03:
                    97:db:be:c0:3e:f8:ae:29:8a:f4:e8:19:80:77:d1:
                    48:9a:32:d7:6b:d2:04:65:7a:57:3d:22:65:40:86:
                    48:31:cf:05:fd:a5:ca:6b:0d:b8:47:07:a3:68:48:
                    4e:88:c2:cc:09:65:80:57:17:06:3a:01:e9:a4:bd:
                    da:94:27:04:14:ee:3d:11:db:53:89:32:02:19:01:
                    e2:33:37:e7:86:8b:47:97:d6:de:eb:2f:44:2b:51:
                    49:de:c3:63:bf:c3:0f:74:ce:d4:b5:b5:be:ce:93:
                    5d:68:5a:fe:1c:31:3c:d5:7a:9b:11:50:f6:d5:b7:
                    0f:f4:07:95:c5:ad:ed:05:09:93:bf:b1:6d:d6:9f:
                    a0:d4:42:3c:93:ae:ff:83:c2:bf:48:49:94:d2:d5:
                    fd:e4:84:84:9f:32:de:a8:98:3e:06:c1:03:31:91:
                    4f:1a:a2:b0:e2:55:a8:0a:b8:c1:24:48:d1:ac:be:
                    f1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:54:DC:FF:E5:CA:C6:76:77:28:D7:A9:99:07:84:BE:ED:7F:A8:2F
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a383030303a3a2f34382d3438203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a84:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         d3:52:6f:3a:ef:b5:79:d6:f1:ab:22:fe:df:aa:8e:40:22:8b:
         48:07:29:34:1c:a5:13:12:1e:db:f4:ca:6c:2b:3e:c3:30:9f:
         bd:65:37:6b:7d:3b:e0:b6:6f:28:bc:a9:cd:af:45:89:02:cd:
         3c:e4:ed:38:a7:7e:a4:a0:89:45:f5:dd:61:d1:5a:78:c9:3a:
         aa:3d:c7:e0:dc:8b:f8:0f:38:0f:8a:3f:7e:0f:37:13:27:26:
         75:97:ec:ff:57:ac:0e:48:89:40:87:78:7b:0e:4f:fa:14:10:
         a6:c1:cd:77:9c:fd:79:98:64:f2:ee:d8:30:d8:b7:d7:95:87:
         ea:99:3c:b7:43:68:a3:d5:66:a2:9a:86:38:ec:d7:15:2a:43:
         dd:4f:04:c1:32:05:5f:d0:eb:af:45:d1:89:a2:21:dd:43:85:
         94:0a:87:be:69:54:f9:87:5e:ab:15:f2:1b:c9:ed:43:87:8e:
         b4:6d:27:9b:2f:7c:56:15:39:40:0e:02:60:05:11:18:ae:a9:
         93:74:89:a8:01:91:4d:2c:9b:bd:11:6f:4e:1f:38:98:37:89:
         2f:d0:52:44:31:6c:4a:50:58:b6:13:20:32:37:fb:ab:da:8d:
         8d:a6:9e:c0:9f:c9:60:77:29:6b:93:5f:33:30:b1:2e:2a:9c:
         71:a8:a2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:34 2025 by rpki-client on console.sobornost.net