Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/323830343a366465633a31303a3a2f34342d3434203d3e203430363736.roa
File:                     323830343a366465633a31303a3a2f34342d3434203d3e203430363736.roa (raw, json)
Hash identifier:          5NigUzx/I6sMjEJnsNecKw16Xyfbit5USCbCcSdmdzs=
Subject key identifier:   77:1B:D1:79:06:97:E4:67:03:6D:80:04:55:7F:97:55:6B:65:84:25
Certificate issuer:       /CN=296C1957CA1EAD9BA9385FA528C36D900C425F48
Certificate serial:       6CC23031B2DD400D25FD19D3CA1E222FE660475F
Authority key identifier: 29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/323830343a366465633a31303a3a2f34342d3434203d3e203430363736.roa
Signing time:             Mon 14 Apr 2025 14:13:15 +0000
ROA not before:           Mon 14 Apr 2025 14:08:15 +0000
ROA not after:            Mon 13 Apr 2026 14:13:15 +0000
asID:                     40676
IP address blocks:        2804:6dec:10::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.crl
                          rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 13:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c2:30:31:b2:dd:40:0d:25:fd:19:d3:ca:1e:22:2f:e6:60:47:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296C1957CA1EAD9BA9385FA528C36D900C425F48
        Validity
            Not Before: Apr 14 14:08:15 2025 GMT
            Not After : Apr 13 14:13:15 2026 GMT
        Subject: CN=771BD1790697E467036D8004557F97556B658425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ee:7f:4e:94:b2:97:86:e2:8e:1a:f8:1e:71:
                    a5:0f:9a:44:2b:05:7e:a1:87:87:8e:d1:3c:06:62:
                    8c:53:7b:30:bf:06:94:36:d9:59:dd:87:6a:b3:8d:
                    1d:36:1d:86:79:fc:e6:da:c4:b0:1f:92:fd:62:d8:
                    b9:36:10:f6:f5:a0:27:a5:c9:24:97:7a:eb:61:21:
                    90:2f:8d:16:9a:b4:ba:c4:82:20:61:f3:3b:8c:5a:
                    b2:4d:6b:d1:96:51:3c:d4:f9:ae:fe:3d:77:f4:f6:
                    0e:c3:50:92:bf:3f:09:49:2e:65:72:06:7d:dd:3b:
                    b6:2f:eb:14:11:91:1b:00:c0:94:40:1c:61:30:b9:
                    6f:c7:2d:2f:d9:77:7b:c1:0f:3c:2b:09:f6:ab:16:
                    98:38:81:29:b6:a7:cd:50:c4:b6:3c:18:fd:8e:c6:
                    9d:41:bc:ec:5c:3c:1c:08:38:7a:04:ab:b2:a3:36:
                    5a:bf:ff:7a:ad:2e:82:96:f2:40:6a:8e:a4:d6:f1:
                    73:49:7c:82:82:e0:fc:63:d2:da:f8:6b:47:63:69:
                    09:57:e5:0d:ca:2f:c5:ea:fe:d1:79:6f:54:e4:40:
                    e6:16:f1:c3:33:eb:24:23:9e:07:81:ea:69:bd:f2:
                    09:c2:d4:e0:0e:8e:57:aa:65:3e:84:55:f0:0d:89:
                    69:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1B:D1:79:06:97:E4:67:03:6D:80:04:55:7F:97:55:6B:65:84:25
            X509v3 Authority Key Identifier:
                keyid:29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/323830343a366465633a31303a3a2f34342d3434203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6dec:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         0f:db:47:41:ff:a7:14:97:55:0e:0c:b3:09:51:2e:fd:9c:53:
         ed:26:c9:d0:a4:65:72:8d:e6:b2:d5:be:85:15:71:94:cc:6d:
         00:41:41:f8:14:7d:63:cb:41:f2:66:71:0f:12:58:96:c4:51:
         2f:f1:f2:0e:5c:9b:84:53:8a:f9:c3:fc:13:7f:7b:36:d8:63:
         09:4b:8d:88:e4:d8:b6:fc:e2:7b:ae:7d:2f:25:27:68:fc:7e:
         8b:6f:cb:ac:99:2d:ae:81:95:4c:5e:cd:b4:7d:62:bf:36:dc:
         99:55:13:2a:65:d7:7a:bd:fb:b6:f4:c5:d4:7c:e2:a7:77:18:
         46:c8:af:5f:33:44:6d:e0:3b:2c:a8:33:af:2f:cc:10:b1:c8:
         cc:e3:bb:77:dd:b6:89:c8:de:92:65:8b:f0:c9:ea:af:4a:b3:
         d4:54:85:ee:f1:40:41:ea:45:8c:2b:89:88:76:4b:05:14:5b:
         66:cb:86:6b:f1:e2:ac:be:04:4b:57:0d:7a:53:3e:d3:c1:b4:
         b8:02:18:8b:7a:ac:69:ff:59:ef:71:6d:a0:ba:34:f4:38:65:
         02:45:a4:95:f8:f5:10:7d:6a:a3:0c:a5:6e:6c:5f:87:8c:4a:
         e8:2e:29:4a:cd:d7:f4:49:d1:4f:bc:f2:71:20:ec:0d:c9:2a:
         24:d3:4a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:39:06 2025 by rpki-client on console.sobornost.net