Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/323830343a366465633a3a2f34342d3434203d3e20323730353634.roa
File:                     323830343a366465633a3a2f34342d3434203d3e20323730353634.roa (raw, json)
Hash identifier:          JrjXmpuAR4nLSLkW7VGjjln8ADGB1CbFOR1f12E6R6k=
Subject key identifier:   4A:0F:65:BC:64:F6:F6:E8:A7:F6:BE:8B:BD:31:3D:61:19:8C:FE:22
Certificate issuer:       /CN=296C1957CA1EAD9BA9385FA528C36D900C425F48
Certificate serial:       7D3644B028B3685E76EFBB7F0321467A323E8301
Authority key identifier: 29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/323830343a366465633a3a2f34342d3434203d3e20323730353634.roa
Signing time:             Mon 14 Apr 2025 14:13:16 +0000
ROA not before:           Mon 14 Apr 2025 14:08:16 +0000
ROA not after:            Mon 13 Apr 2026 14:13:16 +0000
asID:                     270564
IP address blocks:        2804:6dec::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.crl
                          rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 03:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:36:44:b0:28:b3:68:5e:76:ef:bb:7f:03:21:46:7a:32:3e:83:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296C1957CA1EAD9BA9385FA528C36D900C425F48
        Validity
            Not Before: Apr 14 14:08:16 2025 GMT
            Not After : Apr 13 14:13:16 2026 GMT
        Subject: CN=4A0F65BC64F6F6E8A7F6BE8BBD313D61198CFE22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:11:df:65:b8:8b:20:d2:13:e7:6d:07:74:ea:
                    10:d4:6a:c6:93:d4:1a:e5:ed:8b:65:3f:f8:8e:67:
                    ac:72:52:c0:42:c6:86:d9:f3:56:d6:fe:e8:26:61:
                    4c:cb:63:92:e3:c1:6f:2f:a1:9e:e8:48:0c:3c:69:
                    d4:b3:49:b0:39:8e:59:04:b3:99:4b:3a:c1:c5:d3:
                    cd:f0:37:7d:02:f5:c1:4d:5d:97:91:0d:25:01:57:
                    41:4d:bc:cc:65:f7:75:f8:b4:c0:c2:75:55:0c:88:
                    26:30:03:d7:1d:9b:93:ac:9b:fc:7c:00:90:5c:ae:
                    20:b8:cf:90:f0:af:3c:c2:25:d9:64:cd:b4:d2:4d:
                    9c:78:bc:f5:52:b5:ff:ed:07:af:ad:cb:cb:7a:e5:
                    d5:e0:7b:58:86:32:f9:6e:7c:47:fe:57:95:5d:97:
                    ca:61:b1:51:43:8d:bc:62:c1:0c:78:0f:73:10:53:
                    db:75:0d:80:38:aa:ce:25:15:b2:ca:67:80:a8:96:
                    a1:43:bb:de:e4:b6:78:58:4e:37:43:85:eb:56:00:
                    84:52:ef:6f:48:2f:f7:f3:ec:0d:eb:fd:e1:03:f6:
                    ea:c8:c1:3f:d8:c4:97:d5:f7:30:8b:78:ae:ab:9b:
                    f9:73:0c:77:b3:03:86:0b:2a:4e:37:26:83:99:69:
                    7c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0F:65:BC:64:F6:F6:E8:A7:F6:BE:8B:BD:31:3D:61:19:8C:FE:22
            X509v3 Authority Key Identifier:
                keyid:29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/323830343a366465633a3a2f34342d3434203d3e20323730353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6dec::/44

    Signature Algorithm: sha256WithRSAEncryption
         52:59:8f:c4:dd:ce:1f:cd:9f:3f:49:56:b0:c1:92:d7:14:88:
         2e:bb:85:97:3d:1e:8a:c1:23:e7:a8:1f:a5:ad:51:88:ec:27:
         a4:fe:39:5d:a7:8a:e4:5f:3e:6b:ef:b1:d4:3d:01:0d:db:a5:
         44:29:46:dd:75:73:73:57:bd:10:0e:75:2d:ee:e7:71:84:97:
         44:44:96:91:de:63:36:a7:2b:02:82:b8:57:2d:00:4f:e9:10:
         36:d8:b8:54:ef:a3:2e:f2:7a:0d:dc:c7:9e:ef:43:88:7e:f2:
         8f:d6:11:a9:a0:0d:8c:e5:a6:f5:11:ca:3f:e5:2d:99:d9:3a:
         43:23:c2:d1:f7:4f:5b:37:89:13:1d:79:1c:fc:88:b8:34:2c:
         a7:93:b2:b3:81:21:bd:fe:92:cb:45:a1:43:32:8f:8e:5f:62:
         0d:ad:bc:36:68:30:62:fa:dd:d1:fd:71:fa:fc:59:5b:78:64:
         c9:b7:4b:3c:70:41:c2:87:a7:7a:29:53:b4:5e:e9:d8:69:14:
         bd:36:20:13:ef:04:81:1a:6b:fc:6f:65:f2:9b:d4:a1:87:2a:
         be:be:c9:dd:4e:51:c9:65:c2:66:6f:f9:6c:7a:9b:b9:96:78:
         1c:f6:41:32:27:02:20:08:a2:3d:f2:0e:c8:8e:ed:41:0e:45:
         2c:a0:e6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:39 2025 by rpki-client on console.sobornost.net