Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/1/323830343a333239383a3a2f33322d3438203d3e20323635303837.roa
File:                     323830343a333239383a3a2f33322d3438203d3e20323635303837.roa (raw, json)
Hash identifier:          XgrYjO3Np0DZN5TsTq+3EMjDVMp14rLMY4/nvAr55y4=
Subject key identifier:   AA:8E:AA:E2:9F:55:6D:F9:D9:C7:E2:98:31:3B:EB:00:17:F9:34:B6
Certificate issuer:       /CN=4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E
Certificate serial:       590117FBA474F6BA2C2F249A4497D16ABB02DB6B
Authority key identifier: 4D:A6:9F:03:DA:36:D1:79:DE:66:AE:4E:0D:1F:75:C4:B6:65:D1:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/1/323830343a333239383a3a2f33322d3438203d3e20323635303837.roa
Signing time:             Wed 05 Mar 2025 22:51:40 +0000
ROA not before:           Wed 05 Mar 2025 22:46:40 +0000
ROA not after:            Wed 04 Mar 2026 22:51:40 +0000
asID:                     265087
IP address blocks:        2804:3298::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/1/4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.crl
                          rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/1/4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 07:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:01:17:fb:a4:74:f6:ba:2c:2f:24:9a:44:97:d1:6a:bb:02:db:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E
        Validity
            Not Before: Mar  5 22:46:40 2025 GMT
            Not After : Mar  4 22:51:40 2026 GMT
        Subject: CN=AA8EAAE29F556DF9D9C7E298313BEB0017F934B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b8:c7:77:1e:e8:de:fa:4e:f3:5d:c8:a3:28:
                    af:1b:7d:67:2d:0f:09:df:ed:45:05:5e:10:eb:f6:
                    aa:f7:83:33:20:d4:cf:ff:41:39:8e:01:10:28:8c:
                    e2:f2:92:e7:01:68:0d:db:8c:af:13:f6:c7:b8:43:
                    88:f8:bb:78:f8:f4:aa:91:5c:c9:b3:10:1e:7e:4c:
                    02:95:96:b2:88:3a:1e:f3:4e:74:d2:0f:a1:37:2c:
                    38:2a:c2:fb:3c:93:4e:cb:b9:1d:0c:e4:84:eb:fd:
                    d2:eb:8a:2c:83:44:f8:e4:9b:db:a8:51:e9:67:ce:
                    45:ac:4b:72:d8:dc:ea:07:4a:c3:dd:6e:60:2b:f4:
                    bb:b6:e2:bb:78:08:df:21:19:46:1f:2e:3f:d5:73:
                    e0:cd:19:6e:ef:6d:c3:29:83:ad:5d:ca:97:b3:f9:
                    e4:c7:35:3b:4e:30:f7:10:0c:be:a9:2b:3b:97:8f:
                    ba:00:fe:e0:a4:1e:dd:ed:9a:57:dc:ba:70:21:69:
                    ea:70:e4:0d:6c:b0:e5:cb:54:ed:32:6a:ab:d4:39:
                    a8:e3:ec:a4:4c:07:11:b1:30:62:94:af:92:55:fa:
                    86:28:a0:a0:e1:73:0c:36:0c:ca:ea:11:57:f0:d8:
                    b4:b6:4f:51:78:51:7a:a6:d8:98:67:4f:a4:3d:32:
                    66:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8E:AA:E2:9F:55:6D:F9:D9:C7:E2:98:31:3B:EB:00:17:F9:34:B6
            X509v3 Authority Key Identifier:
                keyid:4D:A6:9F:03:DA:36:D1:79:DE:66:AE:4E:0D:1F:75:C4:B6:65:D1:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/1/4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/1/323830343a333239383a3a2f33322d3438203d3e20323635303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3298::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:46:17:6e:bd:30:ab:7d:a3:48:77:ca:93:27:19:f0:41:2e:
         ac:ad:03:71:fc:24:f9:52:20:e6:c7:af:b5:d1:34:3f:39:40:
         97:71:29:df:88:f3:1d:d8:ac:ef:ab:a0:d9:79:b4:d9:e2:d4:
         59:c1:d1:ad:8f:45:f6:29:0d:0b:76:a8:10:91:6c:7e:23:a4:
         84:c3:69:03:08:c5:bd:c5:31:4e:4b:72:5b:42:ef:ba:2b:ff:
         a7:a1:92:c4:b4:25:cb:eb:e3:bc:82:d5:d8:8f:6d:2b:37:c2:
         1b:05:c9:cb:c7:5f:35:dd:73:70:f3:8b:a3:aa:41:bb:c6:b4:
         5b:61:d3:aa:89:bb:1b:02:b7:49:76:65:3e:c9:be:8c:4e:5f:
         92:da:71:0c:74:33:93:99:a1:23:ff:06:d0:32:4d:9f:ec:82:
         1f:79:09:42:93:78:b7:c2:39:18:6b:82:d8:7c:2a:79:c5:07:
         52:b8:c4:cf:88:60:aa:2a:23:dc:e9:22:01:dc:f5:1d:89:bb:
         e1:ed:98:8f:db:7e:a1:c6:a2:bb:5b:bf:e4:a6:02:9d:f7:4f:
         30:f4:7d:9b:83:bd:71:7f:84:20:dd:b3:b0:c6:d8:36:cd:e8:
         d3:dd:ec:fe:9d:f8:99:41:e1:65:f7:1f:6d:cf:7e:be:f7:d5:
         bc:08:1d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:55 2025 by rpki-client on console.sobornost.net