Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a343130303a3a2f34302d3430203d3e20323634393936.roa
File:                     323830343a333132343a343130303a3a2f34302d3430203d3e20323634393936.roa (raw, json)
Hash identifier:          hyFeYU6Pe39c/112ogPQs0wU1prwWyry66hAJm6YhUw=
Subject key identifier:   8E:97:8D:06:40:BB:73:F4:89:3B:83:06:C2:35:1C:BB:61:87:2B:75
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       1C41DB0936F0455F3E22DBF91D2C5D5C44088037
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a343130303a3a2f34302d3430203d3e20323634393936.roa
Signing time:             Thu 06 Mar 2025 08:50:12 +0000
ROA not before:           Thu 06 Mar 2025 08:45:12 +0000
ROA not after:            Thu 05 Mar 2026 08:50:12 +0000
asID:                     264996
IP address blocks:        2804:3124:4100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:41:db:09:36:f0:45:5f:3e:22:db:f9:1d:2c:5d:5c:44:08:80:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Mar  6 08:45:12 2025 GMT
            Not After : Mar  5 08:50:12 2026 GMT
        Subject: CN=8E978D0640BB73F4893B8306C2351CBB61872B75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:22:44:11:16:0d:73:f8:24:ab:00:67:70:d8:
                    62:cb:84:2e:d7:c7:bb:fa:e6:03:f4:83:06:54:69:
                    44:39:d4:7a:89:68:22:a3:ec:e9:81:04:cf:51:b9:
                    8e:1c:77:ea:86:14:03:82:91:d6:6e:77:31:c6:ed:
                    96:ed:7b:b1:3c:bf:8a:0b:5c:2c:08:0e:47:ac:4a:
                    8f:09:ca:ab:f9:e6:38:50:99:a1:d9:54:00:fe:a5:
                    b6:39:a5:86:da:99:f9:14:84:c6:b7:08:3c:80:06:
                    03:78:29:23:0a:52:e7:43:c4:2b:d1:b2:ea:7a:74:
                    e5:f6:f7:f6:28:fb:bb:1b:5c:28:bd:04:6f:58:cb:
                    f5:8d:02:b1:77:86:68:35:ce:d9:18:08:91:d7:64:
                    25:d7:8f:41:84:41:78:e6:de:ba:d2:cd:31:8c:28:
                    63:4d:68:7b:7d:8a:88:52:73:3e:7d:f4:e0:3e:e0:
                    ca:bc:3a:cc:aa:94:3c:a1:c6:38:b1:26:0a:56:5d:
                    bb:ca:43:6f:da:9b:80:70:36:a9:ee:a6:8a:d1:24:
                    01:bc:fd:5c:eb:8a:57:79:42:82:f9:3a:90:d3:17:
                    c2:0a:7f:db:cf:3b:9d:4f:72:a9:20:a5:da:dd:f3:
                    cb:01:bb:4f:61:df:5e:cd:29:7b:14:fa:8d:8e:ad:
                    54:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:97:8D:06:40:BB:73:F4:89:3B:83:06:C2:35:1C:BB:61:87:2B:75
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a343130303a3a2f34302d3430203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124:4100::/40

    Signature Algorithm: sha256WithRSAEncryption
         c0:42:26:f5:9a:93:f8:b9:61:8d:08:0a:03:a8:95:97:b6:da:
         b5:47:04:97:c1:77:27:af:36:bf:4b:c8:2c:c9:c6:10:28:72:
         04:ee:3e:81:dc:a6:54:52:c9:c1:7a:86:8e:fd:db:50:d5:80:
         3b:24:2a:9b:88:22:5b:fb:ce:7e:cc:8e:77:0c:6e:98:93:60:
         ca:e3:72:e0:fb:ca:97:c3:e2:62:3a:a6:d8:aa:77:18:71:8a:
         52:a0:c6:a5:45:23:a0:cd:09:14:07:71:a2:7c:a9:60:7f:61:
         85:63:93:7b:d0:fe:e5:b0:e0:b6:07:16:52:80:57:c1:f4:fa:
         2f:d3:85:fe:7a:7c:7b:bf:ce:61:33:2a:9e:a0:38:bd:b3:42:
         fd:5f:87:e1:83:36:4a:31:ee:53:7f:db:30:1d:de:3e:a5:27:
         00:b6:37:f9:88:9a:00:8d:16:82:03:e1:2d:f3:7c:ef:c2:51:
         50:68:e4:65:60:c5:e2:0e:78:b8:1a:b4:e3:31:93:20:58:6a:
         dd:6c:30:24:75:49:57:0d:73:ff:43:2b:a3:10:ac:88:1a:fd:
         65:88:c7:45:56:b7:f7:dd:b8:b2:4e:d2:34:4d:41:62:84:e4:
         a9:9a:28:94:50:3f:2e:1a:2d:f4:cc:3a:fc:64:bf:22:ab:58:
         f6:79:31:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:55 2025 by rpki-client on console.sobornost.net