Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a343230303a3a2f34302d3430203d3e20323634393936.roa
File:                     323830343a333132343a343230303a3a2f34302d3430203d3e20323634393936.roa (raw, json)
Hash identifier:          ZfTzYO9IU3D2lW9w11I+GlRERJ0nI83HKzxl4XBrREc=
Subject key identifier:   9A:17:8D:78:51:2D:24:8E:90:E4:AA:57:D3:D3:4C:CF:CF:EB:A3:5E
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       17C02F3F3BE54BE5BC60C062714730B45DFA6CB5
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a343230303a3a2f34302d3430203d3e20323634393936.roa
Signing time:             Thu 06 Mar 2025 08:50:10 +0000
ROA not before:           Thu 06 Mar 2025 08:45:10 +0000
ROA not after:            Thu 05 Mar 2026 08:50:10 +0000
asID:                     264996
IP address blocks:        2804:3124:4200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c0:2f:3f:3b:e5:4b:e5:bc:60:c0:62:71:47:30:b4:5d:fa:6c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Mar  6 08:45:10 2025 GMT
            Not After : Mar  5 08:50:10 2026 GMT
        Subject: CN=9A178D78512D248E90E4AA57D3D34CCFCFEBA35E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:63:d0:23:07:90:2c:6e:b6:af:13:f4:b7:f2:
                    33:e7:61:7f:fc:45:8d:8d:03:7b:d2:57:38:87:c2:
                    61:08:ba:6c:4f:52:d9:69:ca:d5:6a:a5:66:85:d0:
                    c0:d5:5f:57:e6:03:94:dd:63:e7:83:9c:2c:fd:36:
                    89:a0:88:01:f8:8d:fe:19:d9:03:e6:8e:5e:e0:01:
                    c1:32:cf:4b:05:b2:c7:09:4d:3d:1f:2c:dd:5d:52:
                    51:58:c9:5a:64:79:da:12:9e:ce:a2:51:e2:7e:b5:
                    24:fc:6b:a8:0d:c4:a1:33:11:d7:bd:73:50:95:fa:
                    f4:7d:f9:7e:3e:6b:a8:82:c6:65:3d:e6:cb:c3:dc:
                    d2:13:98:ab:97:4e:75:f7:dd:b9:62:20:60:7b:cc:
                    72:0c:b7:80:90:27:2c:4d:58:77:e0:d5:ca:1d:42:
                    a3:48:ca:ce:46:b9:d0:27:78:09:f0:20:84:58:90:
                    0a:91:82:9c:71:ee:82:e1:12:a2:41:46:2d:4d:fd:
                    c7:33:12:dd:a0:df:33:54:15:fe:89:d6:48:cc:f3:
                    a0:a0:54:5a:53:b9:65:c3:06:33:30:49:75:2c:56:
                    23:93:74:22:65:6c:11:a2:32:a1:0e:22:7f:23:f3:
                    b0:4e:d7:a0:bc:8a:3d:32:af:91:ca:dc:70:12:b1:
                    4d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:17:8D:78:51:2D:24:8E:90:E4:AA:57:D3:D3:4C:CF:CF:EB:A3:5E
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a343230303a3a2f34302d3430203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124:4200::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:83:de:35:0a:fe:e2:27:aa:6d:2a:dd:6e:90:05:5c:5e:91:
         16:4b:5f:f4:6a:d9:b3:4d:4f:18:8c:34:40:56:e3:33:47:2f:
         a2:68:83:60:e7:e3:ce:cf:05:72:2e:92:49:f3:9d:76:2c:27:
         50:35:5c:77:b7:3b:68:d8:5d:88:e3:20:ab:57:58:6c:39:28:
         e1:3e:0e:28:b8:47:ee:98:80:59:24:6f:71:be:31:85:7e:a2:
         71:7a:5a:37:58:c3:ac:a8:b7:15:d3:4d:d0:e1:f4:8c:a0:19:
         d7:1a:a0:c5:1f:ac:ec:4f:2f:cc:53:eb:fb:a7:e8:37:e7:07:
         b5:6c:92:32:b4:c8:24:0f:92:e5:18:51:12:e1:e8:e9:46:0b:
         22:d9:68:8e:fb:14:2a:02:45:ac:4b:62:2c:67:8f:0f:dd:d4:
         aa:70:b0:18:63:8b:2c:f8:d6:10:7b:f4:c9:16:62:8a:2f:28:
         ce:fe:13:ac:3a:ed:ef:fb:ec:98:15:87:73:22:26:39:ff:ff:
         ba:a3:46:75:ba:02:b4:02:19:23:5d:5d:5d:3f:5a:87:b3:f2:
         f4:99:8b:4e:d8:40:86:27:48:60:cc:d0:ed:f3:6f:6f:e5:69:
         04:a9:18:9e:b0:03:ea:3d:01:e9:a4:ee:02:28:87:a0:4b:19:
         e0:ca:69:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:55 2025 by rpki-client on console.sobornost.net