Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a383030303a3a2f33342d3334203d3e20323633363237.roa
File:                     323830343a313034343a383030303a3a2f33342d3334203d3e20323633363237.roa (raw, json)
Hash identifier:          J9Le6Bbc6N4UISlYVxo/r4aKlfm5ZmV4U66iaMUlRQs=
Subject key identifier:   E4:48:3D:C2:C0:52:C2:A3:00:6F:E4:94:32:1A:87:AD:01:1C:C4:A8
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       1B7BC1376C3E1B1E3413DEBC6A50B0B014709332
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a383030303a3a2f33342d3334203d3e20323633363237.roa
Signing time:             Tue 25 Mar 2025 20:13:31 +0000
ROA not before:           Tue 25 Mar 2025 20:08:31 +0000
ROA not after:            Tue 24 Mar 2026 20:13:31 +0000
asID:                     263627
IP address blocks:        2804:1044:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7b:c1:37:6c:3e:1b:1e:34:13:de:bc:6a:50:b0:b0:14:70:93:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Mar 25 20:08:31 2025 GMT
            Not After : Mar 24 20:13:31 2026 GMT
        Subject: CN=E4483DC2C052C2A3006FE494321A87AD011CC4A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:67:ef:35:34:a0:7c:24:f3:0d:63:b5:1b:5a:
                    63:d6:7f:48:b5:74:d0:df:d5:65:49:e5:1d:c4:00:
                    34:f8:c7:6c:1f:68:1c:99:02:5c:f1:a1:2b:3e:b0:
                    a0:6f:b3:c0:76:ee:4b:33:84:80:e1:df:1d:b7:eb:
                    5c:e9:24:4b:f4:9d:2f:06:bb:21:1c:21:46:68:8a:
                    32:23:51:52:54:e9:39:dd:d6:47:0a:f6:60:87:f2:
                    24:62:b7:75:fa:5e:0a:15:23:e5:07:94:d6:06:be:
                    d4:61:67:75:a5:e7:01:59:4b:e9:c7:94:e7:ba:1a:
                    0b:25:57:d6:06:c8:0e:48:67:52:b4:bc:7a:37:62:
                    5e:34:3a:9b:32:e0:b2:3d:d1:9b:c6:9e:43:63:bc:
                    fc:5e:73:af:c0:9c:59:48:e3:57:31:4f:df:b2:99:
                    0c:a5:0e:a7:ce:4c:9a:f3:4d:e9:df:d1:ee:8c:50:
                    46:f0:6c:88:4f:bf:c2:7f:18:db:5c:f6:a3:eb:24:
                    6f:6f:c9:a5:bf:7a:5b:f3:b2:5d:39:0c:88:4e:84:
                    f1:97:b2:e1:85:eb:d7:6b:54:c7:b2:82:f3:3c:54:
                    84:c6:08:1e:fd:13:6b:54:6c:74:cd:3f:56:78:fe:
                    ae:37:3e:30:21:e4:dc:4b:1a:15:8e:18:83:fd:cd:
                    03:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:48:3D:C2:C0:52:C2:A3:00:6F:E4:94:32:1A:87:AD:01:1C:C4:A8
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a383030303a3a2f33342d3334203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1044:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b4:37:04:ee:0d:14:ae:61:e4:ae:a0:97:6e:14:45:03:72:69:
         0f:7b:96:c5:67:54:f1:08:f1:57:9e:9c:07:43:39:0e:a0:4d:
         5e:b4:86:4b:d4:6c:5d:5b:04:13:23:91:be:5c:d3:b1:bd:d1:
         69:74:9d:b2:bc:19:3f:ef:30:d1:2a:59:98:18:9d:73:9c:20:
         36:a4:04:b7:f8:21:ce:12:e0:20:f3:21:99:a4:c1:0b:88:37:
         40:7d:28:3d:55:c5:26:11:f6:19:40:f1:87:c7:d4:8e:b1:00:
         6c:5b:a8:71:d8:ce:c9:bd:51:ad:dd:ec:26:51:60:54:19:f1:
         37:35:b1:49:74:47:a2:a9:91:57:69:7a:0b:32:16:d4:1d:0b:
         67:0f:3d:44:61:c8:74:6e:6f:04:44:86:ab:99:29:11:53:aa:
         9c:4f:39:ea:99:01:c3:d3:10:02:6d:64:a0:67:44:ca:b8:fc:
         6d:66:d5:e9:65:a9:c3:cb:02:63:73:ec:29:30:40:10:7b:97:
         fa:d9:48:b6:5d:b3:38:0f:6b:4f:6d:db:53:ba:fa:b9:a0:1b:
         84:f0:6f:88:2e:71:70:46:0a:6d:d7:3a:b6:3c:95:b5:1b:4c:
         3b:de:cd:26:58:86:85:bc:28:cb:a6:ff:37:72:fa:a8:a5:9a:
         fa:a4:35:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:06 2025 by rpki-client on console.sobornost.net