Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/323830343a363332383a3a2f33322d3438203d3e20323639333432.roa
File:                     323830343a363332383a3a2f33322d3438203d3e20323639333432.roa (raw, json)
Hash identifier:          HLu1IXKjueWa3zv0vz1mIike66Cq+79hjvw7eGM0Qw4=
Subject key identifier:   A7:D9:CD:D5:C4:65:C3:86:82:AF:94:C1:7E:AF:A0:55:72:3C:32:F8
Certificate issuer:       /CN=305A3A74989C2BDDE0AA26B2A4EF92F6213A034C
Certificate serial:       6241844E06078C6B744311F09B21897C1187573B
Authority key identifier: 30:5A:3A:74:98:9C:2B:DD:E0:AA:26:B2:A4:EF:92:F6:21:3A:03:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/323830343a363332383a3a2f33322d3438203d3e20323639333432.roa
Signing time:             Tue 25 Feb 2025 13:34:19 +0000
ROA not before:           Tue 25 Feb 2025 13:29:19 +0000
ROA not after:            Tue 24 Feb 2026 13:34:19 +0000
asID:                     269342
IP address blocks:        2804:6328::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.crl
                          rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 21:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:41:84:4e:06:07:8c:6b:74:43:11:f0:9b:21:89:7c:11:87:57:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305A3A74989C2BDDE0AA26B2A4EF92F6213A034C
        Validity
            Not Before: Feb 25 13:29:19 2025 GMT
            Not After : Feb 24 13:34:19 2026 GMT
        Subject: CN=A7D9CDD5C465C38682AF94C17EAFA055723C32F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:15:48:64:14:10:4d:60:f5:44:68:3b:f8:0c:
                    0d:13:91:8b:1e:73:49:a2:b9:47:75:81:13:e5:e7:
                    b7:ac:37:82:a3:33:71:6e:dc:b3:65:2b:50:cf:71:
                    9f:ba:3c:bf:f9:6c:24:50:d4:0f:34:15:50:2b:37:
                    7f:55:1f:4c:03:f1:c5:da:60:80:ce:47:ed:b7:41:
                    38:fa:86:51:10:21:40:d8:49:26:58:b6:16:ef:75:
                    0c:3b:13:7b:cf:4f:a1:d7:fd:00:96:c9:31:cb:ff:
                    55:d2:1f:79:81:45:71:ed:e5:2c:11:7d:6b:67:5e:
                    a0:1d:97:86:ed:a8:c1:56:15:47:ee:ca:8a:d5:73:
                    ec:b0:e6:4e:cf:46:9e:bf:54:6d:f0:80:2f:ba:b2:
                    d7:0f:47:bb:7e:5b:8c:60:d3:af:3e:63:cd:97:7f:
                    e8:33:f4:c3:cb:6c:67:9a:96:df:f0:4e:62:1b:96:
                    1f:b9:f2:16:a9:ce:91:cc:f0:dd:38:b5:79:21:0f:
                    2b:9d:94:8e:f6:e9:b7:ae:43:8c:7b:9f:1a:91:d7:
                    1b:b5:8d:2f:70:69:e8:4d:ee:2a:6d:ef:22:8d:9c:
                    e9:de:c2:bb:17:0c:ec:9c:85:bc:7e:51:8d:09:a4:
                    56:13:cf:e3:fe:25:58:d3:8e:ef:e0:60:07:b3:16:
                    94:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D9:CD:D5:C4:65:C3:86:82:AF:94:C1:7E:AF:A0:55:72:3C:32:F8
            X509v3 Authority Key Identifier:
                keyid:30:5A:3A:74:98:9C:2B:DD:E0:AA:26:B2:A4:EF:92:F6:21:3A:03:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/323830343a363332383a3a2f33322d3438203d3e20323639333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6328::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:20:d5:50:db:73:8d:69:7a:76:6c:4e:e6:dc:6f:90:18:8c:
         73:3f:ff:4e:33:c9:c0:0f:80:92:ae:bf:7c:b3:7c:97:34:38:
         b5:ee:3d:c8:76:4f:89:74:49:aa:7a:f2:ac:de:65:bb:4b:33:
         f7:d2:af:60:0c:3e:c6:b6:df:fd:42:f0:83:20:6f:01:f2:88:
         3b:6b:3e:7e:85:f6:61:6e:7b:2c:ad:66:41:3a:02:c2:cf:28:
         04:b9:71:e1:55:a9:11:35:2d:79:4a:b3:04:74:ec:2e:e1:46:
         f8:e5:a7:32:03:4f:23:4c:2e:c5:ce:83:d5:d6:11:0b:4d:47:
         6f:d9:15:02:4e:fc:b2:d1:b1:17:d1:57:0d:86:c9:36:1b:00:
         41:c6:cf:6d:76:74:b6:54:6c:ec:1f:7b:e2:3d:56:7a:76:23:
         3f:74:81:91:16:05:b0:83:f1:45:22:25:20:74:bd:20:dc:59:
         a3:71:b0:08:e4:5f:02:81:30:8f:b0:de:aa:b4:fb:df:e2:9d:
         be:84:7f:3c:2c:c2:5d:6f:47:90:58:f2:4e:e1:c9:8d:6c:16:
         ed:cb:ac:da:9b:80:cf:41:f2:6a:d5:7b:b4:76:32:31:b2:1c:
         50:54:fb:8a:26:a2:c4:00:5b:7a:5d:01:14:ed:1e:62:8e:d5:
         54:42:67:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:05 2025 by rpki-client on console.sobornost.net