Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/323830343a333661303a3a2f33322d3335203d3e20323636333630.roa
File:                     323830343a333661303a3a2f33322d3335203d3e20323636333630.roa (raw, json)
Hash identifier:          rXszqdwUvQGrhVWf0dQGexOPbYRtVFxMgBAZYV51XYo=
Subject key identifier:   17:7C:71:D4:F2:0D:FE:A3:26:39:9C:AC:DE:CC:4F:0A:B1:0E:F5:87
Certificate issuer:       /CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA
Certificate serial:       11F25EC78C70036C13C6E2C7525E996EECFCD4F7
Authority key identifier: CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/323830343a333661303a3a2f33322d3335203d3e20323636333630.roa
Signing time:             Thu 06 Mar 2025 12:33:16 +0000
ROA not before:           Thu 06 Mar 2025 12:28:16 +0000
ROA not after:            Thu 05 Mar 2026 12:33:16 +0000
asID:                     266360
IP address blocks:        2804:36a0::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl
                          rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f2:5e:c7:8c:70:03:6c:13:c6:e2:c7:52:5e:99:6e:ec:fc:d4:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA
        Validity
            Not Before: Mar  6 12:28:16 2025 GMT
            Not After : Mar  5 12:33:16 2026 GMT
        Subject: CN=177C71D4F20DFEA326399CACDECC4F0AB10EF587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e9:e3:a8:59:bb:f4:e2:53:b2:04:de:03:43:
                    a8:65:66:18:c8:4a:3b:2d:77:08:90:4b:7a:5e:53:
                    c5:18:37:17:ce:f8:0d:e6:0b:b5:aa:ea:94:0e:2d:
                    bc:d9:b6:a5:50:d7:85:07:4f:14:12:78:0e:7c:ac:
                    a6:06:b2:82:60:16:ab:fa:a5:d3:b9:02:de:40:51:
                    a0:33:cb:d7:69:0d:a5:e8:0f:de:06:9c:2c:9a:8e:
                    f0:fc:26:3b:05:25:21:ac:06:0d:ba:3c:e0:84:24:
                    5b:6f:ad:d6:9c:8d:44:e1:bf:72:4d:c9:0a:b6:e4:
                    1d:91:ed:c7:4d:a7:36:c7:ca:18:17:46:fc:e1:22:
                    0b:02:27:5b:cf:db:b4:95:11:26:67:af:c1:77:43:
                    40:43:f8:d9:bd:1b:d9:c7:99:1d:c3:75:72:cd:1c:
                    76:86:cf:b7:55:d7:59:a9:a9:88:e5:36:00:dc:be:
                    c5:a0:e2:db:45:7e:27:ed:ac:d0:47:6c:34:21:0f:
                    e0:d7:4d:1c:d0:06:ce:1c:2e:f0:14:c2:5f:08:e7:
                    b9:3f:d8:e7:69:1f:b8:0a:3c:08:76:59:96:a9:95:
                    53:af:39:c3:5e:39:52:2b:c3:af:9c:03:af:23:22:
                    9d:78:17:43:98:fd:1e:11:5c:fe:19:59:25:41:4e:
                    80:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7C:71:D4:F2:0D:FE:A3:26:39:9C:AC:DE:CC:4F:0A:B1:0E:F5:87
            X509v3 Authority Key Identifier:
                keyid:CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/323830343a333661303a3a2f33322d3335203d3e20323636333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:a0:6d:67:13:bb:a9:66:db:b0:9d:fb:68:33:e2:52:24:7e:
         a7:57:eb:76:8c:03:a5:e0:3d:84:8e:fc:14:87:2f:43:5b:8d:
         69:e8:74:b7:18:62:67:e6:87:59:81:b8:96:fa:c8:2b:5f:21:
         df:5d:e8:ed:5e:e3:7b:70:93:30:a6:e6:3f:97:fc:5c:3b:c9:
         26:bd:3b:e2:f7:d3:b5:25:fc:e4:6a:76:04:01:cf:10:c6:08:
         8e:3c:ff:26:09:35:5e:9a:87:f5:bf:2b:b9:9f:e7:98:85:42:
         be:e2:3d:a0:30:b2:6f:67:8b:6f:90:39:92:e9:11:f5:bd:be:
         ad:cf:77:0c:0d:2e:0a:69:89:df:3f:85:50:8c:b5:6b:16:fa:
         b0:c8:a3:cb:02:5a:21:10:b9:05:de:5d:2e:2e:f2:f5:3b:ea:
         8b:7f:a3:56:8c:b3:c3:12:75:7c:69:f7:fc:5d:34:d5:9d:4f:
         64:32:a5:aa:e8:b1:aa:7d:a6:2a:99:e7:91:ff:bd:ea:d4:14:
         4d:6f:19:11:1e:7f:e3:d5:eb:73:88:a7:ad:e2:cb:52:ae:c7:
         73:82:51:16:a7:06:e4:f4:55:73:da:8b:82:37:e6:7e:aa:fa:
         d7:60:e5:15:27:c9:a8:6b:d1:ed:86:da:df:10:88:41:92:f3:
         f3:6a:d8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:20 2025 by rpki-client on console.sobornost.net