Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/323830343a316139303a3a2f33322d3438203d3e203631383638.roa
File:                     323830343a316139303a3a2f33322d3438203d3e203631383638.roa (raw, json)
Hash identifier:          8AUMiSbvef1GcwJXJaP2BBMtQXbzEc0UGXXl9eaKrsI=
Subject key identifier:   D8:B2:13:0D:B4:B0:83:1B:3F:F1:65:41:5F:8B:94:66:5C:DE:0D:1E
Certificate issuer:       /CN=C734682B0CC1F8FCBDDFFA9685FF129FB7F46241
Certificate serial:       5CC03E66F5D410F9F7E8DBBEC85126BD0C40DAF6
Authority key identifier: C7:34:68:2B:0C:C1:F8:FC:BD:DF:FA:96:85:FF:12:9F:B7:F4:62:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/323830343a316139303a3a2f33322d3438203d3e203631383638.roa
Signing time:             Mon 07 Apr 2025 17:52:36 +0000
ROA not before:           Mon 07 Apr 2025 17:47:36 +0000
ROA not after:            Mon 06 Apr 2026 17:52:36 +0000
asID:                     61868
IP address blocks:        2804:1a90::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.crl
                          rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c0:3e:66:f5:d4:10:f9:f7:e8:db:be:c8:51:26:bd:0c:40:da:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C734682B0CC1F8FCBDDFFA9685FF129FB7F46241
        Validity
            Not Before: Apr  7 17:47:36 2025 GMT
            Not After : Apr  6 17:52:36 2026 GMT
        Subject: CN=D8B2130DB4B0831B3FF165415F8B94665CDE0D1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:96:13:65:69:ee:56:47:ef:06:b8:86:c4:9f:
                    d7:9c:a1:a3:3e:ff:38:34:76:70:80:ea:65:76:2b:
                    28:b3:89:4a:66:d8:ec:48:79:4f:34:8b:cb:8f:5b:
                    cb:cf:3d:f4:57:53:f9:33:17:02:d5:07:1f:b4:ee:
                    a9:8e:b2:bc:cf:21:63:72:67:7a:78:93:76:34:28:
                    54:0c:85:09:a9:92:4a:31:0a:3b:5d:0b:33:33:b5:
                    0c:65:c0:4d:0d:47:e3:22:20:3e:d9:f4:23:08:9c:
                    e2:11:44:93:36:84:34:4a:63:00:92:4f:41:0f:88:
                    6f:2f:69:e5:7c:1a:dd:fe:b2:cc:9a:76:16:bc:d4:
                    68:b2:69:68:c0:50:db:74:bc:18:0c:be:08:f0:95:
                    0d:ff:14:3d:9d:1d:a4:f2:2f:18:a7:17:e5:f2:8b:
                    8e:4c:a7:34:29:6c:98:9b:bf:79:83:48:47:ad:e5:
                    1f:ec:c0:1f:38:b0:6e:61:cf:4c:47:19:a5:67:df:
                    18:6b:04:2c:e1:bc:f5:16:b3:58:5c:35:44:f9:33:
                    60:b3:1b:5e:68:37:e1:8a:3e:f1:d0:21:48:da:06:
                    28:95:64:82:a5:74:37:c2:7a:a9:2b:f5:f6:5e:9e:
                    7d:7e:2f:b8:ca:2a:d8:5e:dc:73:cc:20:ba:06:c4:
                    88:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B2:13:0D:B4:B0:83:1B:3F:F1:65:41:5F:8B:94:66:5C:DE:0D:1E
            X509v3 Authority Key Identifier:
                keyid:C7:34:68:2B:0C:C1:F8:FC:BD:DF:FA:96:85:FF:12:9F:B7:F4:62:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/323830343a316139303a3a2f33322d3438203d3e203631383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:e1:0e:2f:20:17:4e:c6:2d:4d:45:d2:22:09:ae:c4:e1:f9:
         91:8f:b8:2e:f4:6b:df:76:24:6f:4d:45:e1:4d:9f:5a:55:3e:
         0e:f4:8e:c7:3d:44:da:9a:bb:59:b1:cf:ee:9b:79:92:b6:44:
         60:c4:91:cb:e2:44:fb:72:b5:d3:60:62:f7:14:a5:1a:a4:83:
         df:07:d1:a2:a7:2f:13:80:7e:07:73:71:2a:31:07:c8:99:7f:
         25:d5:2a:56:58:6c:73:b0:59:8a:d3:5a:b2:7b:f5:35:d3:10:
         50:9e:93:05:3e:05:11:92:f2:6e:94:cb:61:dc:0c:bf:1c:be:
         07:0e:c6:5d:5d:e5:a9:a9:6b:a3:19:ae:b3:da:8d:62:0d:da:
         2b:0c:e2:b3:c5:f6:de:94:0b:17:85:9f:1e:ad:f7:d9:8f:49:
         19:2c:ef:cd:0d:7d:bc:ef:b5:24:a2:4d:9c:00:43:86:cc:b9:
         ca:ce:e8:ed:28:88:93:2f:ce:ab:96:78:7c:74:cd:b3:0d:fd:
         97:d1:83:e6:e3:35:b6:51:bb:7b:3e:4a:f2:71:08:f9:c3:e9:
         5a:09:43:57:1c:67:28:3d:b8:a9:38:45:1d:78:98:e7:8e:bf:
         cc:9c:4b:f8:56:c3:c3:3e:06:6b:4e:a5:4f:55:86:95:cf:ca:
         6f:75:c4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:18 2025 by rpki-client on console.sobornost.net