Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a3a2f33322d3438203d3e203238323032.roa
File:                     323830343a3837633a3a2f33322d3438203d3e203238323032.roa (raw, json)
Hash identifier:          3U8v5wWVU5DKuoqKxOZlyA4aH6wQWVHyDsBw39wyRng=
Subject key identifier:   02:E6:8A:16:74:38:2F:69:75:2C:C5:CD:60:AE:A1:CE:93:2F:49:CC
Certificate issuer:       /CN=3438EF474B88120C954212EE504ACF2C02AF3889
Certificate serial:       4AB3086C58B3BE0C37DFA1A2AA8858440D38B07B
Authority key identifier: 34:38:EF:47:4B:88:12:0C:95:42:12:EE:50:4A:CF:2C:02:AF:38:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3438EF474B88120C954212EE504ACF2C02AF3889.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a3a2f33322d3438203d3e203238323032.roa
Signing time:             Tue 22 Apr 2025 11:57:26 +0000
ROA not before:           Tue 22 Apr 2025 11:52:26 +0000
ROA not after:            Tue 21 Apr 2026 11:57:26 +0000
asID:                     28202
IP address blocks:        2804:87c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.crl
                          rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3438EF474B88120C954212EE504ACF2C02AF3889.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b3:08:6c:58:b3:be:0c:37:df:a1:a2:aa:88:58:44:0d:38:b0:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3438EF474B88120C954212EE504ACF2C02AF3889
        Validity
            Not Before: Apr 22 11:52:26 2025 GMT
            Not After : Apr 21 11:57:26 2026 GMT
        Subject: CN=02E68A1674382F69752CC5CD60AEA1CE932F49CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:11:25:e9:e8:3f:13:6c:38:84:66:40:4b:94:
                    ac:df:d2:9e:fb:f6:4e:a4:5e:a7:ca:65:88:60:8c:
                    77:42:88:d8:ce:62:8f:78:21:41:e7:39:87:6c:28:
                    1c:d7:02:a3:2a:60:20:94:e9:f2:d3:ad:83:2a:03:
                    7b:d3:03:4d:83:c3:29:e2:51:7b:25:e5:fa:7f:1e:
                    4e:47:62:73:f5:79:ec:be:04:8d:7c:99:8c:c6:f0:
                    71:11:4a:68:7e:78:76:c3:10:cf:9e:37:c8:9f:0d:
                    fe:2d:6c:55:d4:6d:08:46:5e:74:8a:76:7c:19:0e:
                    03:c4:f0:e3:59:e2:7b:86:b6:f1:6d:14:38:b5:56:
                    0a:3c:f8:ad:4b:a8:4c:14:bf:92:27:99:3c:a8:dd:
                    25:d7:47:b0:f1:47:a0:6e:61:01:4c:18:16:a5:b1:
                    8b:a3:83:e0:aa:81:a1:58:43:2a:3a:8c:ad:5e:ab:
                    d8:4d:b1:92:6d:8c:d5:4a:51:b6:8e:a2:ac:62:2f:
                    34:66:98:ea:06:08:1a:9e:e5:b6:e0:8e:7d:68:4c:
                    39:b0:43:10:88:59:cc:c0:94:ac:c7:18:55:2c:1b:
                    ea:69:e1:1e:53:9e:87:b1:36:01:01:b4:eb:4b:ce:
                    04:47:07:7e:24:88:30:47:b1:20:e4:82:bf:5e:95:
                    0e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E6:8A:16:74:38:2F:69:75:2C:C5:CD:60:AE:A1:CE:93:2F:49:CC
            X509v3 Authority Key Identifier:
                keyid:34:38:EF:47:4B:88:12:0C:95:42:12:EE:50:4A:CF:2C:02:AF:38:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3438EF474B88120C954212EE504ACF2C02AF3889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a3a2f33322d3438203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:98:e7:94:5c:2d:e3:20:20:30:79:e6:b0:9b:af:d1:d2:ff:
         20:97:8c:c9:07:48:0b:31:6d:29:1a:2d:95:af:21:d6:58:e7:
         4a:01:96:63:45:de:ed:b3:81:aa:1e:ae:1c:0a:fc:21:c6:e7:
         a9:de:67:98:9e:8d:3d:61:90:45:a7:d4:e0:b6:df:6c:0b:a7:
         c1:25:5a:e3:79:41:85:54:34:93:37:22:63:9a:1c:15:85:e7:
         93:9c:0a:90:8c:d0:85:d4:9a:01:e8:74:29:fb:47:aa:1c:01:
         79:33:05:91:29:67:c2:1f:35:dc:09:58:7a:7f:8d:c4:3d:cb:
         ac:6e:af:17:b4:de:08:e8:fd:38:b3:cc:56:6a:0f:55:56:fa:
         eb:23:5e:a4:f4:43:03:87:09:98:5c:23:24:4c:8b:3b:a4:00:
         72:6b:c2:49:c9:da:eb:45:e6:22:3f:02:5a:b4:fc:f6:21:00:
         63:63:c0:68:51:54:a9:b4:cb:2b:34:7c:ff:d7:3a:99:02:5f:
         47:cf:08:51:8b:dc:8a:fb:e9:6d:62:68:87:f4:f3:49:50:3c:
         f4:ca:82:e1:e0:91:d1:ce:6f:e1:26:72:80:a1:44:42:f8:3f:
         c3:b3:64:2c:c7:40:c6:a5:11:4c:c9:66:c3:9f:aa:1a:f4:63:
         b8:08:33:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:38 2025 by rpki-client on console.sobornost.net