Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a3a2f33322d3333203d3e203631393030.roa
File:                     323830343a313261303a3a2f33322d3333203d3e203631393030.roa (raw, json)
Hash identifier:          UmezHfnX6JA3H0uDGb1j9bBI8evtK+rx6nBx3aRbsP0=
Subject key identifier:   98:4B:AA:41:64:84:19:51:75:2E:3B:75:91:2C:81:B2:C8:56:C6:43
Certificate issuer:       /CN=717D62DB604520975DE382D0D3273E1BDB591D67
Certificate serial:       5AF7C30B93882C83052363C25E1F416EDEBEB11E
Authority key identifier: 71:7D:62:DB:60:45:20:97:5D:E3:82:D0:D3:27:3E:1B:DB:59:1D:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a3a2f33322d3333203d3e203631393030.roa
Signing time:             Wed 16 Apr 2025 14:15:07 +0000
ROA not before:           Wed 16 Apr 2025 14:10:07 +0000
ROA not after:            Wed 15 Apr 2026 14:15:07 +0000
asID:                     61900
IP address blocks:        2804:12a0::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.crl
                          rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f7:c3:0b:93:88:2c:83:05:23:63:c2:5e:1f:41:6e:de:be:b1:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717D62DB604520975DE382D0D3273E1BDB591D67
        Validity
            Not Before: Apr 16 14:10:07 2025 GMT
            Not After : Apr 15 14:15:07 2026 GMT
        Subject: CN=984BAA4164841951752E3B75912C81B2C856C643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:92:94:97:53:98:9a:c5:a6:7f:d5:27:6d:2d:
                    ea:ea:50:77:63:d9:46:a6:b1:3f:54:36:3f:b6:b2:
                    fa:14:13:cb:71:01:93:ff:f0:ae:fc:86:95:3c:8e:
                    d3:ae:41:d6:a1:79:cf:5a:7f:6c:69:0f:5e:dc:c9:
                    dd:73:04:26:f4:b9:50:43:91:f9:46:95:38:03:4c:
                    5a:bf:44:fb:1c:e2:a8:7b:2f:94:a7:1f:45:7b:48:
                    6b:65:2f:3e:4e:9d:ab:da:f6:02:2c:eb:8b:b0:73:
                    d1:90:3f:4a:71:55:30:1b:53:8e:1e:c5:ec:07:db:
                    29:29:72:65:95:23:3e:f4:4b:3d:26:98:cb:ff:29:
                    a3:63:3e:9d:f2:c0:99:f8:6e:f6:4f:06:ee:32:13:
                    9c:0c:2c:f6:f7:e0:a7:93:2d:27:d9:2f:f1:cb:37:
                    68:4d:a8:d1:c6:70:1c:12:9c:89:bc:26:93:01:91:
                    e1:be:ab:ba:35:40:37:e1:00:ff:ff:3a:c7:af:3a:
                    f1:fd:d8:ee:0d:9c:10:e4:05:f7:f5:f8:2f:46:61:
                    15:f2:12:55:64:ad:1b:90:d4:e9:5b:42:2f:ed:89:
                    92:3e:83:ac:49:c2:e9:c0:d2:5e:f5:99:35:d9:3a:
                    6d:2b:69:80:6b:15:d3:d1:62:20:8c:0a:48:10:42:
                    6d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4B:AA:41:64:84:19:51:75:2E:3B:75:91:2C:81:B2:C8:56:C6:43
            X509v3 Authority Key Identifier:
                keyid:71:7D:62:DB:60:45:20:97:5D:E3:82:D0:D3:27:3E:1B:DB:59:1D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a3a2f33322d3333203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:6e:ef:20:46:45:9c:12:67:3f:99:22:05:30:61:0a:4a:8a:
         22:56:33:e8:64:97:ea:74:67:8f:ee:8e:e5:fa:a4:f1:40:6d:
         40:71:de:c8:dc:e5:c9:af:fc:90:94:f1:be:28:9c:c8:2e:87:
         8e:41:e3:fd:db:39:9e:39:a2:28:67:a1:f8:7b:26:bc:e7:77:
         46:a7:bb:97:1e:49:49:2c:09:2c:aa:72:98:0c:6e:3d:34:a2:
         3a:f1:7a:79:ad:b3:17:c6:29:0a:64:21:96:f0:6e:5e:29:1d:
         09:04:17:ba:03:0c:95:74:b5:01:81:67:b4:7d:52:5b:82:bf:
         71:18:6b:03:43:69:d4:c5:6e:38:29:95:60:27:c0:a8:09:b3:
         eb:3e:45:d5:de:c4:1c:69:8e:ae:c1:4c:99:42:26:c9:ed:de:
         45:f2:66:3a:56:63:cb:33:5c:d2:5f:9c:fd:4b:38:b3:4b:f4:
         36:8f:1a:c8:85:37:ed:d8:83:e1:27:0c:11:0d:32:00:9c:38:
         c3:da:48:d3:2f:66:ae:30:1e:8c:f0:43:e5:26:99:0f:2f:23:
         7b:a4:91:0e:bc:ad:ac:ab:0b:eb:c2:d2:72:dd:6a:e7:7b:ab:
         43:82:b2:f6:0f:65:b3:96:bc:cd:fc:a7:92:3a:43:90:06:10:
         a0:90:f6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:37 2025 by rpki-client on console.sobornost.net