Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a343030303a3a2f33342d3334203d3e20323633393631.roa
File:                     323830343a323836383a343030303a3a2f33342d3334203d3e20323633393631.roa (raw, json)
Hash identifier:          rX7L4kWGtgAd+PBzQu6iJBnsiVeqeHFWXlC4g1XV2Ss=
Subject key identifier:   48:DD:7A:CC:30:4E:8B:54:6D:DE:C8:67:89:0C:20:FB:5C:22:5A:D4
Certificate issuer:       /CN=0839492B6227EABB7726A5A064BEBE04E53C824A
Certificate serial:       78B7576A71493CB805B1C4D4FF17266FD6EC7342
Authority key identifier: 08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a343030303a3a2f33342d3334203d3e20323633393631.roa
Signing time:             Thu 06 Mar 2025 01:28:08 +0000
ROA not before:           Thu 06 Mar 2025 01:23:08 +0000
ROA not after:            Thu 05 Mar 2026 01:28:08 +0000
asID:                     263961
IP address blocks:        2804:2868:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl
                          rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b7:57:6a:71:49:3c:b8:05:b1:c4:d4:ff:17:26:6f:d6:ec:73:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839492B6227EABB7726A5A064BEBE04E53C824A
        Validity
            Not Before: Mar  6 01:23:08 2025 GMT
            Not After : Mar  5 01:28:08 2026 GMT
        Subject: CN=48DD7ACC304E8B546DDEC867890C20FB5C225AD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:16:c2:99:d1:64:4b:3a:3d:76:b1:15:44:0f:
                    d0:6e:e3:17:c9:52:33:1b:79:29:cc:f9:89:1e:29:
                    2f:f8:b4:df:93:94:09:ce:83:dc:e8:b7:24:34:d2:
                    a0:3b:f6:7d:32:a6:33:06:0c:a0:03:cc:8f:6f:04:
                    37:03:ec:a8:5c:96:c3:98:50:70:77:f7:da:77:99:
                    72:6a:ee:a5:17:95:54:48:19:d3:f2:26:b5:fc:5a:
                    f0:94:62:b2:d6:c4:63:08:64:82:6c:ac:aa:54:d7:
                    19:e8:25:4d:43:22:21:56:94:b9:84:fd:1e:d3:01:
                    5b:ec:7a:5e:41:d5:f4:e8:d9:22:f7:ba:05:fe:f7:
                    d6:5f:29:d9:02:ca:f9:7b:ad:50:a1:8a:34:01:5f:
                    f6:e4:29:87:ef:e0:c1:e6:ed:2a:07:35:5f:ed:bb:
                    87:0a:5d:da:bc:78:2c:c8:c8:bf:a1:e1:c0:35:2d:
                    dd:9f:f2:de:c6:5a:95:f7:68:eb:20:10:78:6b:aa:
                    6e:91:f6:af:bd:80:12:6a:0e:ed:22:f3:0c:49:ee:
                    c4:39:72:76:b4:72:ec:63:1d:5d:22:ee:62:db:6b:
                    dd:d9:78:2f:81:d6:a0:1b:b0:3f:1a:bc:00:7b:2f:
                    4e:df:bf:25:e1:9d:e5:8f:45:d0:f1:47:99:52:92:
                    d3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DD:7A:CC:30:4E:8B:54:6D:DE:C8:67:89:0C:20:FB:5C:22:5A:D4
            X509v3 Authority Key Identifier:
                keyid:08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a343030303a3a2f33342d3334203d3e20323633393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2868:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         58:0c:bb:c6:df:8d:5d:38:e3:5a:c4:ed:f8:64:c4:7f:92:28:
         89:f2:e2:2a:d3:f8:de:11:4b:5a:03:4a:fb:1c:7a:89:90:cc:
         62:de:3c:c1:01:9c:cc:4a:33:f0:f9:6b:5f:b0:46:6b:85:db:
         e8:00:ff:7e:a2:bc:ea:57:1c:6f:a1:50:f0:63:d1:fa:5a:17:
         cf:cc:24:af:55:97:09:ee:c0:61:25:17:fd:a6:12:4f:0c:4e:
         0c:65:8b:82:9e:1b:8e:8b:21:93:0b:b2:13:91:68:1e:19:d3:
         2a:11:8b:88:d1:bd:1c:2d:28:d8:89:72:b3:8f:7a:23:b8:8d:
         96:be:92:cd:ad:57:a6:e5:42:dc:59:d3:16:79:0f:a7:ba:27:
         6f:74:78:24:bd:82:a7:fa:f0:b4:45:25:98:c4:ea:8a:83:7a:
         8f:fe:dd:20:b0:42:64:f9:1c:85:d1:cf:8d:3f:ed:9d:e7:2d:
         02:6d:75:88:38:7d:6f:6b:bd:75:13:7e:ab:43:88:50:b3:77:
         99:29:9f:ed:eb:ed:5f:63:76:e6:1c:74:b2:a9:8d:15:33:c4:
         13:21:46:a8:67:a0:bb:47:ae:cd:4b:8a:a9:ec:54:70:58:46:
         50:d6:67:c9:01:6f:1d:c4:d3:c2:c9:23:af:8f:2e:10:14:f7:
         71:ea:8f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:01 2025 by rpki-client on console.sobornost.net