Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/323830343a386132383a323030303a3a2f33372d3337203d3e20323733363531.roa
File:                     323830343a386132383a323030303a3a2f33372d3337203d3e20323733363531.roa (raw, json)
Hash identifier:          gnh83FNx+bnxBFACcNADsxjTyKidb8HViDNLbOUki78=
Subject key identifier:   FF:3A:B2:AB:2E:EE:69:63:AB:FA:82:77:09:1C:92:02:37:ED:B5:AD
Certificate issuer:       /CN=FD031BA6F0B6769270F067331FFFBCE55D6792E9
Certificate serial:       087819A982F1B3DB370AB0549B970981509CC210
Authority key identifier: FD:03:1B:A6:F0:B6:76:92:70:F0:67:33:1F:FF:BC:E5:5D:67:92:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/323830343a386132383a323030303a3a2f33372d3337203d3e20323733363531.roa
Signing time:             Tue 01 Apr 2025 13:14:48 +0000
ROA not before:           Tue 01 Apr 2025 13:09:48 +0000
ROA not after:            Tue 31 Mar 2026 13:14:48 +0000
asID:                     273651
IP address blocks:        2804:8a28:2000::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.crl
                          rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:16:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:78:19:a9:82:f1:b3:db:37:0a:b0:54:9b:97:09:81:50:9c:c2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD031BA6F0B6769270F067331FFFBCE55D6792E9
        Validity
            Not Before: Apr  1 13:09:48 2025 GMT
            Not After : Mar 31 13:14:48 2026 GMT
        Subject: CN=FF3AB2AB2EEE6963ABFA8277091C920237EDB5AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5f:d6:ef:78:b2:6f:b7:02:bc:05:2b:d2:e2:
                    3a:ab:51:68:6d:e9:38:10:d2:bb:fd:98:fd:c4:d0:
                    96:47:51:8f:0a:c3:3d:6b:1d:51:8c:ec:46:10:39:
                    a9:d3:fe:37:b3:06:1a:2e:71:bc:4c:13:7c:6a:69:
                    b9:f1:a3:2f:f3:8f:3a:61:98:fe:84:c6:21:0f:f3:
                    c5:f5:40:fd:70:5a:21:e0:7e:69:75:61:19:5b:11:
                    47:76:7b:2e:6d:d0:5a:8c:f0:93:2a:dd:0f:c8:d1:
                    90:fb:bc:c9:57:61:2c:78:57:fb:83:bf:47:6a:a3:
                    99:8e:07:b9:5e:d0:fa:02:aa:da:ef:ce:da:d8:f6:
                    1d:a6:22:f2:e8:9f:b9:e7:24:c8:85:44:c5:d1:3c:
                    f1:89:d9:21:2d:b7:9a:4d:5d:e1:fb:8c:53:ad:44:
                    86:e1:65:c2:ff:3f:87:08:79:70:dd:88:ab:3b:34:
                    14:87:a2:bd:94:e1:e9:5e:2d:f8:cb:b9:f2:11:3a:
                    fb:b7:c7:43:c4:ee:9c:9b:63:8f:37:80:8f:eb:f6:
                    a6:05:ed:ab:c7:9b:f3:57:f4:96:0f:de:08:ea:c2:
                    ce:99:3d:28:15:1e:ea:77:65:04:7c:a3:84:8b:30:
                    67:4a:57:51:5e:cf:6b:e9:27:40:cd:60:a6:7a:bc:
                    ba:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3A:B2:AB:2E:EE:69:63:AB:FA:82:77:09:1C:92:02:37:ED:B5:AD
            X509v3 Authority Key Identifier:
                keyid:FD:03:1B:A6:F0:B6:76:92:70:F0:67:33:1F:FF:BC:E5:5D:67:92:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/323830343a386132383a323030303a3a2f33372d3337203d3e20323733363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a28:2000::/37

    Signature Algorithm: sha256WithRSAEncryption
         4d:17:f3:86:6e:de:ca:9a:07:c3:02:4e:e0:5e:64:2a:43:00:
         8c:73:ef:5e:cf:2c:8c:ae:e5:5c:13:3a:d5:60:ef:5e:9c:a9:
         f1:cb:3b:ac:a1:9f:00:37:fb:7a:c1:c0:58:34:05:02:32:12:
         4f:e4:9f:3f:7d:69:ff:d0:8d:76:4a:53:46:5f:84:02:4e:f0:
         c4:dc:1a:12:30:a7:a4:b4:e3:1e:b0:fb:6f:3f:8a:ec:93:87:
         de:38:89:29:b4:0c:98:e0:09:98:0d:f8:ad:f7:1b:6c:f6:ca:
         6b:34:50:c3:25:a0:85:ad:cf:cb:d1:f6:6e:90:49:fc:18:33:
         f1:9c:93:38:55:d2:4e:fe:83:f4:45:9b:7c:50:0d:2e:18:12:
         26:89:f6:cd:d2:0e:f2:c8:c0:1c:f2:bb:b3:33:12:0c:65:51:
         1b:3f:ef:f4:59:46:4c:34:a4:56:f7:59:d0:8c:f0:b2:05:6c:
         9b:b7:a3:64:a1:63:b4:fa:1f:0a:79:f2:26:8c:27:0a:1b:fd:
         cd:9b:6d:14:9c:ad:50:3b:2e:35:40:4b:8a:6d:1f:0e:c5:da:
         95:21:be:ff:bb:e3:ce:3b:bc:59:35:74:a5:9d:8e:c4:cb:4d:
         60:d6:1f:17:8d:4f:87:45:87:5e:d2:44:ff:6a:f7:8a:49:e2:
         65:3e:e0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:38 2025 by rpki-client on console.sobornost.net