Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5UJeW19SWFVDVaD6uPCnKSa5KWPmz1SUJ8wdscYd55Ym/0/323830343a333463633a3a2f33322d313238203d3e20323635343831.roa
File:                     323830343a333463633a3a2f33322d313238203d3e20323635343831.roa (raw, json)
Hash identifier:          GPtWqMWkpp3SN/JL1Op+J6z+K/UNWy7Y2yP4UBwGvxA=
Subject key identifier:   6F:88:66:BA:C9:10:33:7E:07:C5:70:21:E8:F7:01:D4:FB:0D:4B:84
Certificate issuer:       /CN=C4D748B22201EF73DDF479CE61008E34630A4EBA
Certificate serial:       635CD1DCA1EAFE7A15C5460637831276A8134C38
Authority key identifier: C4:D7:48:B2:22:01:EF:73:DD:F4:79:CE:61:00:8E:34:63:0A:4E:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D748B22201EF73DDF479CE61008E34630A4EBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5UJeW19SWFVDVaD6uPCnKSa5KWPmz1SUJ8wdscYd55Ym/0/323830343a333463633a3a2f33322d313238203d3e20323635343831.roa
Signing time:             Mon 31 Mar 2025 23:39:31 +0000
ROA not before:           Mon 31 Mar 2025 23:34:31 +0000
ROA not after:            Mon 30 Mar 2026 23:39:31 +0000
asID:                     265481
IP address blocks:        2804:34cc::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5UJeW19SWFVDVaD6uPCnKSa5KWPmz1SUJ8wdscYd55Ym/0/C4D748B22201EF73DDF479CE61008E34630A4EBA.crl
                          rsync://rpki-repo.registro.br/repo/5UJeW19SWFVDVaD6uPCnKSa5KWPmz1SUJ8wdscYd55Ym/0/C4D748B22201EF73DDF479CE61008E34630A4EBA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D748B22201EF73DDF479CE61008E34630A4EBA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:5c:d1:dc:a1:ea:fe:7a:15:c5:46:06:37:83:12:76:a8:13:4c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4D748B22201EF73DDF479CE61008E34630A4EBA
        Validity
            Not Before: Mar 31 23:34:31 2025 GMT
            Not After : Mar 30 23:39:31 2026 GMT
        Subject: CN=6F8866BAC910337E07C57021E8F701D4FB0D4B84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:eb:03:51:89:a0:14:57:59:91:9d:86:00:5a:
                    21:30:d5:72:4e:91:69:b2:ac:da:6a:5c:90:0b:24:
                    ff:bb:8a:e9:72:1c:da:39:fb:ff:03:c1:8c:1c:d8:
                    0c:ca:72:8a:6b:85:07:d6:c7:c0:22:c4:20:39:23:
                    e2:6b:94:3a:a3:17:93:6f:26:55:d3:c2:7f:2b:46:
                    c9:7e:1d:8b:0d:ef:63:81:4a:97:c8:7d:13:9a:85:
                    a5:b1:50:f7:c9:9b:d5:4d:2a:43:82:f1:32:25:46:
                    86:60:cf:f9:8d:7e:bb:51:61:af:50:5a:57:0c:f7:
                    f2:d9:56:99:a1:6c:62:55:71:88:88:ba:aa:2c:03:
                    44:85:3c:30:4b:1b:b6:de:0a:e8:a8:01:e8:85:c9:
                    fb:91:6b:c2:b9:1c:29:41:f5:97:66:30:79:56:f7:
                    cc:41:86:e1:37:de:be:d8:bb:d3:e8:7a:8c:80:1c:
                    70:3e:d4:84:d9:bd:7e:df:cf:91:4e:ad:bc:c4:34:
                    88:dd:bf:38:dd:7d:a9:6a:53:0d:90:a2:d6:38:ea:
                    39:3b:31:80:0d:a0:a0:f8:bb:c6:66:0c:f9:b5:95:
                    0b:7c:98:20:14:46:0b:ee:36:6a:c0:97:65:05:33:
                    4f:cb:24:96:ca:6b:a2:a4:24:57:c0:af:26:f3:27:
                    f6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:88:66:BA:C9:10:33:7E:07:C5:70:21:E8:F7:01:D4:FB:0D:4B:84
            X509v3 Authority Key Identifier:
                keyid:C4:D7:48:B2:22:01:EF:73:DD:F4:79:CE:61:00:8E:34:63:0A:4E:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5UJeW19SWFVDVaD6uPCnKSa5KWPmz1SUJ8wdscYd55Ym/0/C4D748B22201EF73DDF479CE61008E34630A4EBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D748B22201EF73DDF479CE61008E34630A4EBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5UJeW19SWFVDVaD6uPCnKSa5KWPmz1SUJ8wdscYd55Ym/0/323830343a333463633a3a2f33322d313238203d3e20323635343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:72:18:eb:4a:76:27:a3:c5:8b:f3:63:1d:d3:25:e5:25:61:
         09:64:23:32:87:84:bb:07:07:35:7b:d6:06:d0:65:9b:92:f8:
         4b:83:c6:8f:08:f4:37:e4:6f:22:4d:bb:52:1d:54:ea:df:7c:
         06:a6:1d:42:3f:91:04:da:22:33:95:85:51:20:e2:af:40:42:
         f5:10:4a:d0:2f:38:33:86:69:f0:92:65:49:6a:42:68:fa:6f:
         48:d7:54:73:ed:7d:62:69:fe:10:da:85:00:d4:7e:d1:77:0f:
         d7:6d:c4:99:f3:8b:99:ae:db:d1:88:ab:ec:d7:eb:8a:bd:f8:
         9b:fe:fe:b0:15:7c:64:94:a5:f3:f6:31:83:b4:30:53:3b:d1:
         8b:96:2a:cc:66:2d:50:3d:dc:e5:ca:ac:fa:d7:3e:81:1d:4f:
         c7:ec:df:e6:ad:bf:bf:44:35:30:d9:f5:62:36:14:6b:08:fc:
         93:94:4b:b9:6f:58:79:ef:c3:a4:bd:c9:52:0e:fb:8d:19:53:
         29:b9:5e:1c:63:05:8c:5f:ec:22:71:00:d5:9f:f7:08:d6:8d:
         d1:da:27:4c:5b:e3:14:c0:97:b4:59:b3:97:68:f9:29:a6:4a:
         58:1f:38:1d:5d:a9:2c:65:aa:a0:ac:4b:67:da:f8:7e:a7:52:
         da:d9:18:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:44 2025 by rpki-client on console.sobornost.net