Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/323830343a323632303a3a2f33322d3438203d3e20323634333233.roa
File:                     323830343a323632303a3a2f33322d3438203d3e20323634333233.roa (raw, json)
Hash identifier:          XQzkFt0VZ2PSFZGoIyUXd6C7dpj2xDaAUTeaFfXryL4=
Subject key identifier:   0A:D9:7D:D7:D5:45:E7:23:8C:BE:D4:8B:6C:7F:BA:9D:AC:B1:66:86
Certificate issuer:       /CN=91EB13B95B705981B3BCB0592522AFFA9B29460E
Certificate serial:       0FA87BA416F4808E5BC18CDF93891C194268FAB7
Authority key identifier: 91:EB:13:B9:5B:70:59:81:B3:BC:B0:59:25:22:AF:FA:9B:29:46:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91EB13B95B705981B3BCB0592522AFFA9B29460E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/323830343a323632303a3a2f33322d3438203d3e20323634333233.roa
Signing time:             Mon 31 Mar 2025 22:10:27 +0000
ROA not before:           Mon 31 Mar 2025 22:05:27 +0000
ROA not after:            Mon 30 Mar 2026 22:10:27 +0000
asID:                     264323
IP address blocks:        2804:2620::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/91EB13B95B705981B3BCB0592522AFFA9B29460E.crl
                          rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/91EB13B95B705981B3BCB0592522AFFA9B29460E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91EB13B95B705981B3BCB0592522AFFA9B29460E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:40:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a8:7b:a4:16:f4:80:8e:5b:c1:8c:df:93:89:1c:19:42:68:fa:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91EB13B95B705981B3BCB0592522AFFA9B29460E
        Validity
            Not Before: Mar 31 22:05:27 2025 GMT
            Not After : Mar 30 22:10:27 2026 GMT
        Subject: CN=0AD97DD7D545E7238CBED48B6C7FBA9DACB16686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b2:4b:81:30:4d:f2:97:e4:dc:2d:c1:4a:54:
                    75:58:57:1b:9c:b6:e9:3b:4c:97:72:bb:ee:50:6a:
                    14:4d:24:9e:d9:19:4f:9c:45:67:f4:ed:50:08:11:
                    b1:39:09:83:66:73:d2:71:a4:3c:34:dc:52:25:c4:
                    d3:d8:ed:d6:bc:20:a3:d0:4b:2a:76:f8:0d:9f:26:
                    a1:9b:f9:6f:7f:d5:ef:c3:4d:77:e5:15:b4:0b:1e:
                    e6:00:2d:4a:3f:34:d9:84:92:51:0f:2c:2d:c7:02:
                    cf:b4:eb:03:53:16:89:29:9d:2e:52:e9:cd:a5:4f:
                    e9:39:0e:5b:00:96:94:05:fb:16:10:17:f0:91:14:
                    1a:1d:f2:fa:34:96:4f:57:0f:1d:11:cc:6e:fa:66:
                    6e:df:24:fb:df:0f:d3:75:64:ab:ff:10:73:d0:b7:
                    55:79:5b:e4:3b:d9:ad:63:6e:4e:60:fa:ae:a0:6e:
                    fa:41:a4:93:90:8a:42:29:e1:94:4b:f6:0b:eb:03:
                    9f:83:84:be:f0:bf:74:a6:2f:74:ad:22:3a:cb:9b:
                    3b:35:25:28:1d:8c:ba:6e:88:0b:c5:2b:cf:0c:48:
                    96:0a:64:87:e2:b7:94:3f:d2:3d:c7:5b:77:df:8b:
                    aa:f0:c1:31:62:a8:2e:57:6a:35:e3:be:37:11:d5:
                    66:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D9:7D:D7:D5:45:E7:23:8C:BE:D4:8B:6C:7F:BA:9D:AC:B1:66:86
            X509v3 Authority Key Identifier:
                keyid:91:EB:13:B9:5B:70:59:81:B3:BC:B0:59:25:22:AF:FA:9B:29:46:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/91EB13B95B705981B3BCB0592522AFFA9B29460E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91EB13B95B705981B3BCB0592522AFFA9B29460E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/323830343a323632303a3a2f33322d3438203d3e20323634333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2620::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:9d:77:43:51:8c:ac:4c:db:b9:09:af:6d:02:77:35:48:28:
         f1:60:04:04:04:4c:8c:26:15:98:88:31:38:28:fb:3d:3e:85:
         b5:f1:08:1b:1e:d6:32:62:1b:15:34:f2:88:79:00:04:1a:af:
         62:91:94:83:6b:36:b3:a2:eb:6c:c7:07:5e:18:83:a2:b5:71:
         c8:64:3c:c1:ab:22:bc:20:ae:5b:d8:db:9a:a8:98:f6:93:e3:
         9b:bc:af:23:ed:12:79:a4:9c:87:52:0c:7f:ea:03:ed:f0:33:
         bc:ee:14:a9:d3:f6:a7:40:b4:df:0b:b1:c6:d3:49:8f:04:06:
         10:5c:90:3f:99:3d:da:77:11:a2:69:81:af:19:07:e3:76:59:
         5d:15:89:ec:4c:50:ec:b7:1b:6c:0a:c5:b5:81:07:38:16:e3:
         3e:fa:7a:2f:d9:2d:3e:a3:f3:ef:dc:a0:27:6c:b7:f9:0d:5f:
         1a:b5:41:55:d8:68:0b:d1:e2:24:0d:14:7b:d6:c9:d2:4b:87:
         76:16:05:97:79:14:9b:cf:99:2c:ac:56:48:ff:95:6a:c1:c6:
         7d:60:06:82:a4:cf:cb:42:02:29:5d:1d:49:7e:12:51:56:81:
         42:24:33:81:17:e5:8d:c6:b8:b8:4e:3a:29:50:16:fe:4f:88:
         15:fd:46:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:38 2025 by rpki-client on console.sobornost.net