Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/323830343a316232633a3a2f33322d313238203d3e203631373133.roa
File:                     323830343a316232633a3a2f33322d313238203d3e203631373133.roa (raw, json)
Hash identifier:          H9wZR6EnY+SNWLR8fVbIacrXOJti9TTJ4Lj6/jwmnuc=
Subject key identifier:   5D:70:C8:6C:35:EA:D8:F7:AC:E9:11:FE:5A:BE:7F:64:32:44:18:84
Certificate issuer:       /CN=05820AE98D024F672790ED727F0660C773FF956B
Certificate serial:       7EB470B48DED218364B8E1859DF338CAF5482442
Authority key identifier: 05:82:0A:E9:8D:02:4F:67:27:90:ED:72:7F:06:60:C7:73:FF:95:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05820AE98D024F672790ED727F0660C773FF956B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/323830343a316232633a3a2f33322d313238203d3e203631373133.roa
Signing time:             Thu 10 Apr 2025 20:44:15 +0000
ROA not before:           Thu 10 Apr 2025 20:39:15 +0000
ROA not after:            Thu 09 Apr 2026 20:44:15 +0000
asID:                     61713
IP address blocks:        2804:1b2c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/05820AE98D024F672790ED727F0660C773FF956B.crl
                          rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/05820AE98D024F672790ED727F0660C773FF956B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05820AE98D024F672790ED727F0660C773FF956B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b4:70:b4:8d:ed:21:83:64:b8:e1:85:9d:f3:38:ca:f5:48:24:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05820AE98D024F672790ED727F0660C773FF956B
        Validity
            Not Before: Apr 10 20:39:15 2025 GMT
            Not After : Apr  9 20:44:15 2026 GMT
        Subject: CN=5D70C86C35EAD8F7ACE911FE5ABE7F6432441884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:15:77:04:87:14:bf:4c:6d:74:25:c8:57:9c:
                    36:33:41:0c:f4:6c:bf:52:ab:f3:dd:69:b8:73:10:
                    b3:65:d8:ce:cd:df:66:5e:0b:76:7b:ae:59:38:73:
                    cc:f5:00:35:52:02:47:75:18:10:3e:64:61:9a:da:
                    4f:2a:c5:7d:2d:98:14:14:ac:f9:64:cd:6c:8c:90:
                    0c:8e:55:3e:54:0c:7c:ec:3a:e2:15:3b:4f:a2:58:
                    b3:4c:c8:28:82:a1:e5:51:1e:94:f2:59:dc:a5:6f:
                    ef:c6:7f:9c:d4:a0:f2:bd:b0:70:b6:ad:4b:8f:3f:
                    33:f8:d9:6a:f2:f4:1c:14:89:06:4c:59:39:82:c3:
                    77:ef:dc:eb:53:50:7c:8a:e0:f5:b8:df:18:aa:fd:
                    f4:89:54:4b:8c:97:c8:79:c5:55:ed:41:9c:ab:11:
                    aa:7a:74:8b:1f:91:45:02:38:e7:88:18:0d:a0:d2:
                    7c:d4:69:3e:42:7b:74:03:1a:85:8d:9d:b7:2b:95:
                    cc:54:49:d3:9e:a6:67:7f:35:38:23:5a:72:81:01:
                    49:62:4a:e4:30:3d:3c:5c:6f:08:51:12:c2:3c:54:
                    18:05:d4:8c:ee:af:fe:84:a9:f2:a8:98:1e:59:57:
                    a3:9e:c7:a5:86:af:e0:20:30:bd:10:e6:07:1f:55:
                    90:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:70:C8:6C:35:EA:D8:F7:AC:E9:11:FE:5A:BE:7F:64:32:44:18:84
            X509v3 Authority Key Identifier:
                keyid:05:82:0A:E9:8D:02:4F:67:27:90:ED:72:7F:06:60:C7:73:FF:95:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/05820AE98D024F672790ED727F0660C773FF956B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05820AE98D024F672790ED727F0660C773FF956B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/323830343a316232633a3a2f33322d313238203d3e203631373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:ca:58:f3:1a:32:06:61:c6:c9:ec:a2:b1:c4:16:30:4d:30:
         8e:94:9a:52:9f:38:9c:be:41:7e:b1:d5:2a:7c:07:11:11:a9:
         82:dc:8d:2c:6d:bf:00:f6:9a:ba:f1:5a:c0:d7:6d:cd:f9:f8:
         ef:f9:37:1c:83:dd:92:fb:57:7d:be:2e:8c:bb:ea:9c:36:dd:
         fd:6d:de:a2:48:2d:67:f2:1c:5f:db:6c:f1:25:04:f5:ea:7a:
         fa:67:33:18:a4:be:b2:3a:11:46:6e:a7:10:89:43:ee:65:95:
         91:16:9e:d2:0b:5b:ab:77:5b:bc:85:3b:4b:d8:74:21:0e:09:
         9c:be:65:fd:b6:64:4c:c2:31:07:c2:ce:63:d9:e6:b8:84:30:
         5c:07:00:75:4b:2b:21:d4:c2:26:77:3e:fb:57:98:a3:36:d2:
         9d:51:9a:dc:e6:70:af:42:78:5b:b2:8e:96:43:f7:39:bf:c9:
         09:c9:9d:95:ff:14:64:62:c8:a7:90:9c:f6:b9:a1:13:8b:d6:
         ff:16:07:b4:b6:c9:34:ea:82:b3:a4:c4:49:5b:ac:27:08:c5:
         5a:52:69:02:6d:b5:28:05:77:24:15:59:dd:b7:23:78:78:ca:
         f5:a1:30:da:96:db:f5:08:70:6f:bc:30:06:96:2b:60:97:c8:
         c9:6e:cd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:05 2025 by rpki-client on console.sobornost.net