Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/323830343a3737343a383330303a3a2f34302d3430203d3e203532383538.roa
File:                     323830343a3737343a383330303a3a2f34302d3430203d3e203532383538.roa (raw, json)
Hash identifier:          60Sv4JStB57zJLabiQjrxTYkYVJXDGc22hfmzSUjigA=
Subject key identifier:   FE:D3:B4:22:42:64:B9:1B:5B:D0:F7:2A:2E:F9:FA:0E:9A:38:73:07
Certificate issuer:       /CN=4765DF83369720EE1AF514C7CA6660A475D18592
Certificate serial:       6128678FCAD2E0C65605980842604D64C63EDDA6
Authority key identifier: 47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/323830343a3737343a383330303a3a2f34302d3430203d3e203532383538.roa
Signing time:             Thu 06 Mar 2025 04:33:09 +0000
ROA not before:           Thu 06 Mar 2025 04:28:09 +0000
ROA not after:            Thu 05 Mar 2026 04:33:09 +0000
asID:                     52858
IP address blocks:        2804:774:8300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.crl
                          rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:28:67:8f:ca:d2:e0:c6:56:05:98:08:42:60:4d:64:c6:3e:dd:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4765DF83369720EE1AF514C7CA6660A475D18592
        Validity
            Not Before: Mar  6 04:28:09 2025 GMT
            Not After : Mar  5 04:33:09 2026 GMT
        Subject: CN=FED3B4224264B91B5BD0F72A2EF9FA0E9A387307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:60:43:dd:6e:aa:eb:da:c4:4b:56:2c:07:ba:
                    79:74:ef:a6:f9:90:65:84:22:a0:6f:d9:63:3c:f1:
                    f9:ae:62:b1:94:20:c3:fa:11:91:77:c8:22:19:5b:
                    b0:f3:ba:ca:42:3d:f7:e3:1e:39:34:06:99:0c:94:
                    48:05:5d:eb:b9:0b:4e:a4:a4:b1:0e:4f:00:99:86:
                    37:26:d5:b2:2a:e6:6b:cb:14:cd:e2:3b:38:ed:64:
                    b6:c1:3a:ff:ef:d1:b1:bf:30:55:f5:0a:ae:91:8b:
                    35:36:0f:0f:ef:46:20:a2:af:11:51:6f:d8:5d:f2:
                    12:a2:96:46:fe:69:f1:75:24:e6:dd:60:45:95:3f:
                    e0:36:ff:53:af:00:9e:2c:73:9c:e9:de:63:e6:c6:
                    2d:66:3a:04:ad:11:02:c6:66:11:60:09:1c:93:de:
                    dd:42:fd:82:8b:80:1b:5b:74:eb:75:2e:e9:11:49:
                    77:a8:4a:eb:49:ff:ed:ce:c0:f7:d5:25:7e:21:3d:
                    6f:95:9c:75:00:62:a0:cd:07:79:b9:50:20:a0:6c:
                    29:4c:02:90:5d:4f:52:b9:a5:4b:9d:4f:cc:4b:2d:
                    bd:8b:f1:01:a5:c7:9b:62:63:ae:0e:79:38:6c:f4:
                    a9:97:5a:4f:4d:27:0d:02:0c:1e:ac:a1:9e:63:17:
                    b0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D3:B4:22:42:64:B9:1B:5B:D0:F7:2A:2E:F9:FA:0E:9A:38:73:07
            X509v3 Authority Key Identifier:
                keyid:47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/323830343a3737343a383330303a3a2f34302d3430203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:774:8300::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:d1:88:47:a9:86:27:13:5f:ef:cc:9a:0e:04:a0:10:b2:3e:
         b7:de:19:e6:95:d1:36:4e:c3:29:74:e9:a4:21:7a:0d:9d:42:
         13:ab:bd:b8:a5:0d:15:0e:c9:72:69:cd:e1:6c:4f:55:44:fa:
         c2:a5:4c:74:0e:fd:80:dd:2a:bd:f0:b6:22:8d:66:06:60:75:
         a5:47:ac:83:91:5d:25:3f:0d:bf:41:c8:e3:97:52:6f:6f:a9:
         5b:c1:29:7c:28:7e:9f:b4:f6:79:2b:d5:53:29:5f:be:4e:77:
         c1:01:77:e6:8f:70:7a:95:d0:96:3c:18:50:e9:a0:e5:14:08:
         cb:5e:17:d5:fc:60:f4:ef:87:38:9a:ce:27:da:f6:ec:3a:9d:
         5a:36:40:cd:b8:e3:65:69:68:7e:7c:ad:24:12:54:fe:8d:15:
         43:ec:ec:16:96:08:08:04:9b:8b:e5:ab:3c:1e:3c:4f:92:5a:
         d8:bf:bb:d4:94:60:28:43:12:00:d1:1f:c5:29:94:84:84:e4:
         4e:17:5c:6f:90:40:5c:e9:a1:7e:30:dd:86:13:c6:08:0d:93:
         23:17:09:d5:f2:36:23:0e:e6:aa:98:82:8b:e0:3f:7a:d4:9f:
         bf:d0:29:4e:80:44:3d:99:cf:86:f0:3d:98:27:ef:e4:cb:d9:
         de:36:5d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:55 2025 by rpki-client on console.sobornost.net