Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/323830343a326564343a3a2f33322d313238203d3e20323635333639.roa
File:                     323830343a326564343a3a2f33322d313238203d3e20323635333639.roa (raw, json)
Hash identifier:          OvZ08xJ3hPjcTp30io5HwnhVPDLTBcOf3+DxeNZc6IU=
Subject key identifier:   EA:41:31:02:55:F2:D6:93:B7:7C:0E:29:91:76:CE:29:48:F2:EC:62
Certificate issuer:       /CN=56B0D4522C382D2528E989DFA8E7662C852D4861
Certificate serial:       70A9C7167EB56552265FF6A55D501E85BA3E9029
Authority key identifier: 56:B0:D4:52:2C:38:2D:25:28:E9:89:DF:A8:E7:66:2C:85:2D:48:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56B0D4522C382D2528E989DFA8E7662C852D4861.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/323830343a326564343a3a2f33322d313238203d3e20323635333639.roa
Signing time:             Wed 02 Apr 2025 00:06:32 +0000
ROA not before:           Wed 02 Apr 2025 00:01:32 +0000
ROA not after:            Wed 01 Apr 2026 00:06:32 +0000
asID:                     265369
IP address blocks:        2804:2ed4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/56B0D4522C382D2528E989DFA8E7662C852D4861.crl
                          rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/56B0D4522C382D2528E989DFA8E7662C852D4861.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56B0D4522C382D2528E989DFA8E7662C852D4861.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 17:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a9:c7:16:7e:b5:65:52:26:5f:f6:a5:5d:50:1e:85:ba:3e:90:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56B0D4522C382D2528E989DFA8E7662C852D4861
        Validity
            Not Before: Apr  2 00:01:32 2025 GMT
            Not After : Apr  1 00:06:32 2026 GMT
        Subject: CN=EA41310255F2D693B77C0E299176CE2948F2EC62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:5a:46:4e:38:cc:b2:d5:dc:79:6e:8b:da:8b:
                    3e:f3:4d:0c:45:8b:6b:b6:56:71:33:fc:ea:b7:bb:
                    3f:c2:98:62:25:f7:23:3f:6e:6c:3c:f2:99:09:4d:
                    86:5b:af:c6:37:74:91:95:98:44:fa:49:0c:41:ed:
                    bb:9e:72:2b:5f:72:37:46:a9:d9:0a:d8:8c:e7:4e:
                    09:e7:a7:7c:23:4c:d5:83:c8:80:c8:b6:43:f8:1a:
                    f8:fe:62:7c:73:02:60:26:d5:0e:c8:3b:31:d4:34:
                    25:d4:5f:c5:db:04:d9:4d:71:15:8a:02:ac:ca:89:
                    5a:d7:a0:e5:1e:ed:cb:0d:f4:3c:7e:22:ee:1c:72:
                    82:3b:0f:6b:b9:10:78:7d:ea:ce:9d:20:f8:0b:2d:
                    d1:0f:b3:55:69:1e:0a:70:72:6d:c7:7d:df:69:f0:
                    5f:3f:d6:5a:ab:d1:73:9f:b1:5e:94:35:38:0d:79:
                    67:ad:a1:0a:5c:49:dc:37:97:89:a5:e3:58:05:d2:
                    e2:2f:18:dc:13:da:da:6c:a3:2d:82:aa:0d:c9:0c:
                    d1:fb:5c:69:b5:d1:61:95:85:c1:fa:af:67:74:b3:
                    c9:0f:cb:f0:1a:22:25:fd:4c:54:34:b4:ab:3d:87:
                    0c:e5:75:86:60:80:35:22:7d:ef:1e:92:12:9d:79:
                    ce:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:41:31:02:55:F2:D6:93:B7:7C:0E:29:91:76:CE:29:48:F2:EC:62
            X509v3 Authority Key Identifier:
                keyid:56:B0:D4:52:2C:38:2D:25:28:E9:89:DF:A8:E7:66:2C:85:2D:48:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/56B0D4522C382D2528E989DFA8E7662C852D4861.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56B0D4522C382D2528E989DFA8E7662C852D4861.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/323830343a326564343a3a2f33322d313238203d3e20323635333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ed4::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:0f:0b:5a:27:a4:4b:b3:89:14:c0:26:43:df:3a:a1:09:00:
         6d:b4:ec:4e:32:c7:d1:a1:b2:0e:9f:26:b7:b1:59:64:55:eb:
         20:28:bd:c1:d6:f4:cb:88:42:86:c5:fe:dd:91:5b:06:b9:6c:
         de:fe:41:f1:cd:6e:59:b7:5f:2a:a3:4c:a2:e4:46:71:81:34:
         b0:22:48:fc:45:46:44:45:7e:2f:5e:48:80:7c:4e:f2:e5:f8:
         48:c3:10:80:c1:1b:8d:ed:74:61:42:e1:3c:05:a5:58:b0:48:
         ec:e4:8d:02:b5:9b:7b:d6:89:5a:26:f8:66:b3:f2:ec:06:3f:
         a3:60:c5:ff:36:7b:54:8e:b5:3f:e3:fa:fc:72:0e:5f:01:95:
         ad:2a:21:7e:58:f0:3c:4c:22:f7:51:ef:ac:94:ce:20:b1:ce:
         ec:c6:1f:7d:b8:5c:74:22:b6:28:6a:30:79:ab:6c:db:b9:db:
         be:9d:43:13:8b:84:8d:cc:ea:f6:1e:00:3a:8d:0b:67:da:92:
         c8:e8:d8:c4:ae:8e:28:72:42:e2:49:db:f3:78:fa:f3:0f:ba:
         9f:3d:f5:08:ca:ca:5f:ff:f4:a4:64:31:f4:58:f5:68:d6:a9:
         48:a1:10:8c:8d:2a:fc:18:15:dc:3d:d6:63:7e:15:dd:ba:3c:
         4f:8a:37:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:11 2025 by rpki-client on console.sobornost.net