Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/323830343a383632343a383030303a3a2f33332d3333203d3e20323732363234.roa
File:                     323830343a383632343a383030303a3a2f33332d3333203d3e20323732363234.roa (raw, json)
Hash identifier:          uW+Krbx1y+tzxnIP2jc8wtMiHufJf7YOkQhz8S1KBgw=
Subject key identifier:   F0:BF:44:40:76:DC:B8:0D:CE:5C:A7:42:BA:8E:A4:39:94:87:E1:E0
Certificate issuer:       /CN=40C2FF62F032F24C2FABB19B4D4F5EFB49181526
Certificate serial:       23BA0190CA36EE28AE387EFDE8B4E9103DA74672
Authority key identifier: 40:C2:FF:62:F0:32:F2:4C:2F:AB:B1:9B:4D:4F:5E:FB:49:18:15:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/323830343a383632343a383030303a3a2f33332d3333203d3e20323732363234.roa
Signing time:             Thu 03 Apr 2025 11:31:25 +0000
ROA not before:           Thu 03 Apr 2025 11:26:25 +0000
ROA not after:            Thu 02 Apr 2026 11:31:25 +0000
asID:                     272624
IP address blocks:        2804:8624:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.crl
                          rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 21:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ba:01:90:ca:36:ee:28:ae:38:7e:fd:e8:b4:e9:10:3d:a7:46:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C2FF62F032F24C2FABB19B4D4F5EFB49181526
        Validity
            Not Before: Apr  3 11:26:25 2025 GMT
            Not After : Apr  2 11:31:25 2026 GMT
        Subject: CN=F0BF444076DCB80DCE5CA742BA8EA4399487E1E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7f:8c:c8:19:39:8d:74:a8:15:83:0f:57:f4:
                    9b:8d:cd:78:0c:ef:1e:4e:16:d2:22:c5:25:ee:15:
                    78:e0:0b:3b:2d:a0:c1:f6:b1:42:c2:db:72:06:3f:
                    3f:92:47:74:15:b6:73:8b:8f:6a:3d:d5:e9:cb:b8:
                    ca:a6:f9:1f:26:3b:31:f3:b2:2f:da:41:57:73:d3:
                    e1:91:b9:4d:9d:e3:9a:9c:54:a8:5c:c9:e4:ba:2a:
                    b2:59:82:dc:1a:7c:9f:70:5e:e7:c3:a5:09:d6:d7:
                    44:b3:28:ef:b4:5e:59:e3:73:28:e2:ec:81:2d:90:
                    c9:90:0b:4f:d0:a0:26:c4:e3:6f:e7:4a:d2:18:0c:
                    bc:a6:be:c4:d9:8c:d6:66:4b:6a:fd:2a:ec:44:55:
                    8a:9e:04:40:ab:86:84:fc:b9:c6:d6:67:75:43:5d:
                    b1:7c:02:9d:00:e7:ab:d1:8c:a9:68:63:01:6d:9c:
                    84:11:a9:99:b3:34:7a:5b:73:3f:e5:b0:cb:9f:eb:
                    17:93:a8:9b:9d:7b:10:d4:ed:6f:84:0e:19:19:46:
                    fc:01:39:fe:17:60:d4:72:d4:e1:9d:9c:4d:a7:2a:
                    22:fa:df:2d:05:e5:ce:3e:7d:ba:bc:45:83:61:b8:
                    95:19:03:d4:ad:f8:41:17:a6:6d:39:ad:49:48:fa:
                    d3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BF:44:40:76:DC:B8:0D:CE:5C:A7:42:BA:8E:A4:39:94:87:E1:E0
            X509v3 Authority Key Identifier:
                keyid:40:C2:FF:62:F0:32:F2:4C:2F:AB:B1:9B:4D:4F:5E:FB:49:18:15:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/323830343a383632343a383030303a3a2f33332d3333203d3e20323732363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8624:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         87:7c:6a:91:cf:00:f2:b6:03:d3:77:9f:d1:9a:b8:95:f2:f5:
         09:01:15:cc:e3:e4:3d:07:b6:16:78:d7:5a:60:46:89:c5:f9:
         29:8e:42:98:4b:91:cc:59:03:53:90:be:ea:69:52:5c:74:7f:
         76:fe:30:fc:22:ae:0a:ca:dc:7a:cf:43:55:ae:4d:b0:0f:14:
         67:2a:c2:5a:31:83:74:22:96:68:cb:5c:7b:51:40:63:fc:2f:
         d3:c2:10:ca:45:01:aa:61:1b:13:19:ae:e9:b8:c1:5f:76:6a:
         15:9f:94:46:59:61:e9:25:ce:3f:82:89:5a:be:ea:0c:6a:87:
         cb:40:f8:86:c3:95:75:4f:6f:c5:4b:00:95:72:d7:e3:09:1c:
         0b:8a:83:af:6a:09:e4:75:3f:05:f9:eb:9b:63:01:bd:88:83:
         0c:60:01:fa:14:ea:61:de:11:ab:1d:15:93:b8:c5:f8:2d:ee:
         d3:6c:af:ba:61:6d:7e:15:98:21:ab:2e:f0:4a:74:6b:c6:c7:
         e3:11:47:5e:2c:8e:7c:18:d1:8c:44:49:45:0b:af:4e:8a:dc:
         d8:aa:5b:ea:de:b0:f0:9f:4c:94:e0:b1:8b:db:a7:fe:6c:db:
         e5:c1:74:4b:ad:e3:59:9c:d1:1f:8d:5d:0f:db:0d:87:23:03:
         2b:f2:a4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:13 2025 by rpki-client on console.sobornost.net