Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a383030303a3a2f34362d3436203d3e20323634343232.roa
File:                     323830343a316535383a383030303a3a2f34362d3436203d3e20323634343232.roa (raw, json)
Hash identifier:          rRfftOuMHUfqUfHTAOACMSakUJ5GC6oohdFkuWgwQSc=
Subject key identifier:   1D:D9:EA:52:70:23:F1:94:51:DE:C4:02:DB:0A:89:3B:91:09:60:FB
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       7376697410C75F1555AD35B609ADD292A51865C1
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a383030303a3a2f34362d3436203d3e20323634343232.roa
Signing time:             Wed 16 Apr 2025 15:05:41 +0000
ROA not before:           Wed 16 Apr 2025 15:00:41 +0000
ROA not after:            Wed 15 Apr 2026 15:05:41 +0000
asID:                     264422
IP address blocks:        2804:1e58:8000::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:76:69:74:10:c7:5f:15:55:ad:35:b6:09:ad:d2:92:a5:18:65:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: Apr 16 15:00:41 2025 GMT
            Not After : Apr 15 15:05:41 2026 GMT
        Subject: CN=1DD9EA527023F19451DEC402DB0A893B910960FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:85:c5:69:55:5b:5c:d5:9b:a6:bc:10:fb:c5:
                    11:49:67:f0:2c:7a:9a:9d:31:0a:62:a1:90:22:84:
                    98:a7:49:9d:e7:e8:53:be:81:fd:9c:4f:c4:fe:c9:
                    63:e4:cf:76:ad:0f:0a:d0:a5:0a:9b:1f:59:03:fb:
                    c6:57:a0:3c:81:33:27:13:91:5a:65:f2:13:7d:52:
                    41:34:0c:6f:c0:43:3d:d9:f3:19:62:e0:92:cb:35:
                    bc:e6:9e:1d:2d:a8:ba:b4:21:e7:71:eb:a4:fb:0d:
                    1c:59:35:7d:0a:c0:f2:1b:ba:9b:88:40:fd:7f:2c:
                    b6:fc:fd:a4:f9:e8:96:72:16:4e:28:ac:03:89:88:
                    98:3a:1e:18:ce:33:6b:8e:de:dc:fb:28:01:9b:69:
                    0a:21:4a:47:4a:fa:1b:cc:66:12:87:af:db:f5:b9:
                    b0:df:5f:41:ba:71:f5:81:14:9b:49:77:42:9c:65:
                    f3:92:fd:00:b2:5c:91:45:57:dd:b7:3d:ab:28:59:
                    da:be:a5:c1:40:6f:62:89:59:4a:5a:41:ed:ff:c3:
                    76:d2:48:a1:d2:38:f3:89:7a:da:ae:30:16:53:51:
                    92:2a:8a:64:8b:26:7d:f3:19:9b:42:46:73:3a:ac:
                    02:20:f1:79:e7:7b:ea:4a:e5:82:9c:00:55:9d:c4:
                    e8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D9:EA:52:70:23:F1:94:51:DE:C4:02:DB:0A:89:3B:91:09:60:FB
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a383030303a3a2f34362d3436203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:8000::/46

    Signature Algorithm: sha256WithRSAEncryption
         6b:6f:63:ba:75:65:59:da:9d:18:34:69:6a:01:c9:ef:f3:34:
         ae:62:b3:06:44:3c:f0:9f:23:6b:f1:ab:a1:87:24:f6:1d:35:
         e9:b7:d6:0e:20:56:32:5a:22:bf:97:79:91:f2:b6:09:8a:17:
         40:9c:82:f9:82:b2:70:72:1a:88:f5:14:ce:5e:6b:67:2f:92:
         92:a2:eb:71:e8:47:d0:84:5b:a5:fa:54:47:e4:83:e4:13:5d:
         fe:b6:d3:06:e6:f4:26:30:a0:77:35:61:f5:56:f7:1c:d8:71:
         a4:37:76:4c:67:2c:61:a5:09:05:83:80:20:43:d4:e3:4b:3d:
         18:0f:55:2c:2f:29:69:31:8c:c7:ba:f8:3d:8b:b7:25:43:b8:
         48:a9:08:e9:3d:f7:d1:3d:ee:3f:fe:1a:11:5c:64:dc:07:0d:
         39:1d:5f:8d:64:1e:cc:a3:ed:57:6c:b7:7d:aa:3e:d0:77:14:
         b8:00:6d:c4:7d:85:20:74:ff:90:28:f2:1a:39:4f:a4:bd:66:
         9f:70:74:97:96:18:12:8c:f1:bb:ee:6b:f5:c9:d7:c9:19:99:
         18:30:61:66:6f:8e:23:b6:47:4e:9f:47:1a:6b:07:bc:b8:ac:
         3b:58:ea:16:c0:e1:f9:ae:84:46:34:a5:fb:17:6c:86:41:21:
         7c:9e:fe:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:40 2025 by rpki-client on console.sobornost.net