Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030313a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a393030313a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          ej+3WpNVhREcjfahS6bUVkEwnOJJP8P/xKT1vrARW40=
Subject key identifier:   28:02:0D:80:24:8C:DB:FC:CD:F1:B0:EA:54:38:01:E8:D4:DD:98:07
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       5B1829902A2566AA253AFC9A2C451062F1E8C27F
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030313a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Wed 16 Apr 2025 15:05:36 +0000
ROA not before:           Wed 16 Apr 2025 15:00:36 +0000
ROA not after:            Wed 15 Apr 2026 15:05:36 +0000
asID:                     264422
IP address blocks:        2804:1e58:9001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:18:29:90:2a:25:66:aa:25:3a:fc:9a:2c:45:10:62:f1:e8:c2:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: Apr 16 15:00:36 2025 GMT
            Not After : Apr 15 15:05:36 2026 GMT
        Subject: CN=28020D80248CDBFCCDF1B0EA543801E8D4DD9807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:44:a1:fa:f7:67:3c:95:57:f8:81:f4:19:7a:
                    65:09:ff:4d:08:16:1a:2a:2f:77:66:75:36:90:4c:
                    c1:76:62:f7:82:1a:39:da:db:e6:e5:2f:59:71:35:
                    48:c5:00:b8:f0:8a:56:98:a5:d9:25:66:8c:19:45:
                    ab:54:a8:33:a7:5e:85:f5:41:43:e4:81:d5:af:ae:
                    87:0d:6f:72:0d:00:b0:79:24:91:5e:d5:18:f3:12:
                    bd:59:6b:2b:88:aa:48:47:ec:75:bd:c6:3c:09:71:
                    af:7a:c0:bd:87:a3:ff:9c:e7:64:01:70:98:7e:9e:
                    f5:7c:d1:25:d3:d3:db:2d:bd:45:f2:54:2e:f1:9f:
                    c3:5b:1d:db:4f:ef:37:00:6f:8b:cc:56:e2:9d:6c:
                    f7:d9:87:cf:d5:dd:17:c5:8b:95:df:1b:3b:53:5b:
                    35:9f:63:0d:3e:82:78:83:f0:41:a0:fd:35:ab:75:
                    cb:50:ed:64:ef:64:d6:68:bc:0b:c7:d2:bb:0b:0d:
                    47:2a:c6:7f:a8:f4:21:7c:9f:a6:ba:89:c4:55:e8:
                    c3:1f:38:4a:f0:db:e8:ed:b7:2e:df:61:da:1c:0b:
                    2b:10:76:34:61:cd:5c:e8:53:fa:f3:95:78:9c:5b:
                    60:e0:91:68:41:fb:18:9f:c9:a5:9c:ef:29:9c:34:
                    7c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:02:0D:80:24:8C:DB:FC:CD:F1:B0:EA:54:38:01:E8:D4:DD:98:07
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030313a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:9001::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:dd:12:b2:d7:a0:fc:f2:d7:ce:a6:36:86:e6:e3:e7:13:c1:
         c9:55:e4:ac:28:a7:fc:ab:33:d9:7b:5f:dc:45:45:e6:68:e1:
         f0:6d:f5:da:f1:3f:60:41:70:0b:b7:99:d5:d8:e0:ed:47:46:
         27:e3:80:e3:a4:c7:7d:6f:9b:69:02:83:e4:69:3a:66:78:a8:
         90:42:ae:3b:3c:14:81:ff:78:ca:f5:71:b0:c9:c5:35:c6:b3:
         da:42:54:3c:81:b7:84:f4:36:eb:00:8f:8a:82:74:a4:18:b6:
         c8:45:89:03:28:34:0a:d5:91:80:99:b8:5f:fc:1b:d0:07:f7:
         6e:6a:42:fe:3a:96:88:61:f5:92:ae:bf:0a:df:04:f2:bc:5a:
         2a:a5:fd:ec:c0:43:c8:43:9f:53:86:29:1b:0e:e0:24:ff:86:
         99:a7:40:44:b8:81:ee:70:3c:19:60:bd:7e:2a:67:0b:81:f0:
         2b:82:59:a5:7e:b1:bc:49:b5:4b:7d:98:da:37:e4:83:35:15:
         ce:74:0e:cb:82:a4:b1:4f:d0:d9:15:5b:0c:0a:26:8d:bf:42:
         e2:27:cb:a6:4d:92:49:47:2f:d5:2a:fb:1d:97:bc:30:cb:4c:
         af:26:a7:4a:c8:ae:58:36:b0:47:a9:d3:c7:57:33:70:18:90:
         ea:ad:bc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:40 2025 by rpki-client on console.sobornost.net