Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/323830343a373465343a3a2f33322d3438203d3e20323731303130.roa
File:                     323830343a373465343a3a2f33322d3438203d3e20323731303130.roa (raw, json)
Hash identifier:          PlKszTka+xOgUbCnypEZxiyvQi/FklqHWPXfVX8UHcA=
Subject key identifier:   DD:0A:F6:52:00:97:99:1A:39:B7:A3:CA:44:45:67:7B:26:29:1D:22
Certificate issuer:       /CN=712385E7911B416BDBABA2B3E45B26E9EE960B15
Certificate serial:       60662714069085E70CD6AE7BDAA3F9C8834CB31D
Authority key identifier: 71:23:85:E7:91:1B:41:6B:DB:AB:A2:B3:E4:5B:26:E9:EE:96:0B:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/712385E7911B416BDBABA2B3E45B26E9EE960B15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/323830343a373465343a3a2f33322d3438203d3e20323731303130.roa
Signing time:             Wed 23 Apr 2025 13:20:27 +0000
ROA not before:           Wed 23 Apr 2025 13:15:27 +0000
ROA not after:            Wed 22 Apr 2026 13:20:27 +0000
asID:                     271010
IP address blocks:        2804:74e4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/712385E7911B416BDBABA2B3E45B26E9EE960B15.crl
                          rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/712385E7911B416BDBABA2B3E45B26E9EE960B15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/712385E7911B416BDBABA2B3E45B26E9EE960B15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:66:27:14:06:90:85:e7:0c:d6:ae:7b:da:a3:f9:c8:83:4c:b3:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712385E7911B416BDBABA2B3E45B26E9EE960B15
        Validity
            Not Before: Apr 23 13:15:27 2025 GMT
            Not After : Apr 22 13:20:27 2026 GMT
        Subject: CN=DD0AF6520097991A39B7A3CA4445677B26291D22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4c:b9:3c:84:ea:ed:05:38:c5:61:94:73:f1:
                    8d:eb:8d:1b:7f:0e:f5:77:dd:ec:dc:1e:c5:01:0d:
                    65:4d:40:6c:f0:9d:1e:b0:ae:d7:bb:99:0c:01:44:
                    cb:58:33:2a:37:61:59:14:b0:68:4a:5c:00:58:f1:
                    44:97:72:65:20:97:ad:e6:31:2b:d7:73:1a:64:e5:
                    69:e5:97:7a:b8:fd:05:75:62:a7:8a:6e:2d:a1:6e:
                    56:e3:9a:0d:9b:40:93:1d:79:c1:b4:92:85:bb:96:
                    d5:61:1a:0b:5f:56:d5:83:0c:da:d3:2d:75:ce:a9:
                    ea:fd:83:52:bc:73:28:f5:94:74:75:0f:92:6d:63:
                    5d:b8:6a:77:b3:95:d0:62:e8:9f:1a:e1:28:00:4a:
                    78:bc:a0:f8:95:57:49:2c:ce:a3:0c:28:c2:6c:ff:
                    7b:31:d6:4b:34:0d:1c:87:e2:9a:05:3f:59:82:f8:
                    0c:be:ff:91:ce:21:5b:dc:7c:a5:ad:a6:da:2c:12:
                    ff:80:4e:6e:19:1e:3c:b4:ac:c0:fd:bd:f0:2e:fc:
                    57:24:04:00:04:20:c8:0d:36:6c:64:17:54:01:97:
                    85:ac:27:19:09:75:67:02:f6:cc:2d:e7:52:1c:87:
                    c1:b2:8a:89:75:dc:f7:65:20:4d:f6:fe:fd:df:0c:
                    9e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0A:F6:52:00:97:99:1A:39:B7:A3:CA:44:45:67:7B:26:29:1D:22
            X509v3 Authority Key Identifier:
                keyid:71:23:85:E7:91:1B:41:6B:DB:AB:A2:B3:E4:5B:26:E9:EE:96:0B:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/712385E7911B416BDBABA2B3E45B26E9EE960B15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/712385E7911B416BDBABA2B3E45B26E9EE960B15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/323830343a373465343a3a2f33322d3438203d3e20323731303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:9d:67:c3:8d:d0:de:3e:c6:b6:00:72:f8:8c:78:c9:61:0d:
         e5:9e:de:57:8d:d8:4f:62:4c:4b:13:06:8e:89:65:a3:42:5e:
         6e:f3:40:5a:c0:11:14:69:0e:47:8d:0a:57:e2:fd:57:f5:74:
         26:ce:e3:0d:88:b6:04:c7:9a:2f:f6:66:04:7d:af:91:1f:75:
         a2:c1:55:27:12:c0:c6:5c:29:6b:5b:a0:a7:a4:b0:fd:1b:51:
         2b:9f:4b:4d:60:86:a5:a1:bf:bc:4e:10:3f:8e:f5:2c:5d:23:
         be:f7:ea:59:c2:cd:06:64:7a:91:e8:47:06:4a:db:82:f6:e6:
         96:b5:bb:ea:d5:e3:64:76:e1:c6:1a:84:81:73:33:46:7f:69:
         28:55:fd:6a:8d:96:1a:22:3b:c3:00:9b:4c:8a:e2:4b:77:97:
         d9:5a:2e:6c:40:8c:24:af:bc:3b:01:33:9b:42:91:f2:39:f1:
         0c:6b:5b:96:2d:fd:60:59:0f:83:89:7f:e0:aa:d5:11:5c:dd:
         ca:07:8e:68:77:7c:4f:49:c1:71:bd:fc:ec:42:16:2d:52:85:
         90:e4:f7:20:8c:5e:48:67:0e:ba:b8:d4:31:24:e8:76:07:f1:
         af:d6:4a:c6:66:47:a9:1f:43:65:58:00:96:1f:78:1e:1e:00:
         8f:39:ae:b3
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUYGYnFAaQhecM1q572qP5yINMsx0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzEyMzg1RTc5MTFCNDE2QkRCQUJBMkIzRTQ1QjI2RTlF
RTk2MEIxNTAeFw0yNTA0MjMxMzE1MjdaFw0yNjA0MjIxMzIwMjdaMDMxMTAvBgNV
BAMTKEREMEFGNjUyMDA5Nzk5MUEzOUI3QTNDQTQ0NDU2NzdCMjYyOTFEMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfTLk8hOrtBTjFYZRz8Y3rjRt/
DvV33ezcHsUBDWVNQGzwnR6wrte7mQwBRMtYMyo3YVkUsGhKXABY8USXcmUgl63m
MSvXcxpk5Wnll3q4/QV1YqeKbi2hblbjmg2bQJMdecG0koW7ltVhGgtfVtWDDNrT
LXXOqer9g1K8cyj1lHR1D5JtY124anezldBi6J8a4SgASni8oPiVV0kszqMMKMJs
/3sx1ks0DRyH4poFP1mC+Ay+/5HOIVvcfKWtptosEv+ATm4ZHjy0rMD9vfAu/Fck
BAAEIMgNNmxkF1QBl4WsJxkJdWcC9swt51Ich8Gyiol13PdlIE32/v3fDJ6NAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU3Qr2UgCXmRo5t6PKREVneyYpHSIwHwYDVR0j
BBgwFoAUcSOF55EbQWvbq6Kz5Fsm6e6WCxUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzVuQVJjNHRIaFhlc2M3a2Y0MnN5ZjE4ZjYzR1NFQnBDcW8xdW8zS1ZI
UEEvMC83MTIzODVFNzkxMUI0MTZCREJBQkEyQjNFNDVCMjZFOUVFOTYwQjE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxMjM4NUU3OTExQjQxNkJE
QkFCQTJCM0U0NUIyNkU5RUU5NjBCMTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc1bkFSYzR0SGhYZXNjN2tmNDJzeWYxOGY2M0dTRUJwQ3FvMXVvM0tWSFBBLzAv
MzIzODMwMzQzYTM3MzQ2NTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzAzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR05DANBgkqhkiG9w0BAQsFAAOCAQEAx51nw43Q
3j7GtgBy+Ix4yWEN5Z7eV43YT2JMSxMGjollo0JebvNAWsARFGkOR40KV+L9V/V0
Js7jDYi2BMeaL/ZmBH2vkR91osFVJxLAxlwpa1ugp6Sw/RtRK59LTWCGpaG/vE4Q
P471LF0jvvfqWcLNBmR6kehHBkrbgvbmlrW76tXjZHbhxhqEgXMzRn9pKFX9ao2W
GiI7wwCbTIriS3eX2VoubECMJK+8OwEzm0KR8jnxDGtbli39YFkPg4l/4KrVEVzd
ygeOaHd8T0nBcb387EIWLVKFkOT3IIxeSGcOurjUMSTodgfxr9ZKxmZHqR9DZVgA
lh94Hh4Ajzmusw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:33 2025 by rpki-client on console.sobornost.net