Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/323830343a33633a3a2f33322d3438203d3e203238353736.roa
File:                     323830343a33633a3a2f33322d3438203d3e203238353736.roa (raw, json)
Hash identifier:          Ek8RXQJbKxROtKs+a8Thh/QEC8HAKuAWj17RCr4ZA68=
Subject key identifier:   9C:AE:C8:70:A0:14:A9:E5:2E:6C:D2:18:82:CB:15:A2:1E:7F:AB:92
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       D2495087C767AA2A1029863637D8FB33A0BD90
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/323830343a33633a3a2f33322d3438203d3e203238353736.roa
Signing time:             Fri 18 Apr 2025 14:30:49 +0000
ROA not before:           Fri 18 Apr 2025 14:25:49 +0000
ROA not after:            Fri 17 Apr 2026 14:30:49 +0000
asID:                     28576
IP address blocks:        2804:3c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d2:49:50:87:c7:67:aa:2a:10:29:86:36:37:d8:fb:33:a0:bd:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: Apr 18 14:25:49 2025 GMT
            Not After : Apr 17 14:30:49 2026 GMT
        Subject: CN=9CAEC870A014A9E52E6CD21882CB15A21E7FAB92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c5:76:1d:bb:0f:19:4a:54:cd:d3:ea:3f:4a:
                    9a:f1:57:21:ad:42:e7:1b:23:34:2b:19:34:eb:27:
                    9e:c9:ad:a3:be:26:9a:5c:1e:e6:12:b3:57:b5:9a:
                    41:7b:8b:4e:77:56:81:f2:ba:6c:ee:f7:52:93:06:
                    6a:c6:c5:3a:0d:8c:79:ce:9d:b7:33:a5:f7:a3:d1:
                    86:f8:de:45:e9:61:fe:28:50:f1:15:96:be:0e:81:
                    c8:ce:ef:cb:6b:0d:6f:46:8f:62:61:41:00:01:9f:
                    e8:ca:03:e0:c7:22:71:25:f9:54:4d:89:ce:da:4e:
                    31:75:23:50:b4:06:63:3b:f9:77:95:27:7a:77:d0:
                    eb:42:36:74:81:42:c8:3e:71:53:ac:09:c1:73:46:
                    6c:66:89:db:10:4e:bf:e9:d3:07:0f:96:a0:ed:62:
                    5a:41:5c:f0:c1:7c:fe:43:8f:35:8a:80:86:c2:0a:
                    05:2e:2f:e5:5e:90:5a:b8:6a:be:22:d0:c3:fc:eb:
                    c9:0d:d6:7f:7e:5d:52:6e:a6:05:63:d5:b3:3f:e5:
                    c9:71:3f:01:57:92:51:0a:52:00:76:47:ac:6e:da:
                    97:0b:48:58:6b:d0:eb:d8:c1:61:a4:6b:e0:94:8e:
                    33:42:5b:c3:86:5e:0e:99:bd:54:bf:fe:2b:f8:7e:
                    61:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AE:C8:70:A0:14:A9:E5:2E:6C:D2:18:82:CB:15:A2:1E:7F:AB:92
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/323830343a33633a3a2f33322d3438203d3e203238353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:8d:d0:7f:f9:3f:6d:a9:a2:45:63:79:fe:91:3c:37:a6:13:
         62:85:57:a9:0a:e3:a3:a7:3f:a2:26:12:e8:81:d2:6a:58:67:
         46:58:11:f5:d3:cd:ab:1d:86:73:f8:7c:bb:5c:0d:02:3b:bd:
         a2:8c:09:f6:09:04:d3:57:62:26:26:31:12:96:71:34:86:8d:
         e8:fb:a9:b0:ca:27:4f:34:ff:88:5a:63:ab:79:68:d4:6b:ee:
         8b:16:52:91:d6:78:f1:9e:a4:77:88:ae:af:a1:9a:c9:32:10:
         36:3b:83:28:f5:88:39:d1:a6:f4:9d:32:ac:96:c8:93:14:e0:
         79:e9:b5:c1:f9:ae:78:fd:99:75:0c:cc:ea:10:19:f0:df:f4:
         c2:fe:39:c8:87:5f:83:2d:08:0b:c0:e3:7f:50:5b:1f:23:df:
         c6:b9:99:82:3c:2b:55:e7:17:e9:b2:20:91:6f:e9:e4:3c:cf:
         d9:62:94:da:e7:b0:e1:95:c7:f5:5a:29:3b:fb:66:ea:61:7c:
         86:4b:c4:e5:93:87:46:55:00:04:88:5b:2c:90:56:93:36:1b:
         90:61:dc:67:b4:64:3a:0c:de:37:36:27:84:bd:82:a9:68:3c:
         ab:a3:f9:7d:5b:f0:04:b4:03:24:07:68:2b:f9:ec:21:f1:7c:
         f6:88:ee:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:58 2025 by rpki-client on console.sobornost.net