Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/323830343a346663383a3a2f33322d313238203d3e20323638333439.roa
File:                     323830343a346663383a3a2f33322d313238203d3e20323638333439.roa (raw, json)
Hash identifier:          Ps5DM/QbpgbKJQbSR9zedTqbEWDPvHL3Xs8+T+Ea5ag=
Subject key identifier:   21:9E:1D:2B:B5:53:7D:9D:46:B8:41:BE:A5:4D:99:35:42:E6:4C:DC
Certificate issuer:       /CN=F21385055D4BA00AF1EC37AF53C91C003B6A5F8A
Certificate serial:       081084DB0F0ADCDA9D15021268ABFC8190951767
Authority key identifier: F2:13:85:05:5D:4B:A0:0A:F1:EC:37:AF:53:C9:1C:00:3B:6A:5F:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/323830343a346663383a3a2f33322d313238203d3e20323638333439.roa
Signing time:             Fri 25 Apr 2025 19:55:55 +0000
ROA not before:           Fri 25 Apr 2025 19:50:55 +0000
ROA not after:            Fri 24 Apr 2026 19:55:55 +0000
asID:                     268349
IP address blocks:        2804:4fc8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.crl
                          rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 20:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:10:84:db:0f:0a:dc:da:9d:15:02:12:68:ab:fc:81:90:95:17:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21385055D4BA00AF1EC37AF53C91C003B6A5F8A
        Validity
            Not Before: Apr 25 19:50:55 2025 GMT
            Not After : Apr 24 19:55:55 2026 GMT
        Subject: CN=219E1D2BB5537D9D46B841BEA54D993542E64CDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4d:ae:42:2b:d2:39:18:76:6f:8b:aa:7e:6a:
                    e0:81:3a:52:f3:bb:06:a0:24:aa:94:02:d8:6b:21:
                    9e:77:54:ec:bf:cb:6e:a9:20:78:a1:ce:7c:f3:24:
                    ef:02:01:72:8b:33:bf:78:67:17:82:f7:d3:e7:d8:
                    a0:24:a2:d1:4b:a1:f8:13:88:1e:c5:5f:1b:c8:1d:
                    25:1e:14:98:d6:56:18:8d:ac:fd:d5:99:8d:6c:76:
                    bd:2e:92:d4:f1:c1:9a:af:63:05:44:cc:7b:c4:d8:
                    95:8b:0d:26:c8:a2:2f:6e:e8:47:97:bd:ae:ac:e6:
                    5c:ad:e5:2d:3c:be:58:91:36:92:8a:0c:24:da:f2:
                    e8:c3:82:d5:9b:e7:d9:27:3a:ec:c0:4b:f7:c5:be:
                    39:16:b1:40:7a:9b:e2:f0:de:3e:54:2b:f7:e3:61:
                    41:3e:fa:55:07:08:bb:cc:f5:6a:07:ef:09:0d:4a:
                    95:19:03:8c:23:4c:c4:85:25:d4:73:7c:9b:d2:81:
                    c9:11:7f:2a:23:a3:b9:f2:94:05:20:d7:b4:70:0b:
                    c9:dc:04:e8:8d:53:ec:cf:db:48:dd:f3:6d:30:d2:
                    3a:fc:45:91:0e:ea:0f:06:65:fc:1c:8e:f8:f9:b9:
                    da:05:67:83:b3:8e:53:eb:bb:0d:71:80:bd:f1:e0:
                    4d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9E:1D:2B:B5:53:7D:9D:46:B8:41:BE:A5:4D:99:35:42:E6:4C:DC
            X509v3 Authority Key Identifier:
                keyid:F2:13:85:05:5D:4B:A0:0A:F1:EC:37:AF:53:C9:1C:00:3B:6A:5F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/323830343a346663383a3a2f33322d313238203d3e20323638333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:1c:df:63:99:d2:fe:0c:ad:5c:e5:75:b8:27:f4:19:24:50:
         96:38:ac:0c:41:5d:70:e8:7d:93:b9:c1:a8:3d:73:ad:c8:dd:
         d3:92:a2:59:e3:92:8a:e0:49:e9:de:91:46:07:d9:5e:bb:c3:
         a5:1a:1f:06:f3:68:5e:2f:41:aa:be:4d:5e:49:78:a9:a1:a4:
         42:99:b3:5c:d2:a4:18:63:eb:02:6a:71:38:d7:97:70:52:50:
         31:58:be:f1:a8:dc:02:fd:2a:7d:02:70:6c:da:10:38:40:1e:
         b0:74:b9:2e:7c:10:83:af:47:06:3f:44:ed:2c:7c:cb:2c:91:
         1a:ab:97:9e:e0:ea:65:00:c1:35:b2:fb:42:c2:83:79:e9:d5:
         ee:a3:c7:f3:af:f4:6e:48:fd:29:34:d2:9e:63:9d:db:1a:b1:
         43:33:6f:95:8e:70:5a:93:1f:7e:50:fb:b8:ca:7a:dd:90:90:
         01:f0:5b:ca:14:3c:1b:b4:94:07:09:da:87:8c:f9:1c:ce:10:
         7a:5a:d9:d3:e8:f4:fb:40:78:bd:0f:70:a4:12:50:89:19:8f:
         aa:bd:68:58:8c:4e:bb:17:2b:fb:fb:2b:c8:56:c6:d8:90:fc:
         16:2b:8b:2e:6b:ae:4b:b7:e6:4a:6c:0f:21:ee:1a:bc:4c:d9:
         13:47:b9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:36 2025 by rpki-client on console.sobornost.net