Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/323830343a333233303a3a2f33322d3438203d3e20323635303631.roa
File:                     323830343a333233303a3a2f33322d3438203d3e20323635303631.roa (raw, json)
Hash identifier:          CGw1IKXcci44JpK1D4sVge9OnIeZzBCL2U5d+Wlg2Es=
Subject key identifier:   07:5B:5E:47:BA:01:D1:88:52:81:80:D5:B6:91:5F:95:79:75:8A:BF
Certificate issuer:       /CN=00E6225D0D3EAA732480AADCC84591D3BF3CB9B1
Certificate serial:       6988BFA7A8922E53D8AF05CF6CDC8605E52DE553
Authority key identifier: 00:E6:22:5D:0D:3E:AA:73:24:80:AA:DC:C8:45:91:D3:BF:3C:B9:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00E6225D0D3EAA732480AADCC84591D3BF3CB9B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/323830343a333233303a3a2f33322d3438203d3e20323635303631.roa
Signing time:             Wed 23 Apr 2025 12:49:44 +0000
ROA not before:           Wed 23 Apr 2025 12:44:44 +0000
ROA not after:            Wed 22 Apr 2026 12:49:44 +0000
asID:                     265061
IP address blocks:        2804:3230::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/00E6225D0D3EAA732480AADCC84591D3BF3CB9B1.crl
                          rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/00E6225D0D3EAA732480AADCC84591D3BF3CB9B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00E6225D0D3EAA732480AADCC84591D3BF3CB9B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 23:32:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:88:bf:a7:a8:92:2e:53:d8:af:05:cf:6c:dc:86:05:e5:2d:e5:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00E6225D0D3EAA732480AADCC84591D3BF3CB9B1
        Validity
            Not Before: Apr 23 12:44:44 2025 GMT
            Not After : Apr 22 12:49:44 2026 GMT
        Subject: CN=075B5E47BA01D188528180D5B6915F9579758ABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f4:ae:ca:32:5d:db:37:5a:b9:1d:17:7b:4d:
                    b3:63:d1:0b:45:07:ee:64:73:ba:fc:59:cc:9d:ce:
                    3f:7d:7e:f9:95:1e:a5:2f:d3:4e:b5:e1:b6:af:5a:
                    63:35:43:cf:f0:61:19:26:1d:f4:9b:1c:cf:72:23:
                    fa:f9:c7:e8:0c:db:0a:e5:ce:69:cd:c2:80:ea:eb:
                    52:ad:a2:ec:51:0d:bf:d1:99:8b:a1:eb:fe:13:30:
                    8c:da:d8:d4:24:87:77:04:74:b6:88:da:dc:2b:74:
                    2e:6f:59:20:44:32:0d:f7:76:7e:46:02:44:5b:c5:
                    43:0e:57:04:8b:70:d8:54:5d:6e:db:7d:9f:c8:ab:
                    c9:74:f9:f7:8e:af:01:5a:36:46:da:7b:fb:f5:62:
                    fc:02:c3:2d:af:a5:35:c7:78:e4:3e:b0:17:a0:bb:
                    a1:0f:a3:52:d9:42:f5:88:35:8e:18:ba:f6:d6:c5:
                    a5:f5:f3:bc:90:f0:a7:89:f4:2b:45:50:6f:59:4d:
                    cb:e0:94:e2:d5:ec:9e:06:51:5c:d7:9c:53:2b:e2:
                    9a:1f:9f:5f:f3:21:8d:7d:5f:c9:88:62:42:33:3f:
                    67:ba:a9:49:b3:fc:3b:fe:cd:e1:3d:36:3c:a2:53:
                    57:c3:7f:6f:3b:a3:fb:6f:03:6e:09:ab:43:37:1f:
                    72:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5B:5E:47:BA:01:D1:88:52:81:80:D5:B6:91:5F:95:79:75:8A:BF
            X509v3 Authority Key Identifier:
                keyid:00:E6:22:5D:0D:3E:AA:73:24:80:AA:DC:C8:45:91:D3:BF:3C:B9:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/00E6225D0D3EAA732480AADCC84591D3BF3CB9B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00E6225D0D3EAA732480AADCC84591D3BF3CB9B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/323830343a333233303a3a2f33322d3438203d3e20323635303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3230::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:11:53:17:ed:86:06:3e:53:b6:c2:57:d1:7f:20:8b:f0:f1:
         1a:86:c4:c9:0a:3c:a8:e3:ff:57:f4:9d:85:03:db:9a:98:cf:
         e7:4c:65:e6:a1:3b:ff:1c:a8:ac:41:6e:5d:9c:4d:dc:3e:4b:
         17:21:d6:bd:83:36:e7:a5:30:aa:4b:d8:1a:84:d8:20:a6:ac:
         22:55:d9:f3:d4:2c:82:7f:5b:7e:e4:a2:fa:fb:bf:42:73:28:
         97:ea:dd:c2:90:89:81:11:ac:0e:de:8d:fe:2d:8b:9d:f6:3b:
         7e:c5:64:59:89:9f:2c:b1:97:bc:15:5c:c2:4f:be:4b:1d:d2:
         60:22:32:af:78:d9:95:df:70:35:c2:8a:7a:d5:0c:43:27:1f:
         b3:44:e8:2a:f4:2a:79:e7:5e:e9:34:cf:b8:ef:cd:ac:9e:c6:
         dc:0c:42:a8:d1:ad:b1:0f:21:1c:da:cf:e6:d2:ea:98:61:8a:
         1c:9c:f1:47:eb:7a:c8:2b:7b:d5:22:25:08:38:78:b4:6d:dc:
         35:2c:97:88:ad:69:29:8d:d2:92:bd:74:03:5f:ed:0a:74:fd:
         6e:3d:60:df:fb:88:e8:4a:86:93:75:2b:24:9a:ee:5e:19:3e:
         4a:90:3f:10:16:eb:bf:11:51:2e:53:66:58:28:bd:c9:c3:b5:
         91:74:2b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:36 2025 by rpki-client on console.sobornost.net