Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WFqUnjSvvLje5QQr5UpuGCyruLpgbnCcvc4q3uQDx3H/1/323830343a326666383a3a2f33322d313238203d3e20323634393233.roa
File:                     323830343a326666383a3a2f33322d313238203d3e20323634393233.roa (raw, json)
Hash identifier:          8CREUfC6WO8c0q8xCY+MBNWSBFAeFQ+4TZ/GvPihGyQ=
Subject key identifier:   9C:9D:D3:66:C8:72:1F:64:F8:CD:23:64:E8:56:62:57:14:41:55:FD
Certificate issuer:       /CN=210C274322EF52EA58C60D4A44C1A9F80324BFD4
Certificate serial:       3A1F5AA7DBDA65266F9E2A9AB333582B46DBA57B
Authority key identifier: 21:0C:27:43:22:EF:52:EA:58:C6:0D:4A:44:C1:A9:F8:03:24:BF:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/210C274322EF52EA58C60D4A44C1A9F80324BFD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WFqUnjSvvLje5QQr5UpuGCyruLpgbnCcvc4q3uQDx3H/1/323830343a326666383a3a2f33322d313238203d3e20323634393233.roa
Signing time:             Thu 06 Mar 2025 15:02:55 +0000
ROA not before:           Thu 06 Mar 2025 14:57:55 +0000
ROA not after:            Thu 05 Mar 2026 15:02:55 +0000
asID:                     264923
IP address blocks:        2804:2ff8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WFqUnjSvvLje5QQr5UpuGCyruLpgbnCcvc4q3uQDx3H/1/210C274322EF52EA58C60D4A44C1A9F80324BFD4.crl
                          rsync://rpki-repo.registro.br/repo/7WFqUnjSvvLje5QQr5UpuGCyruLpgbnCcvc4q3uQDx3H/1/210C274322EF52EA58C60D4A44C1A9F80324BFD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/210C274322EF52EA58C60D4A44C1A9F80324BFD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 17:50:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:1f:5a:a7:db:da:65:26:6f:9e:2a:9a:b3:33:58:2b:46:db:a5:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=210C274322EF52EA58C60D4A44C1A9F80324BFD4
        Validity
            Not Before: Mar  6 14:57:55 2025 GMT
            Not After : Mar  5 15:02:55 2026 GMT
        Subject: CN=9C9DD366C8721F64F8CD2364E8566257144155FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:10:e9:46:83:a3:db:49:90:12:ea:5a:31:49:
                    1c:9f:d4:e2:d3:8e:73:0b:38:fc:c5:9b:a6:74:84:
                    ff:44:cb:88:6e:5c:b0:7c:ad:ca:5a:03:fa:3c:bf:
                    ec:af:14:9f:84:96:c7:61:65:3f:27:f0:52:16:09:
                    44:87:56:d6:75:1d:54:6a:dc:3f:f4:cf:18:b9:da:
                    3a:dd:77:f4:66:74:7c:f8:f9:8e:d2:c4:bb:f7:f6:
                    ca:c2:f4:fe:5c:1e:fa:33:56:4f:35:ac:85:f4:83:
                    cb:58:6a:65:1e:5b:39:3f:0e:6e:39:29:76:15:6e:
                    c7:5f:16:6e:ff:c3:a1:18:9f:f6:c5:9b:e8:6e:b9:
                    2b:82:1a:f0:a6:23:7e:24:f5:db:75:0c:02:7b:65:
                    d2:4b:75:69:f2:43:d4:a6:ae:87:74:22:a6:18:02:
                    29:6f:ab:b3:ee:24:37:4f:71:de:5f:d0:1a:8b:39:
                    df:c2:75:52:9b:5e:ff:f5:89:b8:1f:d5:a7:ec:55:
                    c5:78:01:be:e9:9a:d0:c4:b9:d0:2a:13:fb:fb:82:
                    d0:1f:5f:3b:41:05:ca:7c:63:07:21:ec:86:e4:e5:
                    3d:70:d5:6a:4c:e3:09:26:fb:8e:c1:79:96:ab:c5:
                    d2:99:bd:35:3a:88:9b:7f:26:5a:aa:3b:26:ce:53:
                    3c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:9D:D3:66:C8:72:1F:64:F8:CD:23:64:E8:56:62:57:14:41:55:FD
            X509v3 Authority Key Identifier:
                keyid:21:0C:27:43:22:EF:52:EA:58:C6:0D:4A:44:C1:A9:F8:03:24:BF:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WFqUnjSvvLje5QQr5UpuGCyruLpgbnCcvc4q3uQDx3H/1/210C274322EF52EA58C60D4A44C1A9F80324BFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/210C274322EF52EA58C60D4A44C1A9F80324BFD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WFqUnjSvvLje5QQr5UpuGCyruLpgbnCcvc4q3uQDx3H/1/323830343a326666383a3a2f33322d313238203d3e20323634393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ff8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:a7:51:75:94:6e:1e:9a:9e:07:43:b8:22:ef:55:f2:5f:3c:
         9e:cf:fe:36:d2:fe:fb:7d:2b:37:48:3d:f9:fe:2c:7b:86:f1:
         9c:f0:65:be:3c:72:cb:c0:5b:7d:d5:73:78:2b:b4:fc:1b:8b:
         53:5f:96:3a:50:89:c8:1d:f2:4e:44:d8:f8:60:db:31:ab:e6:
         05:c2:43:ec:dd:3a:68:36:ea:4d:17:ef:5a:be:9a:a8:b2:0e:
         16:53:bd:fa:0e:5f:30:97:23:ee:f8:76:e6:7d:53:f4:4d:cc:
         46:9f:fa:e5:2f:01:85:23:bb:fc:6c:9b:40:74:3f:b6:90:a4:
         eb:39:ee:70:09:60:a5:99:52:f9:7b:ed:84:90:52:ac:b0:2c:
         b1:86:eb:22:fc:c9:d9:0c:fb:9d:50:8b:c1:96:e9:41:f2:4d:
         c7:ab:64:b3:82:51:99:af:6d:1d:64:e3:ba:28:c3:79:be:d6:
         b8:d6:33:f1:bf:ba:51:4c:9b:ac:d3:2f:97:b3:1b:ac:7a:59:
         e0:e3:ac:1d:82:cc:7a:3c:5d:11:3d:d3:85:c8:ac:29:9a:b2:
         0f:de:62:73:7d:f9:84:be:6b:6e:53:a5:db:e1:8f:9e:2c:f1:
         d1:72:c9:a3:dd:ab:84:85:01:fb:36:cb:a6:81:a1:83:d5:4f:
         ec:37:60:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:09 2025 by rpki-client on console.sobornost.net