Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/323830343a383735303a383030303a3a2f33332d3333203d3e20323732373031.roa
File:                     323830343a383735303a383030303a3a2f33332d3333203d3e20323732373031.roa (raw, json)
Hash identifier:          vrLplyLEsRK9JY5hePBQV5G8eIcAOvJL+Y01cy/RV/8=
Subject key identifier:   6F:F6:7A:A8:02:3A:46:67:13:18:6F:0C:B2:D0:F7:C0:57:F8:91:F9
Certificate issuer:       /CN=E01C509DBE2A66987F85D9F7040DF42AFECFB53B
Certificate serial:       7F1F10369262A631D0F401043FE9AF695FCFB13C
Authority key identifier: E0:1C:50:9D:BE:2A:66:98:7F:85:D9:F7:04:0D:F4:2A:FE:CF:B5:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/323830343a383735303a383030303a3a2f33332d3333203d3e20323732373031.roa
Signing time:             Mon 14 Apr 2025 21:20:48 +0000
ROA not before:           Mon 14 Apr 2025 21:15:48 +0000
ROA not after:            Mon 13 Apr 2026 21:20:48 +0000
asID:                     272701
IP address blocks:        2804:8750:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.crl
                          rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1f:10:36:92:62:a6:31:d0:f4:01:04:3f:e9:af:69:5f:cf:b1:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E01C509DBE2A66987F85D9F7040DF42AFECFB53B
        Validity
            Not Before: Apr 14 21:15:48 2025 GMT
            Not After : Apr 13 21:20:48 2026 GMT
        Subject: CN=6FF67AA8023A466713186F0CB2D0F7C057F891F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2f:7c:58:a1:b4:5a:ca:ae:1e:b4:02:fb:1e:
                    93:f6:30:0e:03:a9:3e:fd:c6:29:18:1a:75:f5:50:
                    c4:53:b6:51:47:20:e5:9b:b5:92:f4:b2:63:32:2b:
                    0a:f7:f6:2f:7c:63:72:5e:9e:06:06:24:03:8c:dc:
                    3a:b5:39:ad:bf:9f:90:f4:3c:b8:af:21:31:0c:65:
                    1a:6f:4c:ea:0f:d8:90:fe:ae:34:6f:09:c8:d5:a2:
                    c3:f0:e6:13:25:fb:a6:67:24:44:3f:13:66:01:39:
                    01:45:f0:5c:1e:12:18:c1:5c:1a:e5:08:26:1a:d7:
                    8b:a1:a2:5c:4d:12:05:3c:9e:08:ef:88:83:09:b6:
                    64:64:99:76:fb:ff:0f:71:f3:c0:e5:1a:55:e8:bc:
                    69:69:a6:b8:90:7a:05:73:d1:23:4e:7c:15:51:15:
                    d0:e6:26:17:06:da:7d:2c:9e:b4:35:22:21:ff:48:
                    41:e0:88:48:d0:e3:8d:3f:37:45:ea:a2:f1:9b:b9:
                    5f:36:7e:39:72:85:8d:9d:dd:2d:ba:d6:f3:a8:a0:
                    dd:4a:24:e1:e8:db:2b:c3:6e:59:d2:c8:80:be:6d:
                    25:92:c0:49:1c:db:f9:f2:6c:ac:fb:3b:93:43:68:
                    68:ab:dc:19:19:b5:0f:6e:74:91:60:9c:b9:51:a1:
                    e7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F6:7A:A8:02:3A:46:67:13:18:6F:0C:B2:D0:F7:C0:57:F8:91:F9
            X509v3 Authority Key Identifier:
                keyid:E0:1C:50:9D:BE:2A:66:98:7F:85:D9:F7:04:0D:F4:2A:FE:CF:B5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/323830343a383735303a383030303a3a2f33332d3333203d3e20323732373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8750:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         bd:12:b8:69:fa:17:2e:52:db:03:53:58:47:14:1a:0d:05:f2:
         78:32:96:dc:4d:8c:27:ae:1c:c5:31:cb:b3:e9:a1:30:0a:03:
         f6:bd:6b:a9:df:33:89:20:c6:4d:f8:1e:0d:80:b4:e8:90:8e:
         dd:3f:82:78:73:8a:57:dc:e6:89:5f:41:e0:cb:7b:5d:fb:e0:
         3c:ea:27:39:61:6f:11:e7:b9:48:c0:e7:7f:d5:b2:3b:97:97:
         a5:d8:42:af:54:76:eb:c8:4f:77:6e:0c:d7:38:1e:e6:2b:23:
         c2:67:09:c6:2b:9d:3c:1e:2c:ff:2a:06:a4:8f:21:9a:97:34:
         e9:3a:03:ea:a5:8f:fa:a6:2e:7a:03:f9:4b:71:12:48:6f:e5:
         9b:39:31:cb:2f:db:37:30:61:13:c2:b9:af:09:e6:20:c6:0a:
         93:c4:20:f4:05:cb:e2:05:1e:ff:70:f7:fb:a3:85:ce:a4:a3:
         94:b2:ee:c9:cf:ae:03:bc:f5:b9:73:3c:2c:67:2d:c8:29:d6:
         c7:ac:0d:40:20:d7:8e:e1:23:a6:99:42:23:17:2c:d8:9d:99:
         78:0f:6d:db:57:c1:81:e3:08:5a:25:6e:11:a8:5a:34:f4:5b:
         ab:d3:6a:87:7c:32:f2:e9:13:d5:69:86:d2:75:de:94:a8:d5:
         49:44:f0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:07 2025 by rpki-client on console.sobornost.net