Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a343030303a3a2f33342d3334203d3e20323636363335.roa
File:                     323830343a336630383a343030303a3a2f33342d3334203d3e20323636363335.roa (raw, json)
Hash identifier:          n0r7VaZyvHT9L1bsdWbGJmaDFeX6xTYXRJyoG0UNwMY=
Subject key identifier:   3A:D1:90:B0:D0:F3:59:DB:D1:CF:4D:BD:B0:9E:BB:FC:BF:FC:EE:D8
Certificate issuer:       /CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
Certificate serial:       1835E77747CFB0777DB9BAFF6FA21866B6C66159
Authority key identifier: EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a343030303a3a2f33342d3334203d3e20323636363335.roa
Signing time:             Thu 06 Mar 2025 02:52:44 +0000
ROA not before:           Thu 06 Mar 2025 02:47:44 +0000
ROA not after:            Thu 05 Mar 2026 02:52:44 +0000
asID:                     266635
IP address blocks:        2804:3f08:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl
                          rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 18:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:35:e7:77:47:cf:b0:77:7d:b9:ba:ff:6f:a2:18:66:b6:c6:61:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
        Validity
            Not Before: Mar  6 02:47:44 2025 GMT
            Not After : Mar  5 02:52:44 2026 GMT
        Subject: CN=3AD190B0D0F359DBD1CF4DBDB09EBBFCBFFCEED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:24:c4:20:92:ab:73:3e:bd:42:38:88:61:94:
                    ca:d5:0e:7c:c1:f1:60:29:f3:20:7f:c6:ad:87:a3:
                    85:a0:58:04:bd:90:76:1e:23:ac:5e:0a:c7:94:19:
                    6e:ab:e0:54:02:1a:55:2d:e1:a2:a4:f0:c7:07:d5:
                    cc:4e:4e:d3:00:2b:a2:9c:fa:15:c7:35:13:a4:42:
                    ba:44:e7:b5:df:eb:77:bf:21:fd:cf:73:91:c1:c3:
                    18:1c:83:d0:2e:82:cd:b4:86:1d:55:94:0d:dc:c9:
                    17:bd:f2:d7:7b:4b:15:35:7b:bd:8f:5a:19:c9:57:
                    d8:35:2c:c1:97:14:2b:3d:70:e2:1d:90:84:5a:98:
                    30:90:cf:45:ae:a6:2a:7e:9b:56:36:4f:0d:17:f2:
                    78:ad:22:0c:ae:13:00:eb:a5:23:45:c7:81:c5:a8:
                    1d:07:d6:04:50:3d:f6:7d:26:b4:51:3f:2c:cd:05:
                    b2:b0:dc:a2:89:59:f8:86:ca:ea:50:16:66:02:00:
                    bf:c2:b2:99:47:ee:d7:a3:0f:d7:5a:54:2f:e8:1f:
                    c2:b2:ee:75:12:6e:30:41:5d:02:92:91:de:60:b1:
                    6e:bf:25:8d:92:dc:04:1f:33:5c:f0:df:a9:6c:11:
                    3f:33:b7:f3:4d:6f:26:36:09:ae:98:9d:b2:ce:37:
                    9d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D1:90:B0:D0:F3:59:DB:D1:CF:4D:BD:B0:9E:BB:FC:BF:FC:EE:D8
            X509v3 Authority Key Identifier:
                keyid:EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a343030303a3a2f33342d3334203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f08:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         38:e8:e0:1e:94:21:a7:30:23:33:08:4b:ba:38:4f:93:de:db:
         76:a4:83:4a:82:27:73:ec:6a:ba:d8:58:b8:7b:5b:dc:85:ef:
         83:bb:bc:eb:2c:38:56:e6:55:ce:32:c7:a6:d2:85:af:48:c5:
         f0:9f:15:8c:35:11:bb:6b:cf:93:a5:88:18:52:9a:99:4b:28:
         fa:5b:8a:a6:0c:ec:d4:53:b0:65:c9:e8:bf:0d:78:27:1e:93:
         99:72:2a:b6:0a:01:f6:da:e7:1c:f6:5a:1c:96:f1:07:3b:92:
         ad:ab:0a:2c:6b:aa:9f:57:d7:9b:49:25:a3:a5:ae:78:17:8b:
         72:e3:f9:eb:22:ac:93:70:37:91:01:af:b1:a8:71:b7:29:92:
         dc:d1:c9:21:02:ce:b7:6e:c6:d7:a5:32:46:d2:c7:c3:74:f0:
         24:a0:44:66:7c:eb:75:f4:88:3b:b2:ab:6f:a7:00:aa:ac:10:
         44:96:82:b6:07:58:be:8c:81:5f:db:1c:5a:1b:84:52:29:a7:
         37:e4:e6:4f:e6:95:1d:cc:23:d0:8c:f9:e7:db:95:7a:85:d2:
         33:ec:0a:61:8a:7f:f9:5e:fe:76:4f:b9:1f:33:c3:62:90:2c:
         ee:5f:d0:f1:3f:77:3e:07:13:9b:cb:36:5a:67:34:92:59:fb:
         e0:05:5d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:40 2025 by rpki-client on console.sobornost.net