Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/323830343a373938383a3a2f33332d3333203d3e20323731333131.roa
File:                     323830343a373938383a3a2f33332d3333203d3e20323731333131.roa (raw, json)
Hash identifier:          /EKmyU9cngNkpQsuuKgai8Lxcg85cyG4bmeEbPUoBl4=
Subject key identifier:   2B:4E:36:5B:01:07:2E:E5:30:9B:35:39:E8:FB:E1:CF:64:32:7E:D5
Certificate issuer:       /CN=B6CC812D59F4308FCB1D2239555678B476218767
Certificate serial:       08A0C61C585C00971009DF4C788348B8A37E6BAD
Authority key identifier: B6:CC:81:2D:59:F4:30:8F:CB:1D:22:39:55:56:78:B4:76:21:87:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/323830343a373938383a3a2f33332d3333203d3e20323731333131.roa
Signing time:             Wed 05 Mar 2025 21:14:51 +0000
ROA not before:           Wed 05 Mar 2025 21:09:51 +0000
ROA not after:            Wed 04 Mar 2026 21:14:51 +0000
asID:                     271311
IP address blocks:        2804:7988::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.crl
                          rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 15:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a0:c6:1c:58:5c:00:97:10:09:df:4c:78:83:48:b8:a3:7e:6b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6CC812D59F4308FCB1D2239555678B476218767
        Validity
            Not Before: Mar  5 21:09:51 2025 GMT
            Not After : Mar  4 21:14:51 2026 GMT
        Subject: CN=2B4E365B01072EE5309B3539E8FBE1CF64327ED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:df:75:9a:f2:74:41:22:d7:be:f8:77:3a:51:
                    3a:2f:7d:13:d5:2c:e4:62:d9:86:3b:5c:60:f9:a4:
                    2d:dc:61:3c:31:d8:95:f2:f2:dc:12:a3:f0:6b:09:
                    9f:8e:c1:8a:ea:20:b0:dd:40:c5:bc:cc:ed:71:88:
                    bd:a4:02:54:00:d0:fd:90:44:02:5d:8f:89:3a:9d:
                    98:8e:02:e7:1f:32:31:a0:19:e8:03:fb:2f:a0:f6:
                    67:63:13:29:9c:37:50:85:a0:e2:d1:a9:94:40:62:
                    d6:9e:e1:ae:e7:4f:c5:5b:49:82:f0:3f:c9:4e:40:
                    50:a3:3a:2f:80:57:6c:39:c9:aa:77:27:81:a1:e7:
                    82:bd:07:36:10:f7:fb:c8:dd:4b:57:e8:db:2c:57:
                    3a:d0:86:e6:98:68:df:6d:8a:10:f4:1e:84:52:df:
                    11:0f:9d:cd:c0:c5:62:b9:42:93:04:35:99:12:9d:
                    3b:71:68:be:93:3e:6b:49:fb:0d:69:87:1e:cf:ac:
                    15:65:c3:9c:84:49:46:65:7e:36:ba:75:f2:6b:b1:
                    76:d3:72:07:11:90:e8:00:5f:a4:4b:cb:dc:85:93:
                    b7:91:0b:11:6f:57:36:5c:a7:c1:bb:f0:a7:d2:09:
                    5b:a7:a1:85:c5:b3:5d:3c:6d:72:4e:a1:60:3f:36:
                    bd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4E:36:5B:01:07:2E:E5:30:9B:35:39:E8:FB:E1:CF:64:32:7E:D5
            X509v3 Authority Key Identifier:
                keyid:B6:CC:81:2D:59:F4:30:8F:CB:1D:22:39:55:56:78:B4:76:21:87:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/323830343a373938383a3a2f33332d3333203d3e20323731333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7988::/33

    Signature Algorithm: sha256WithRSAEncryption
         65:c9:7b:c0:52:f3:d2:4e:a9:ac:1e:f7:24:c9:21:a2:ac:8b:
         9c:cb:72:97:0e:cd:58:32:65:78:06:f0:cb:d3:e3:1e:59:f5:
         75:16:48:e3:c1:52:f1:d7:c5:ee:ee:52:02:7d:bf:14:c0:9d:
         fc:bb:93:6a:06:17:40:44:c9:11:05:29:8e:bb:c2:27:7a:53:
         6e:b7:a7:66:f5:46:cf:23:3a:59:5c:8d:b4:13:46:e0:86:f8:
         dc:a4:73:35:fc:31:77:e3:35:53:b7:fb:f0:b6:9b:e7:4d:9d:
         c9:b6:72:3d:1e:bd:f4:1e:8b:18:53:f2:f8:ee:a4:ce:b2:2a:
         66:e6:0f:f6:49:66:09:4a:26:70:38:c9:60:32:18:21:42:74:
         01:8d:ec:af:8a:3d:11:88:54:c1:2f:18:5f:b4:2a:b5:81:b3:
         73:02:22:22:d6:0c:7b:31:82:9b:c7:3d:bb:b9:0c:69:a6:f9:
         03:1b:b5:2a:b3:ed:07:06:24:56:2d:b9:2d:e3:f5:9f:17:41:
         75:fe:bc:38:89:6e:0e:e2:31:cd:57:8d:32:c7:2f:bd:1c:29:
         e0:f3:92:db:88:30:09:64:19:78:c0:ac:97:aa:d0:07:7a:59:
         f9:55:1c:8c:b4:c2:63:de:b6:7d:ff:0b:b7:89:61:ef:ed:a8:
         08:9c:07:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:12 2025 by rpki-client on console.sobornost.net