Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/323830343a376566303a3a2f33322d313238203d3e20323731363536.roa
File:                     323830343a376566303a3a2f33322d313238203d3e20323731363536.roa (raw, json)
Hash identifier:          BSWaPmS67xRVsnW3AMVQYa8EI6CRtHNg5ATogTv70Zs=
Subject key identifier:   07:8B:B8:39:5A:CB:AA:C3:C0:EF:6F:02:71:31:E8:CF:88:24:76:20
Certificate issuer:       /CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
Certificate serial:       1BC571B77C41B3297F1E569CAC34050D67D6F807
Authority key identifier: 40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/323830343a376566303a3a2f33322d313238203d3e20323731363536.roa
Signing time:             Wed 05 Feb 2025 13:09:56 +0000
ROA not before:           Wed 05 Feb 2025 13:04:56 +0000
ROA not after:            Wed 04 Feb 2026 13:09:56 +0000
asID:                     271656
IP address blocks:        2804:7ef0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl
                          rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c5:71:b7:7c:41:b3:29:7f:1e:56:9c:ac:34:05:0d:67:d6:f8:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
        Validity
            Not Before: Feb  5 13:04:56 2025 GMT
            Not After : Feb  4 13:09:56 2026 GMT
        Subject: CN=078BB8395ACBAAC3C0EF6F027131E8CF88247620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:18:0d:8c:cb:65:2c:8d:b6:7f:0d:7f:b5:45:
                    87:64:b6:9b:b5:26:15:62:22:0b:20:a6:7f:42:9c:
                    a6:16:4e:88:6b:fa:0f:a1:dc:e4:d3:99:db:5b:8f:
                    ef:f1:c9:39:41:d5:0e:ff:8f:00:85:e9:80:68:c9:
                    57:c2:65:15:93:bf:e7:8d:45:8c:74:44:64:ce:65:
                    af:81:d6:cc:e0:09:a5:79:e7:7b:8e:68:6b:d5:f6:
                    0a:fe:5c:8f:95:d6:3e:6e:94:c1:75:68:69:e9:cb:
                    7d:c7:4f:b7:a5:38:3f:5c:20:bc:16:64:48:1e:7c:
                    7c:18:39:0a:5f:d6:7e:d6:5e:36:77:1e:c6:63:cf:
                    f5:d9:35:fc:7f:0b:96:a6:75:a6:a6:2c:b4:c1:f2:
                    e0:28:a7:9f:4a:73:3e:87:07:13:77:85:7d:46:c3:
                    a0:eb:5d:89:74:f3:d9:b9:0b:5f:1e:d7:12:48:5b:
                    db:a7:b2:c0:4e:86:f9:0a:c4:c7:89:c3:66:fc:36:
                    05:9d:6e:ac:33:07:a1:5d:68:8a:6d:76:95:f1:7f:
                    39:27:c7:6e:ed:4c:ff:da:79:c2:62:f7:6f:7b:45:
                    3b:f8:f8:09:79:35:e9:bf:d1:3c:26:a8:1e:e9:6e:
                    ae:a6:02:7c:85:9a:29:35:a4:9b:39:3b:62:2a:11:
                    94:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8B:B8:39:5A:CB:AA:C3:C0:EF:6F:02:71:31:E8:CF:88:24:76:20
            X509v3 Authority Key Identifier:
                keyid:40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/323830343a376566303a3a2f33322d313238203d3e20323731363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ef0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:f3:99:29:2b:bf:00:c6:56:01:00:0d:4e:05:9e:06:6f:61:
         55:43:1a:a8:5f:50:97:33:14:98:fa:dd:bc:92:53:91:69:0c:
         25:a1:73:a1:b6:e8:2f:4b:57:7c:02:4b:1c:34:98:01:0a:0b:
         4b:98:e5:5c:2d:98:f4:f1:42:15:68:20:09:45:a3:6b:e4:a9:
         73:d3:b0:13:81:c1:3e:16:99:81:5a:8f:71:3e:9c:dd:a6:b4:
         56:83:95:18:e8:c5:99:47:fc:28:24:bb:60:2d:3d:33:a5:ea:
         8f:95:41:be:34:82:a5:df:a3:a3:ba:94:bf:57:b3:f5:20:e6:
         d1:82:c3:e1:bd:1e:6a:9d:e4:72:a8:37:18:a8:4e:18:93:45:
         9d:ef:e4:9e:b0:27:de:0a:0c:dc:fe:2a:66:48:fc:00:d6:ad:
         f1:70:d7:9f:79:1c:b1:5f:e3:ad:fd:73:83:10:40:27:02:8f:
         20:6f:30:13:db:57:97:e1:28:23:d5:c2:c0:39:2e:e0:b1:f3:
         6f:21:0d:d3:2c:91:ab:12:55:15:53:b6:e4:af:21:82:50:59:
         d5:aa:f8:80:dc:e1:66:68:ac:3c:66:5e:48:33:44:88:48:ac:
         6e:49:f2:5a:79:6f:3f:52:ea:f1:a1:f6:ab:68:17:83:d7:48:
         57:e4:8b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:12 2025 by rpki-client on console.sobornost.net