Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/323830343a363630343a383030323a3a2f34382d3438203d3e20323639353238.roa
File:                     323830343a363630343a383030323a3a2f34382d3438203d3e20323639353238.roa (raw, json)
Hash identifier:          syElVUpH/sBEFhrz5dw8P8a1xs/uhAClp9WnVoi+2Xc=
Subject key identifier:   A8:8E:48:98:83:2F:03:E9:59:A2:C6:45:69:FC:AE:3A:92:82:0A:05
Certificate issuer:       /CN=4CFDB632C8A3E9C823323B2E5907A9238E6B8554
Certificate serial:       625BA95F2D4008395026A70761C103D1CA6DCD99
Authority key identifier: 4C:FD:B6:32:C8:A3:E9:C8:23:32:3B:2E:59:07:A9:23:8E:6B:85:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/323830343a363630343a383030323a3a2f34382d3438203d3e20323639353238.roa
Signing time:             Wed 26 Feb 2025 00:18:17 +0000
ROA not before:           Wed 26 Feb 2025 00:13:17 +0000
ROA not after:            Wed 25 Feb 2026 00:18:17 +0000
asID:                     269528
IP address blocks:        2804:6604:8002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.crl
                          rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:5b:a9:5f:2d:40:08:39:50:26:a7:07:61:c1:03:d1:ca:6d:cd:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CFDB632C8A3E9C823323B2E5907A9238E6B8554
        Validity
            Not Before: Feb 26 00:13:17 2025 GMT
            Not After : Feb 25 00:18:17 2026 GMT
        Subject: CN=A88E4898832F03E959A2C64569FCAE3A92820A05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:33:5a:5d:6b:ca:5d:85:12:d4:e6:78:88:7e:
                    0b:cb:9a:ff:57:f5:13:17:17:ee:91:d8:68:4e:35:
                    5b:ef:a4:1b:4a:ca:44:44:6d:12:e8:50:9d:ec:4d:
                    e3:4d:32:61:c5:2e:74:f5:f4:62:ad:17:bb:19:7b:
                    d2:4d:a1:3b:e7:1f:3f:e7:c9:81:69:8a:2b:1a:7b:
                    7f:60:d5:1f:ee:26:b4:92:a4:cc:45:10:2a:16:ab:
                    77:92:f3:4a:5f:42:63:93:31:ff:aa:a2:ca:8f:b8:
                    1a:0d:04:a6:a0:81:ce:d6:9e:28:85:fe:65:1b:58:
                    c5:fe:84:c8:52:72:3b:4c:e1:30:24:07:05:4a:3c:
                    30:66:d0:21:fa:0c:e5:af:ec:a4:9f:16:dd:8a:ce:
                    dc:d4:4a:9f:0b:c8:19:f7:b8:79:fa:5d:a1:c2:ca:
                    c9:6d:03:d5:24:a2:92:df:b2:d4:8f:e0:7d:ec:ca:
                    c0:ab:ef:2f:65:dd:2e:69:38:1c:54:2f:94:7c:ca:
                    fc:ee:28:9e:3f:96:5d:60:08:fb:d0:ff:85:02:5f:
                    fd:f2:f1:b1:3a:8d:a2:e4:03:4b:fe:da:4c:05:08:
                    2d:bc:70:13:b6:17:42:71:07:9e:7a:f6:9f:73:8f:
                    fa:ea:42:aa:68:1f:b8:ad:58:eb:af:c5:3e:60:a3:
                    96:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8E:48:98:83:2F:03:E9:59:A2:C6:45:69:FC:AE:3A:92:82:0A:05
            X509v3 Authority Key Identifier:
                keyid:4C:FD:B6:32:C8:A3:E9:C8:23:32:3B:2E:59:07:A9:23:8E:6B:85:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/323830343a363630343a383030323a3a2f34382d3438203d3e20323639353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6604:8002::/48

    Signature Algorithm: sha256WithRSAEncryption
         de:a0:d8:d3:2a:31:23:31:a7:ce:3d:3c:8b:90:67:43:31:d2:
         45:d3:c7:ad:96:5a:3f:c2:9e:b9:e7:c4:00:96:55:ee:21:11:
         18:6a:0e:64:e5:a8:4e:a2:82:de:9e:00:56:f0:fb:aa:94:b1:
         1e:cf:e3:12:d5:3e:1d:2d:31:ef:e6:22:64:9c:69:9f:41:bc:
         2b:1b:31:55:57:ab:7b:ea:72:71:00:1b:6a:ac:f7:6c:34:f5:
         cf:ac:a2:cb:56:fb:1a:be:2d:91:ca:99:a2:cd:75:b5:ef:65:
         44:51:d5:4f:2f:7d:a6:7b:cb:16:a3:7e:e9:c1:0c:98:7a:b9:
         b5:7b:13:ba:74:2e:a3:5b:fa:6c:b5:7c:96:45:65:af:2b:1f:
         50:74:bb:28:b7:f2:17:1e:da:5e:2d:e7:5a:34:14:91:0c:d1:
         58:09:13:f9:dd:c2:d8:10:91:00:79:4c:ee:eb:dd:56:2e:7a:
         0a:0e:0f:cd:87:78:93:e4:e9:ac:0f:76:bf:7b:a4:19:fb:cf:
         00:f8:46:1d:fd:d6:65:14:7b:b6:3c:0c:54:91:f6:f4:e8:16:
         54:5c:e0:4b:58:16:ad:98:e1:3f:0e:bf:c8:7e:e8:a7:ff:9e:
         4d:df:30:3e:b3:b7:4a:d3:d8:8c:a4:7e:f0:ec:69:e5:4e:b6:
         69:49:2b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:04 2025 by rpki-client on console.sobornost.net