Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a373030303a3a2f33362d3336203d3e20323638303039.roa
File:                     323830343a353639303a373030303a3a2f33362d3336203d3e20323638303039.roa (raw, json)
Hash identifier:          KzcoZMBpQtlJnsdsao4546a/3a+NP3Ldd24POamtoGE=
Subject key identifier:   05:85:B9:EB:56:52:28:98:8E:5E:16:3D:73:91:78:C2:83:07:74:C5
Certificate issuer:       /CN=3FF4610BF1D06106BA50D14E85900089D08C658F
Certificate serial:       2372E49B5F6263D046CB2D7F80F087E9E705F870
Authority key identifier: 3F:F4:61:0B:F1:D0:61:06:BA:50:D1:4E:85:90:00:89:D0:8C:65:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a373030303a3a2f33362d3336203d3e20323638303039.roa
Signing time:             Wed 26 Mar 2025 14:09:26 +0000
ROA not before:           Wed 26 Mar 2025 14:04:26 +0000
ROA not after:            Wed 25 Mar 2026 14:09:26 +0000
asID:                     268009
IP address blocks:        2804:5690:7000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 01:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:72:e4:9b:5f:62:63:d0:46:cb:2d:7f:80:f0:87:e9:e7:05:f8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF4610BF1D06106BA50D14E85900089D08C658F
        Validity
            Not Before: Mar 26 14:04:26 2025 GMT
            Not After : Mar 25 14:09:26 2026 GMT
        Subject: CN=0585B9EB565228988E5E163D739178C2830774C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6e:8f:3c:29:58:e0:cc:b1:63:2c:1d:b8:d5:
                    d6:b4:fc:d7:38:da:7b:43:df:df:75:36:9a:a3:45:
                    e3:0b:ed:1b:fe:6a:8c:ef:8f:4c:a8:52:f5:4a:ed:
                    3b:f3:d7:81:d4:83:6b:ee:b7:9e:01:12:b5:b9:d9:
                    70:e6:0c:ea:c6:89:e5:a7:5e:dc:e1:0d:84:1b:a0:
                    80:b3:05:b9:9e:d1:a7:80:e2:2c:6e:39:f0:d3:df:
                    56:28:15:d1:00:15:73:b5:cf:00:f0:51:8b:c0:2a:
                    e1:5c:67:14:5b:18:92:f4:c3:55:e1:02:9c:8d:f6:
                    01:1f:dd:8c:fc:c3:8f:32:a6:f0:15:cc:b7:ee:e2:
                    b5:a0:55:c9:cb:78:e7:aa:a4:cb:b1:4d:51:05:a7:
                    bf:3f:14:74:46:e7:5f:c1:01:3a:e4:a1:ca:5a:fa:
                    59:8e:ab:80:87:2b:58:80:60:9e:86:1b:dd:03:0f:
                    e7:ee:2e:6d:b6:a1:7f:08:6e:d0:a7:ef:91:c1:7d:
                    33:11:03:e4:e0:96:2a:bf:47:89:a3:87:e3:13:6c:
                    11:fc:43:71:07:64:d0:9c:c5:06:a2:c1:5e:aa:15:
                    86:83:cb:8f:f7:e3:f0:ea:94:21:0d:d0:6f:0b:15:
                    2a:10:55:0e:f0:60:5a:00:e5:fd:64:af:6e:94:29:
                    89:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:85:B9:EB:56:52:28:98:8E:5E:16:3D:73:91:78:C2:83:07:74:C5
            X509v3 Authority Key Identifier:
                keyid:3F:F4:61:0B:F1:D0:61:06:BA:50:D1:4E:85:90:00:89:D0:8C:65:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a373030303a3a2f33362d3336203d3e20323638303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5690:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         46:1f:12:81:9f:e6:8f:9c:f1:30:ee:e3:68:05:9a:13:73:65:
         4c:b8:31:5b:16:46:e5:58:b8:fc:07:a3:f4:73:d0:f2:dc:4d:
         d3:ed:1b:71:53:c7:64:28:41:7f:93:8d:3a:90:37:aa:4e:68:
         56:34:a5:43:6a:e6:16:36:59:92:79:e1:dd:87:d8:26:51:bc:
         72:38:c9:c7:01:95:28:8a:23:4e:d9:c0:c5:5d:f9:76:95:d6:
         d5:71:dd:82:af:d7:e3:71:72:1b:81:e4:a2:17:d3:80:cc:ca:
         63:8f:51:de:24:bf:90:dc:bd:76:bb:d1:24:ec:67:03:f8:0e:
         49:3b:e7:5f:60:33:a5:34:5e:db:4c:9e:58:7b:2a:63:05:2a:
         55:14:93:74:05:dc:eb:cf:42:9e:74:8f:d6:06:f4:c1:5a:ac:
         7d:71:4d:8f:a3:07:c9:35:34:cd:9e:55:20:73:18:02:5a:40:
         59:30:41:cf:28:15:01:e7:17:ef:cb:c0:1c:01:95:0a:05:5b:
         d1:68:18:68:44:89:90:07:2e:d9:5a:5f:d2:17:0c:f7:3d:0a:
         c6:e1:f0:b9:fa:8e:8a:69:a6:ee:1e:c4:22:03:27:aa:ee:da:
         a7:98:4b:fe:bd:65:c2:f6:c1:e3:4f:55:6e:48:e5:3d:ba:19:
         a4:35:7d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:54 2025 by rpki-client on console.sobornost.net