Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93uqARYdh5sFDibDC6WGdGao4uh4mAdjSyCNXSTopZ5V/1/323830343a336663383a3a2f33322d3438203d3e20323635393134.roa
File:                     323830343a336663383a3a2f33322d3438203d3e20323635393134.roa (raw, json)
Hash identifier:          EJ3SygrZD1a+zH1Jd5DlmfwKI23CdSIX/a+X772TwEg=
Subject key identifier:   F4:D7:24:75:69:50:3C:5D:99:58:29:C0:02:C1:5E:B4:A4:EC:22:5B
Certificate issuer:       /CN=978C99F109F4BDA1A39540870319AF5A1798DF00
Certificate serial:       30072CD46ED5B769A0F770F47AB2591B18FD260A
Authority key identifier: 97:8C:99:F1:09:F4:BD:A1:A3:95:40:87:03:19:AF:5A:17:98:DF:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/978C99F109F4BDA1A39540870319AF5A1798DF00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93uqARYdh5sFDibDC6WGdGao4uh4mAdjSyCNXSTopZ5V/1/323830343a336663383a3a2f33322d3438203d3e20323635393134.roa
Signing time:             Fri 07 Mar 2025 04:10:53 +0000
ROA not before:           Fri 07 Mar 2025 04:05:53 +0000
ROA not after:            Fri 06 Mar 2026 04:10:53 +0000
asID:                     265914
IP address blocks:        2804:3fc8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93uqARYdh5sFDibDC6WGdGao4uh4mAdjSyCNXSTopZ5V/1/978C99F109F4BDA1A39540870319AF5A1798DF00.crl
                          rsync://rpki-repo.registro.br/repo/93uqARYdh5sFDibDC6WGdGao4uh4mAdjSyCNXSTopZ5V/1/978C99F109F4BDA1A39540870319AF5A1798DF00.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/978C99F109F4BDA1A39540870319AF5A1798DF00.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 03:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:07:2c:d4:6e:d5:b7:69:a0:f7:70:f4:7a:b2:59:1b:18:fd:26:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=978C99F109F4BDA1A39540870319AF5A1798DF00
        Validity
            Not Before: Mar  7 04:05:53 2025 GMT
            Not After : Mar  6 04:10:53 2026 GMT
        Subject: CN=F4D7247569503C5D995829C002C15EB4A4EC225B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:de:a4:d0:ce:e5:93:0e:46:3a:ec:31:f3:de:
                    25:23:8e:d3:71:ad:2e:6c:fa:fe:37:83:b1:bd:5d:
                    90:a0:ea:11:0c:74:0c:6f:99:75:42:cb:6c:20:5e:
                    4f:4b:d6:bf:d1:ac:cd:e0:55:8d:96:8a:03:b2:10:
                    3e:b8:f7:88:04:74:57:2f:bf:62:56:29:96:42:81:
                    e3:59:02:c4:d8:1e:4e:f5:a8:5c:d9:b3:ec:4c:91:
                    71:a1:07:03:6c:72:9a:bb:44:04:b7:8a:03:01:40:
                    6e:3c:bd:2c:1b:7f:38:df:d5:75:ed:66:b2:62:be:
                    c9:56:48:3b:b0:a3:eb:43:5b:fa:fb:11:3c:d2:8d:
                    91:78:c1:13:41:d6:06:64:7f:56:ff:1a:51:eb:1c:
                    88:2d:fa:96:42:61:dd:31:23:3c:91:8c:17:52:e6:
                    d9:9a:69:3d:d3:58:49:c3:0f:aa:81:eb:76:82:d5:
                    ee:d7:df:4e:6c:5e:ad:b1:32:15:e2:04:5a:92:0f:
                    41:cf:fb:97:3c:00:66:ca:25:c0:f6:4e:3b:dc:9b:
                    5c:62:d6:82:42:2e:44:4d:39:17:bc:46:25:22:ab:
                    a2:64:19:52:0a:96:63:fe:f6:16:0c:63:6f:e1:86:
                    db:32:3d:2e:67:39:6d:0f:cf:5f:66:70:12:3e:ef:
                    91:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D7:24:75:69:50:3C:5D:99:58:29:C0:02:C1:5E:B4:A4:EC:22:5B
            X509v3 Authority Key Identifier:
                keyid:97:8C:99:F1:09:F4:BD:A1:A3:95:40:87:03:19:AF:5A:17:98:DF:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93uqARYdh5sFDibDC6WGdGao4uh4mAdjSyCNXSTopZ5V/1/978C99F109F4BDA1A39540870319AF5A1798DF00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/978C99F109F4BDA1A39540870319AF5A1798DF00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93uqARYdh5sFDibDC6WGdGao4uh4mAdjSyCNXSTopZ5V/1/323830343a336663383a3a2f33322d3438203d3e20323635393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:53:c0:20:c1:b2:32:36:2a:24:e9:4a:63:45:4f:72:f0:57:
         c6:3d:1d:53:32:d8:9d:95:6e:a7:ef:7d:d1:21:55:31:e7:de:
         2e:c5:57:cf:34:fe:97:a9:9a:f1:d7:be:e2:cf:31:01:30:3c:
         86:30:34:d0:3a:93:13:5c:d6:d6:5f:cb:2a:0b:12:b5:74:71:
         6e:f3:ea:c3:17:2e:90:cd:9d:d8:a2:a0:6f:91:f2:a2:84:f2:
         d5:94:e3:b5:ab:77:49:8b:f9:42:cf:d3:ff:48:e5:58:71:e5:
         47:ff:f7:22:9a:a3:ae:49:6f:f1:06:5f:a9:3c:07:f6:aa:47:
         33:cf:df:37:53:c4:d6:7b:14:50:7b:17:ff:3d:24:b8:6c:3c:
         1d:c6:61:4d:ca:a6:53:a1:d0:20:0a:44:b9:b4:0f:81:7d:1a:
         6a:bb:6b:bd:22:4b:9a:d1:99:f9:63:1f:23:13:4a:59:8c:d3:
         2b:41:4c:4a:89:3e:61:11:ba:10:a3:39:6d:d7:92:b4:6c:56:
         28:56:60:19:50:aa:21:38:55:c3:8e:06:76:e7:a0:fd:74:bc:
         87:30:f4:bb:0b:2c:69:1c:ec:d4:cd:32:4c:3a:03:e4:46:22:
         1c:4e:ef:21:1e:4f:73:8b:fb:dc:e2:a8:6f:8c:a8:2d:a8:d9:
         d5:8c:f8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:56 2025 by rpki-client on console.sobornost.net