Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/323830343a336232303a3a2f33322d3438203d3e20323636313331.roa
File:                     323830343a336232303a3a2f33322d3438203d3e20323636313331.roa (raw, json)
Hash identifier:          BuT6SVf+q5oMKia2hb1uFcClSeTWsZZo4z0q3Ha5OtA=
Subject key identifier:   14:96:EC:A2:D0:4F:92:B4:36:0C:90:12:82:9B:30:F0:5A:27:B5:0D
Certificate issuer:       /CN=9339F720CFD0D8F91A9A8F916D7932CEBE3010CD
Certificate serial:       5267491C0AFD3EDD3938B9962D30436461136794
Authority key identifier: 93:39:F7:20:CF:D0:D8:F9:1A:9A:8F:91:6D:79:32:CE:BE:30:10:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/323830343a336232303a3a2f33322d3438203d3e20323636313331.roa
Signing time:             Thu 06 Mar 2025 18:31:40 +0000
ROA not before:           Thu 06 Mar 2025 18:26:40 +0000
ROA not after:            Thu 05 Mar 2026 18:31:40 +0000
asID:                     266131
IP address blocks:        2804:3b20::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.crl
                          rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:67:49:1c:0a:fd:3e:dd:39:38:b9:96:2d:30:43:64:61:13:67:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9339F720CFD0D8F91A9A8F916D7932CEBE3010CD
        Validity
            Not Before: Mar  6 18:26:40 2025 GMT
            Not After : Mar  5 18:31:40 2026 GMT
        Subject: CN=1496ECA2D04F92B4360C9012829B30F05A27B50D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:df:10:77:8a:31:57:a2:bb:74:e0:5f:63:17:
                    42:89:c5:b3:89:f4:36:0d:50:a4:73:0c:5b:12:f4:
                    0e:d9:bc:2d:8d:67:d0:3a:2e:77:e4:6c:4d:38:56:
                    a7:08:67:bd:86:a8:f6:c9:ec:41:85:59:e4:b0:ce:
                    e5:94:3b:74:80:fe:16:ba:a8:fb:8f:0f:41:d3:88:
                    60:60:dc:98:26:84:ef:e8:f1:d6:f2:58:a2:3c:e8:
                    7a:d1:51:37:3e:93:88:d7:f5:5e:f8:6a:a8:15:c9:
                    cf:19:a8:92:63:0b:60:01:af:46:a5:82:cb:ab:28:
                    f3:a5:ec:4b:d4:04:3d:cd:a7:03:85:12:3d:ab:60:
                    4e:6f:85:b3:0d:c9:d4:e2:93:9e:ed:48:a3:98:eb:
                    59:c0:93:c0:57:d2:2c:65:c1:06:8a:2f:0c:d4:49:
                    6d:32:3e:fc:48:f0:bc:fe:46:60:b6:95:c8:1a:7f:
                    1f:5e:91:ec:a5:6e:3e:c5:bb:f6:0b:a1:38:c2:9c:
                    00:1a:9e:c0:0e:0b:ee:10:19:60:96:6d:4e:77:2a:
                    76:26:7f:8f:63:02:94:dd:f6:53:60:41:8a:49:f9:
                    20:af:ee:ad:79:14:1a:aa:9e:35:a2:82:65:80:e4:
                    a2:33:5b:ae:7b:71:aa:a1:9c:c2:90:31:c4:5f:51:
                    a7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:96:EC:A2:D0:4F:92:B4:36:0C:90:12:82:9B:30:F0:5A:27:B5:0D
            X509v3 Authority Key Identifier:
                keyid:93:39:F7:20:CF:D0:D8:F9:1A:9A:8F:91:6D:79:32:CE:BE:30:10:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/323830343a336232303a3a2f33322d3438203d3e20323636313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:68:7a:84:d8:e1:86:ae:30:7c:4d:0a:e3:3c:7f:3a:74:d8:
         06:07:49:a1:8e:ab:18:16:95:c7:da:44:b1:43:7b:43:89:2a:
         c7:6d:18:a0:c4:3d:30:93:d4:4c:01:1c:83:f7:75:3d:e5:d8:
         ac:10:fa:9f:ec:7b:f3:5a:87:f9:02:00:48:5b:85:7b:19:31:
         f5:26:b1:1b:5b:14:51:48:98:c2:27:5c:1d:e0:59:d1:b9:71:
         b2:e7:9f:06:ea:90:11:6b:ae:a6:d2:11:bb:de:8c:a1:65:e8:
         d1:c0:7b:5b:13:f8:ba:f2:ed:19:48:ea:36:16:d1:f2:60:b9:
         e3:6e:42:a1:24:1e:d2:2f:c8:82:38:9c:c2:f1:65:c8:ba:06:
         de:54:76:71:60:60:0e:73:78:84:3d:9c:1b:bb:23:b1:18:82:
         5d:7b:28:6f:60:02:13:3d:6e:22:96:4e:55:b6:8c:81:2a:17:
         ce:4d:57:3c:60:09:84:52:ea:7c:38:99:16:49:a2:4e:99:ca:
         87:13:44:ee:d3:ef:05:2a:d8:e7:e7:bf:d0:d1:63:f0:9e:f0:
         fd:41:40:34:88:4f:48:5b:60:8d:c1:51:10:39:85:eb:7f:7e:
         cc:63:05:46:c1:ec:6c:22:8a:5b:5d:80:c9:b9:91:d9:b0:14:
         be:00:55:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:00 2025 by rpki-client on console.sobornost.net