Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/323830343a3365383a3a2f33322d3438203d3e203238363633.roa
File:                     323830343a3365383a3a2f33322d3438203d3e203238363633.roa (raw, json)
Hash identifier:          AbrEhmY/mJFJrmVrkxFsQ96Ttc66W986F/NCpaILX0Q=
Subject key identifier:   08:3E:38:78:8C:E6:DE:F3:ED:80:08:02:98:30:C0:93:94:C1:BE:D8
Certificate issuer:       /CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
Certificate serial:       1C9DC18F5F0A442285FC86F6E331A8A3F17BC0EC
Authority key identifier: 7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/323830343a3365383a3a2f33322d3438203d3e203238363633.roa
Signing time:             Fri 18 Apr 2025 14:30:51 +0000
ROA not before:           Fri 18 Apr 2025 14:25:51 +0000
ROA not after:            Fri 17 Apr 2026 14:30:51 +0000
asID:                     28663
IP address blocks:        2804:3e8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl
                          rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 14:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9d:c1:8f:5f:0a:44:22:85:fc:86:f6:e3:31:a8:a3:f1:7b:c0:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
        Validity
            Not Before: Apr 18 14:25:51 2025 GMT
            Not After : Apr 17 14:30:51 2026 GMT
        Subject: CN=083E38788CE6DEF3ED8008029830C09394C1BED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:99:d2:60:88:aa:75:c7:eb:cb:1e:74:d8:a9:
                    85:39:4d:5a:f2:2f:c1:db:42:7d:82:ea:13:72:48:
                    0c:1e:98:2f:0f:47:2c:a5:5e:2e:3d:41:0e:f6:65:
                    49:98:cd:15:aa:94:0d:b6:32:56:6d:c2:56:2b:dc:
                    c5:ee:ad:ec:79:b8:aa:df:15:a2:76:a9:98:fe:b8:
                    c1:19:95:5e:87:47:2f:27:9a:be:d7:e1:24:7b:1f:
                    a3:fd:4e:02:4c:cd:06:aa:55:ab:b4:c8:29:2e:da:
                    60:2a:4e:c4:8a:41:d0:aa:38:c9:d5:5d:46:43:93:
                    4b:00:00:67:04:6e:d3:b7:da:2c:e4:7a:06:47:b1:
                    6e:89:40:34:2f:ba:68:57:93:4a:18:13:8c:b3:d6:
                    25:90:fb:9f:02:47:09:73:ee:ed:fe:af:a9:45:7c:
                    87:85:36:70:2b:40:9c:10:65:3e:42:cf:93:e3:41:
                    99:31:ff:75:b6:3f:30:87:d3:7d:9d:4d:1f:78:e7:
                    60:44:77:64:f3:26:25:e6:df:9d:37:8e:ad:9b:09:
                    b7:db:01:98:2d:c0:71:4d:69:90:74:79:d8:d4:ab:
                    e8:94:f2:fb:4e:1f:d4:4a:28:32:7c:bb:1d:ee:99:
                    4e:b1:de:1b:ba:22:3b:0f:89:16:08:25:21:ff:a0:
                    45:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3E:38:78:8C:E6:DE:F3:ED:80:08:02:98:30:C0:93:94:C1:BE:D8
            X509v3 Authority Key Identifier:
                keyid:7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/323830343a3365383a3a2f33322d3438203d3e203238363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:a7:4c:b9:17:9f:80:da:f0:58:b3:90:1b:15:85:ab:be:42:
         9d:82:be:84:cf:9f:b7:b6:de:ce:b6:f7:28:f7:44:8a:d1:5e:
         4c:f4:52:66:3a:cc:ce:b1:15:69:78:97:5f:54:b4:07:eb:6d:
         70:88:a6:22:e9:97:7a:61:0b:3f:22:0b:94:02:d4:76:12:f6:
         47:e3:4e:37:fd:37:49:ee:ce:41:d3:46:07:92:ef:2a:9a:67:
         a0:16:7b:3c:e3:c5:f6:a6:4e:5e:ba:07:73:d8:7c:70:2e:c7:
         b3:ee:b3:7f:65:85:1c:01:37:5e:aa:ef:e5:3d:fd:5d:57:23:
         a3:9d:de:1f:fa:09:13:46:34:3f:9f:45:ad:e2:f9:69:e2:9d:
         c8:f7:72:d3:20:50:58:42:78:0e:2d:54:c5:b6:d1:81:70:82:
         1b:27:9f:95:86:4f:9b:d4:f3:42:cb:8f:09:5f:27:3b:dc:08:
         1a:29:18:43:bb:04:fd:2e:49:b9:99:1e:28:2f:84:13:f5:2f:
         13:0f:e2:3b:c8:cb:c8:6b:0c:6a:0a:f7:76:0d:02:a8:a2:43:
         b6:af:bc:f5:5a:79:fd:60:ad:24:da:fd:78:2e:96:99:c7:f3:
         8f:8a:8a:af:dd:7e:9a:b9:63:0a:0e:e0:5c:7e:87:71:83:1c:
         31:ae:8d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:18 2025 by rpki-client on console.sobornost.net