Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a313030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a313030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          1OHV3Ja9vbEL6ByS8u+z8iGUl9CUmKV2sNGozCCEWRI=
Subject key identifier:   27:EF:85:7B:A3:B8:DC:95:04:FD:B8:5C:31:37:E3:FA:C1:FC:8B:7D
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       60CF3A302F6BD9231C2604DF0BFCDA589DFF5AE7
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a313030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Thu 06 Mar 2025 01:00:36 +0000
ROA not before:           Thu 06 Mar 2025 00:55:36 +0000
ROA not after:            Thu 05 Mar 2026 01:00:36 +0000
asID:                     61637
IP address blocks:        2804:1c18:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 17:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:cf:3a:30:2f:6b:d9:23:1c:26:04:df:0b:fc:da:58:9d:ff:5a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Mar  6 00:55:36 2025 GMT
            Not After : Mar  5 01:00:36 2026 GMT
        Subject: CN=27EF857BA3B8DC9504FDB85C3137E3FAC1FC8B7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:31:01:fe:fd:28:2b:e3:17:d2:5c:09:96:c1:
                    8c:cd:b5:d7:76:aa:40:18:09:39:12:6a:b4:61:51:
                    15:bc:51:0c:9f:74:76:e3:92:6d:e6:ef:d9:4c:34:
                    13:a2:06:59:52:87:c6:73:91:10:5d:b9:ba:7e:62:
                    b0:96:60:82:10:c5:4a:58:1b:90:9a:97:08:6c:7e:
                    fb:f8:59:2d:29:4b:e1:02:c2:14:73:d6:f2:4c:65:
                    0b:fc:34:09:f5:b0:f3:12:6c:17:8e:9d:10:b2:e9:
                    e2:72:c1:17:e5:50:dd:e8:a7:ed:8c:a7:71:e7:e8:
                    73:c3:2d:22:78:0c:52:ad:07:1c:82:85:11:96:27:
                    40:6c:a9:e1:ac:f8:71:24:a9:6e:3a:08:93:6d:2b:
                    04:56:bc:0b:05:0e:84:a4:b3:e9:54:79:87:c1:ab:
                    c3:cd:03:1d:cc:89:ed:c8:ad:88:a5:5b:e3:60:a2:
                    2d:11:7f:4c:4a:17:c6:9c:b8:44:13:b1:ed:05:2f:
                    08:d3:0a:a7:e8:45:4d:6b:85:08:ed:fb:ac:b3:d2:
                    f9:b7:b9:c5:08:bd:24:ad:5f:16:7a:49:2c:80:e1:
                    a8:60:70:a2:89:cd:3e:42:5f:40:22:8a:8f:77:49:
                    74:e7:9e:f2:ee:47:61:cb:65:f7:f2:b3:c7:0a:f4:
                    c0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EF:85:7B:A3:B8:DC:95:04:FD:B8:5C:31:37:E3:FA:C1:FC:8B:7D
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a313030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8d:39:5e:6f:b1:21:cc:a8:7f:96:ad:a5:b4:56:c7:f9:31:04:
         8b:80:79:54:e0:c2:69:67:db:1e:c6:59:0b:c8:91:5d:9d:11:
         ac:1f:85:2a:18:79:d5:8f:7e:d3:e9:a7:d9:6c:d9:60:56:51:
         f6:97:4f:bb:1d:72:98:09:18:81:ff:88:9e:8d:cd:5e:8c:ed:
         f1:c4:c0:b8:48:8f:53:3c:86:2e:6b:12:40:ab:02:80:f6:ba:
         32:ea:85:07:1f:b9:dc:f8:d1:c4:be:63:f4:68:b1:db:23:fc:
         c5:60:1a:71:db:89:50:14:a2:95:49:a7:72:d4:d1:f3:91:d7:
         bd:8c:48:fd:dc:b2:9b:16:14:61:6f:ab:10:16:9b:3f:b1:65:
         68:e7:a2:08:11:a6:0b:23:36:ac:de:ff:5a:02:e1:ea:29:af:
         1d:07:be:1e:d6:79:62:92:41:7a:cf:65:54:ef:a0:83:2c:9a:
         bd:a9:d5:8b:c3:34:cb:c5:08:67:2a:b3:be:23:d4:25:97:2e:
         30:fb:30:94:ea:8f:e9:39:72:35:c9:74:64:b0:84:ea:fc:da:
         78:96:4e:e9:18:7f:bd:23:aa:72:e6:31:8d:1d:53:d7:74:31:
         c4:44:8e:77:40:1e:7e:16:fe:17:b4:14:22:cb:d2:4f:39:29:
         fb:0f:e0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:41 2025 by rpki-client on console.sobornost.net