Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a343030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a343030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          reqysM3KXFwaT96U0CaoT3poGPczZCKxIjF3wwLc3Ks=
Subject key identifier:   CD:4A:EB:09:22:9E:6B:76:41:A1:F1:76:07:AB:69:B2:63:D3:F7:32
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       7D12B0AD1CF7A17537817317BB9005185395E829
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a343030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Thu 06 Mar 2025 01:00:31 +0000
ROA not before:           Thu 06 Mar 2025 00:55:31 +0000
ROA not after:            Thu 05 Mar 2026 01:00:31 +0000
asID:                     61637
IP address blocks:        2804:1c18:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 17:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:12:b0:ad:1c:f7:a1:75:37:81:73:17:bb:90:05:18:53:95:e8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Mar  6 00:55:31 2025 GMT
            Not After : Mar  5 01:00:31 2026 GMT
        Subject: CN=CD4AEB09229E6B7641A1F17607AB69B263D3F732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:41:06:cd:90:7f:58:d2:8f:3f:5d:ef:56:ce:
                    42:27:b9:47:e2:c5:1b:48:40:90:81:1b:f9:e0:e9:
                    cf:a6:31:37:40:ed:4b:31:ed:01:9d:e8:50:1c:0d:
                    6c:16:30:82:92:20:01:be:19:75:4f:2c:b7:a0:74:
                    ec:d2:c4:04:27:f4:a0:83:d5:e6:c8:b1:85:8e:b2:
                    21:98:50:b9:4a:de:00:bb:de:08:d2:a5:6b:fb:0d:
                    1a:f0:92:9b:18:b3:35:99:98:fb:f6:98:9d:7b:95:
                    09:f1:97:ab:53:40:f7:50:0a:02:05:1b:ea:3d:1b:
                    19:ad:4b:cf:86:e4:bd:bf:76:f3:8c:c2:0e:2b:45:
                    db:5e:bc:f5:6d:a8:fa:69:e9:cb:ce:5b:da:8f:86:
                    42:03:8e:cb:ce:22:e4:aa:95:75:52:55:19:e8:e0:
                    9e:2a:1b:13:ac:f8:fd:33:9e:5c:08:94:9c:15:6d:
                    de:f2:82:28:ba:cb:ae:7e:ff:41:45:78:9d:fc:bd:
                    5f:03:6d:cb:dc:88:ab:f0:52:64:d0:f8:fc:b5:86:
                    aa:bb:15:4b:0a:d6:8d:c4:e4:b9:16:91:b6:ac:e3:
                    4e:ac:a5:a7:15:46:3d:a3:7a:8a:f6:8d:da:57:21:
                    5c:be:79:e4:7c:32:e2:39:47:b1:93:90:d5:40:ce:
                    35:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4A:EB:09:22:9E:6B:76:41:A1:F1:76:07:AB:69:B2:63:D3:F7:32
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a343030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a8:e2:9e:85:06:86:0c:71:a6:7f:f6:68:cc:f3:d0:71:28:9d:
         15:c8:dc:2d:de:4c:8f:da:ee:e7:a7:67:73:de:09:f8:e7:64:
         b4:7b:02:d2:a4:e7:7e:52:63:93:85:52:8f:44:d1:62:9c:d1:
         01:8a:80:d6:a9:0d:8f:42:32:1c:a2:dc:95:ed:39:c7:1e:a8:
         dc:4b:fe:1b:96:a7:5a:b5:21:27:ab:32:80:79:3c:45:90:e6:
         87:57:1a:68:31:a8:f5:b0:42:57:0a:dc:35:4e:40:ff:f2:98:
         55:50:5e:a1:2c:4b:15:34:16:40:14:60:39:e7:75:3c:95:1a:
         21:60:b8:eb:a2:ab:40:fc:96:68:fd:fa:7c:57:8a:9d:6b:9c:
         79:1b:be:2f:8a:58:01:99:0b:40:76:f4:5b:c4:9b:26:92:81:
         00:2f:de:bc:10:c5:a3:d7:ab:23:db:39:ed:7b:9c:03:12:02:
         51:39:61:d6:95:cb:5b:dd:8a:46:fa:dc:66:60:10:1d:4f:c1:
         a1:ac:65:c6:1c:ea:ce:8a:cc:19:26:3a:c6:9f:d8:85:c4:f7:
         7f:47:9e:19:ad:37:c3:37:9d:4a:02:a6:fb:79:a4:3c:ca:66:
         de:06:c9:14:3d:6e:2c:90:f1:0c:6b:da:e3:1d:d7:db:dc:8b:
         2c:69:96:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:41 2025 by rpki-client on console.sobornost.net