Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/323830343a343435343a3a2f33322d3438203d3e20323637363235.roa
File:                     323830343a343435343a3a2f33322d3438203d3e20323637363235.roa (raw, json)
Hash identifier:          /WjYyisieWtzaIuL75i3lmBc4NoZr/0fgfXNHo2u2Is=
Subject key identifier:   B3:D2:9E:AC:9E:CA:54:BE:50:FF:EA:C7:AE:8C:6C:94:8A:43:BD:B6
Certificate issuer:       /CN=66D4FE79ED8A8E0D195041C335EEB1B748A12F0A
Certificate serial:       4BADB693F2C2DEE13B45B2346F1F6065B82B98E4
Authority key identifier: 66:D4:FE:79:ED:8A:8E:0D:19:50:41:C3:35:EE:B1:B7:48:A1:2F:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/323830343a343435343a3a2f33322d3438203d3e20323637363235.roa
Signing time:             Wed 02 Apr 2025 12:24:09 +0000
ROA not before:           Wed 02 Apr 2025 12:19:09 +0000
ROA not after:            Wed 01 Apr 2026 12:24:09 +0000
asID:                     267625
IP address blocks:        2804:4454::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.crl
                          rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ad:b6:93:f2:c2:de:e1:3b:45:b2:34:6f:1f:60:65:b8:2b:98:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66D4FE79ED8A8E0D195041C335EEB1B748A12F0A
        Validity
            Not Before: Apr  2 12:19:09 2025 GMT
            Not After : Apr  1 12:24:09 2026 GMT
        Subject: CN=B3D29EAC9ECA54BE50FFEAC7AE8C6C948A43BDB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:d6:a4:1c:3a:70:ba:18:d4:e7:81:84:6b:
                    2c:d3:78:12:42:56:c0:e8:6e:ea:7b:4c:4a:be:ff:
                    c4:d1:d0:c3:f2:ec:0b:0a:42:15:67:00:9d:db:3a:
                    e4:d2:ff:30:37:7c:eb:db:78:0d:28:c6:fe:7c:a7:
                    fb:d1:b4:69:e4:08:67:e8:ea:b1:9c:3f:0f:84:b5:
                    e2:2d:0e:32:ea:cd:dd:3b:b6:fe:0f:0c:fc:fd:0d:
                    5d:87:51:40:8c:18:d5:1b:2c:34:39:a7:dc:e8:cc:
                    42:88:44:77:64:e0:88:05:3c:94:6e:aa:0a:dd:bb:
                    40:c6:9c:02:04:d4:54:fd:87:a4:e9:ca:dc:89:7b:
                    74:54:2c:d9:28:f0:93:46:43:66:94:a2:96:d5:ae:
                    70:43:5c:66:22:66:ac:92:99:e8:9b:ec:8c:f7:2d:
                    f9:76:2a:a5:fa:27:3c:a8:ec:8f:ce:d0:78:13:71:
                    5a:9f:10:01:b2:33:ce:4f:34:bb:a8:99:63:10:61:
                    21:ec:1c:c9:f3:d3:b7:db:78:2d:0b:18:25:f9:12:
                    ad:65:4e:f1:f7:7c:85:06:92:d6:d8:fb:c2:95:56:
                    d6:fc:6a:23:0e:fe:20:b3:3a:d6:2f:e6:79:49:2c:
                    d2:89:1e:27:f8:d6:4e:7e:21:19:83:d1:b6:27:47:
                    e3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D2:9E:AC:9E:CA:54:BE:50:FF:EA:C7:AE:8C:6C:94:8A:43:BD:B6
            X509v3 Authority Key Identifier:
                keyid:66:D4:FE:79:ED:8A:8E:0D:19:50:41:C3:35:EE:B1:B7:48:A1:2F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/323830343a343435343a3a2f33322d3438203d3e20323637363235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4454::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:de:dd:64:10:96:50:bb:4b:e8:6b:6e:c2:0d:91:e8:75:90:
         b9:01:47:a6:56:6c:a2:0f:a4:2c:52:c7:3b:c1:d3:a7:80:81:
         e2:e0:95:51:66:f6:b6:cc:2f:af:28:fd:c9:e5:10:80:c9:f0:
         48:43:4c:f3:22:b7:9b:76:eb:99:7c:a9:8a:ca:5e:db:a5:7b:
         43:f4:79:72:13:7d:15:99:22:43:37:6f:40:fd:e8:7a:25:c9:
         1a:38:cb:d8:c7:05:5e:59:42:26:50:2f:72:ef:f0:83:db:47:
         20:71:90:18:37:7b:32:5a:d4:86:ed:f6:94:7d:a7:7c:18:6d:
         ff:92:34:3a:c4:48:00:76:44:49:e8:5b:e9:cb:f1:4d:64:06:
         de:fc:67:dd:96:a7:ad:49:9c:bb:cb:83:ea:48:6c:c0:26:70:
         1f:2f:40:da:9a:27:b4:7b:07:95:96:24:80:a6:2b:d6:6c:0d:
         d0:76:e6:41:9c:76:55:4b:e8:89:3d:16:ca:81:42:5a:7f:64:
         94:f9:20:a9:ca:b9:f9:5d:cd:dc:df:c3:32:c8:bd:40:e3:a1:
         3e:24:4c:70:1e:c8:c6:f7:ac:36:95:dc:8d:b3:9a:b1:82:4f:
         46:99:93:e7:6d:0e:24:85:c8:45:e2:1f:71:35:49:bc:2b:f2:
         0f:e5:29:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:26 2025 by rpki-client on console.sobornost.net