Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a6534633a363030303a3a2f34342d3434203d3e203533313733.roa
File:                     323830343a6534633a363030303a3a2f34342d3434203d3e203533313733.roa (raw, json)
Hash identifier:          6EycGEwhUDlYiZbbuKjnnGobK00mTZ158BTWucCRj7g=
Subject key identifier:   C5:86:D5:FB:10:CB:DF:57:4C:85:D4:11:82:F2:91:30:F8:57:3B:E6
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       19E8CCCAC2F1C26BC21E65F094B4B4047CBDD4DB
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a6534633a363030303a3a2f34342d3434203d3e203533313733.roa
Signing time:             Thu 06 Mar 2025 02:41:57 +0000
ROA not before:           Thu 06 Mar 2025 02:36:57 +0000
ROA not after:            Thu 05 Mar 2026 02:41:57 +0000
asID:                     53173
IP address blocks:        2804:e4c:6000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e8:cc:ca:c2:f1:c2:6b:c2:1e:65:f0:94:b4:b4:04:7c:bd:d4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:57 2025 GMT
            Not After : Mar  5 02:41:57 2026 GMT
        Subject: CN=C586D5FB10CBDF574C85D41182F29130F8573BE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c2:fc:f5:38:29:9a:d7:6c:1a:d0:54:82:ae:
                    08:e0:12:84:85:fa:5a:4e:46:c7:9f:31:01:9d:05:
                    cf:21:38:10:c1:bf:70:ac:04:c2:a2:f4:18:30:e4:
                    ff:40:e3:dd:29:64:78:cc:03:50:e8:d4:91:b3:50:
                    1d:33:07:f5:77:39:80:e8:83:2f:b9:74:f1:f5:26:
                    e8:8b:d1:50:8f:de:bc:b7:f7:90:e2:14:ae:5d:51:
                    a9:22:19:2d:4d:56:d9:0c:00:85:08:5d:d1:32:53:
                    b6:ac:65:be:1d:0c:69:e1:71:9d:3d:c3:4d:4e:73:
                    48:8e:3e:2e:bc:ce:29:e3:96:da:a0:77:fe:3d:d1:
                    de:2b:9c:b8:e7:31:00:ef:9e:69:42:49:f0:1a:d8:
                    3b:30:1a:54:e8:42:40:39:43:fa:01:09:a2:b7:eb:
                    e8:54:16:ad:c9:0c:7d:47:9b:27:9a:b5:38:38:d7:
                    ea:00:01:55:d0:e6:8b:1a:9c:93:14:81:4f:87:0b:
                    5e:36:fb:89:40:19:d3:ff:6c:02:54:66:22:a1:57:
                    98:2d:f5:d6:b9:c0:1d:41:ee:f0:0e:20:95:a0:82:
                    f2:cc:b1:8e:30:5b:4c:14:42:4a:e6:1c:7b:6f:5c:
                    fc:ca:63:17:02:b9:28:94:d0:cf:43:a9:80:76:ee:
                    45:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:86:D5:FB:10:CB:DF:57:4C:85:D4:11:82:F2:91:30:F8:57:3B:E6
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a6534633a363030303a3a2f34342d3434203d3e203533313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e4c:6000::/44

    Signature Algorithm: sha256WithRSAEncryption
         72:70:8a:6a:93:04:e2:cd:83:38:32:c1:3f:fb:da:41:89:f5:
         8e:5f:08:a7:fb:cc:b2:3a:8b:f2:71:14:3f:0f:ef:65:60:8d:
         60:27:7a:e1:ee:52:92:d0:3d:d7:49:b8:54:a2:f7:00:27:7a:
         5d:00:f1:11:96:c3:a1:8b:d1:6f:73:04:a1:ec:10:9b:19:a0:
         e6:9c:a9:02:34:54:c5:bb:b5:c2:10:14:5b:42:66:c8:8f:da:
         c6:86:f4:02:79:86:64:fa:81:31:ac:65:3e:6c:ba:6c:1e:2e:
         1c:34:df:5a:2f:ff:78:ea:26:84:6c:bf:a2:23:9c:86:e6:fb:
         24:ea:f9:50:a5:47:6d:4c:2c:a2:21:4e:52:51:1a:42:8a:72:
         e7:6f:4f:c2:9c:60:7d:81:f4:c0:c9:98:3a:09:b8:aa:2a:96:
         3b:13:ba:46:02:f8:77:31:ee:24:39:d4:44:f0:d4:f5:08:b1:
         ba:e2:cf:0f:9d:c7:de:66:f5:c9:61:b8:a9:f4:a2:3d:f2:2b:
         96:8e:1f:83:2a:6b:79:e9:47:7f:2a:35:84:2a:33:59:d2:59:
         f3:2e:91:91:f1:07:0a:85:99:b7:7c:60:c2:30:a0:e5:41:53:
         10:1c:37:dc:dd:50:2a:74:d6:a0:4c:43:a5:8b:14:99:1a:81:
         b1:41:a2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:25 2025 by rpki-client on console.sobornost.net