Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343030303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a343030303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          wYgfGe9geaJRG3lgNawhNPuhvJ990oFxoOtGbb5QsO8=
Subject key identifier:   63:51:CB:4D:68:4B:9E:62:60:6E:60:26:38:28:9D:4D:71:86:40:C0
Certificate issuer:       /CN=6F414F9210A10E5720E75030635478050D4C7C97
Certificate serial:       38912ED6147C76F27D73FC17B28491E819384D36
Authority key identifier: 6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343030303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Wed 05 Mar 2025 20:56:24 +0000
ROA not before:           Wed 05 Mar 2025 20:51:24 +0000
ROA not after:            Wed 04 Mar 2026 20:56:24 +0000
asID:                     264344
IP address blocks:        2804:2674:4000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 19:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:91:2e:d6:14:7c:76:f2:7d:73:fc:17:b2:84:91:e8:19:38:4d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F414F9210A10E5720E75030635478050D4C7C97
        Validity
            Not Before: Mar  5 20:51:24 2025 GMT
            Not After : Mar  4 20:56:24 2026 GMT
        Subject: CN=6351CB4D684B9E62606E602638289D4D718640C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:52:60:76:11:ee:98:6e:6c:e8:5d:97:c0:fa:
                    ba:25:fe:d4:c5:e7:2c:f3:68:38:04:36:ac:69:2f:
                    a3:99:5e:1d:2e:b3:b6:08:b2:22:b6:62:84:2f:cb:
                    0c:9e:5d:01:1b:5b:6a:3a:7f:9d:64:c2:aa:1a:8e:
                    dd:7a:ab:55:3d:25:22:24:35:7e:bc:b1:b2:71:b5:
                    74:71:cc:c3:aa:22:e8:ab:72:0f:a4:b8:da:3d:7c:
                    2f:9d:9b:3d:79:8c:74:0a:0a:f9:12:0b:97:5c:43:
                    99:ba:20:5b:8c:9c:46:08:13:a6:1d:b9:8b:36:41:
                    8d:c4:a0:ab:b9:ab:13:4d:89:2b:9e:85:88:ac:d2:
                    6c:f1:0a:12:1a:a3:1a:77:96:ea:7a:7d:02:16:0a:
                    7c:d7:36:1d:96:98:6d:df:26:d1:24:e8:26:a6:db:
                    6e:1a:41:53:4f:9f:ec:79:b0:c4:02:9f:86:7e:c8:
                    80:b0:7c:c5:70:8a:04:8e:12:83:16:4e:0c:47:fe:
                    1c:03:7c:c9:11:1c:be:f7:61:27:82:81:30:07:2a:
                    4d:cc:70:4c:b9:6e:44:ad:1f:67:2a:50:18:55:00:
                    32:13:fe:4e:b8:18:8f:dc:c5:02:5c:3e:75:34:91:
                    c2:5c:65:14:f9:1a:74:f9:d0:3b:a4:f6:de:05:80:
                    19:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:51:CB:4D:68:4B:9E:62:60:6E:60:26:38:28:9D:4D:71:86:40:C0
            X509v3 Authority Key Identifier:
                keyid:6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343030303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:7e:a2:e0:c3:5f:13:d1:78:7e:5d:75:46:79:c4:51:53:7a:
         71:f0:3b:7e:03:40:cb:0d:19:9d:bb:1b:27:17:7d:70:65:e2:
         c1:21:ad:46:83:14:89:9b:65:c1:78:2a:cc:b9:66:9b:61:83:
         ac:33:76:6f:ee:97:f0:b3:de:bb:8a:9d:51:49:e8:96:53:67:
         5b:4b:69:3f:3d:3c:a8:10:5f:d5:1e:1b:22:d6:ee:2d:55:fc:
         0b:dc:49:3d:bd:35:36:51:fb:e5:c7:be:ac:2e:2b:e2:6b:7b:
         36:62:14:43:4f:74:65:90:3b:1c:ae:7f:a3:84:c9:a9:b3:7c:
         19:95:ba:09:a3:a1:d2:29:be:3e:f5:32:70:a8:1f:ba:26:76:
         d9:b6:80:e0:e0:c2:a3:c6:54:13:db:28:dd:8a:d4:b6:8d:ee:
         70:b4:cc:e4:6f:06:21:fd:86:e8:db:58:00:94:b1:0f:54:39:
         52:c2:53:ce:33:57:ac:56:c6:6a:79:4b:85:b0:66:15:d8:e9:
         4a:5e:be:cf:c6:ee:8a:46:ff:84:c1:a4:8d:4b:e1:25:42:4c:
         52:50:d1:cd:2d:61:de:6e:2b:0a:4b:b9:cb:ec:5b:44:3c:ec:
         66:2d:24:bd:ff:80:5b:14:e8:b7:22:b9:e0:43:35:74:7b:88:
         8d:5d:ec:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:11 2025 by rpki-client on console.sobornost.net