Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353030303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a353030303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          7KJ5uIqC6Gesgzp0ot09ygDA0YuV6N++rV1q3eAls0M=
Subject key identifier:   70:5D:F1:8F:9C:6C:31:2C:C1:7E:27:D7:38:2F:B2:96:3F:F9:A9:23
Certificate issuer:       /CN=6F414F9210A10E5720E75030635478050D4C7C97
Certificate serial:       69DAB99901A3193A899095465CBF424CAD3B011C
Authority key identifier: 6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353030303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Wed 05 Mar 2025 20:56:24 +0000
ROA not before:           Wed 05 Mar 2025 20:51:24 +0000
ROA not after:            Wed 04 Mar 2026 20:56:24 +0000
asID:                     264344
IP address blocks:        2804:2674:5000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 01:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:da:b9:99:01:a3:19:3a:89:90:95:46:5c:bf:42:4c:ad:3b:01:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F414F9210A10E5720E75030635478050D4C7C97
        Validity
            Not Before: Mar  5 20:51:24 2025 GMT
            Not After : Mar  4 20:56:24 2026 GMT
        Subject: CN=705DF18F9C6C312CC17E27D7382FB2963FF9A923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9a:6c:8c:47:d3:4b:1d:b9:85:ec:eb:e7:ae:
                    a4:c0:eb:b9:bb:e3:04:ee:c8:a9:34:33:29:ae:9b:
                    cc:40:86:3a:76:4d:54:c0:2b:d8:88:04:6d:1b:7f:
                    9b:86:48:04:ce:01:28:59:5a:f4:7f:6c:25:e2:8a:
                    bb:41:2a:53:11:cc:92:dc:98:a2:6b:d6:e3:ce:9a:
                    d3:53:1c:a3:af:42:29:7c:9b:96:d0:76:a5:5e:fc:
                    06:76:83:3e:80:ec:53:6a:62:13:f8:08:2d:a0:08:
                    4b:3b:3b:5e:fa:28:e2:57:09:63:e3:f8:1f:cf:29:
                    a7:67:41:fd:62:7a:ac:99:cf:8c:d6:e3:78:5d:27:
                    cf:d8:78:9c:ee:cf:38:fa:de:78:e7:a8:b3:53:e9:
                    8d:d2:ea:5e:0f:37:db:24:a7:d9:84:af:0e:8e:b5:
                    93:c4:82:09:5b:f3:06:33:57:77:6f:2f:01:de:07:
                    5c:55:d9:e7:84:30:87:f9:f8:3b:de:2c:7e:e0:a9:
                    c4:6c:97:6e:19:b8:59:b3:17:3c:91:d8:ee:2e:9d:
                    0b:ce:3a:f2:c1:95:67:85:ca:4d:d6:43:db:06:a8:
                    48:db:b2:fd:94:b6:fe:9b:35:74:a5:0a:d4:7d:29:
                    2f:e8:52:27:28:88:75:f6:68:27:3b:12:57:cd:56:
                    33:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5D:F1:8F:9C:6C:31:2C:C1:7E:27:D7:38:2F:B2:96:3F:F9:A9:23
            X509v3 Authority Key Identifier:
                keyid:6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353030303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:11:ca:be:2e:ab:75:58:a3:f5:4a:0c:6f:1f:29:04:df:78:
         55:74:8c:55:9e:c2:76:73:1d:f7:23:54:5b:85:b2:f5:d4:a4:
         68:5e:41:54:f8:3a:7e:de:80:18:fe:d2:17:6c:22:35:b9:89:
         55:9d:43:8d:d1:16:93:05:99:e6:3d:99:dc:c8:c0:ae:da:ba:
         c1:c6:b7:a9:c9:4f:13:c6:c5:a9:d6:5f:97:43:77:4d:11:62:
         14:ad:a6:f6:39:18:49:07:3d:ec:a6:b7:d5:cc:59:55:ac:b0:
         b9:7a:c6:47:66:e6:77:92:f4:9a:66:e7:7a:88:d5:7c:01:89:
         83:06:bd:6f:99:59:96:80:a8:c0:6f:db:ea:74:98:32:66:0e:
         03:dc:6a:20:b6:ee:40:2b:c4:88:0a:b7:84:ec:06:02:c1:b4:
         f3:a1:32:73:1a:e7:c1:16:d8:d5:61:d9:71:78:b8:1c:47:74:
         cc:60:d8:94:96:c0:8f:a4:17:a9:47:2e:18:ca:04:6c:31:6b:
         94:ad:f5:a4:04:f6:37:c3:ad:63:e6:71:bc:87:62:f3:55:88:
         53:56:42:fe:06:24:07:4a:8c:bc:71:3c:2a:f6:40:96:05:ae:
         80:ad:e1:84:60:4d:d6:8e:1c:75:6c:6b:77:0e:7c:f9:a3:2c:
         6f:c0:9c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:01 2025 by rpki-client on console.sobornost.net