Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bp2sJ4RuAW4tudPvB8rejgScjsztoNnTgGAHepEtkPTH/0/323830343a383635633a3a2f33322d313238203d3e20323635323634.roa
File:                     323830343a383635633a3a2f33322d313238203d3e20323635323634.roa (raw, json)
Hash identifier:          MLhb6C4EKLYFE4d5Y9GtKt7eqt5M+J+a0oOaUvrLXTA=
Subject key identifier:   7A:10:29:BE:A3:0E:B4:31:B5:FB:06:7E:72:28:42:FA:97:7A:29:1F
Certificate issuer:       /CN=22D679868B7904C5273EB24052FB05BFAE94AFF4
Certificate serial:       45918813AD3E8724D5CD60C79B0764EDFEA2C9F0
Authority key identifier: 22:D6:79:86:8B:79:04:C5:27:3E:B2:40:52:FB:05:BF:AE:94:AF:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22D679868B7904C5273EB24052FB05BFAE94AFF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bp2sJ4RuAW4tudPvB8rejgScjsztoNnTgGAHepEtkPTH/0/323830343a383635633a3a2f33322d313238203d3e20323635323634.roa
Signing time:             Sun 20 Apr 2025 16:06:22 +0000
ROA not before:           Sun 20 Apr 2025 16:01:22 +0000
ROA not after:            Sun 19 Apr 2026 16:06:22 +0000
asID:                     265264
IP address blocks:        2804:865c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bp2sJ4RuAW4tudPvB8rejgScjsztoNnTgGAHepEtkPTH/0/22D679868B7904C5273EB24052FB05BFAE94AFF4.crl
                          rsync://rpki-repo.registro.br/repo/Bp2sJ4RuAW4tudPvB8rejgScjsztoNnTgGAHepEtkPTH/0/22D679868B7904C5273EB24052FB05BFAE94AFF4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22D679868B7904C5273EB24052FB05BFAE94AFF4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 07:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:91:88:13:ad:3e:87:24:d5:cd:60:c7:9b:07:64:ed:fe:a2:c9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D679868B7904C5273EB24052FB05BFAE94AFF4
        Validity
            Not Before: Apr 20 16:01:22 2025 GMT
            Not After : Apr 19 16:06:22 2026 GMT
        Subject: CN=7A1029BEA30EB431B5FB067E722842FA977A291F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ac:45:78:18:cb:d6:30:5f:49:ed:8f:c3:eb:
                    d2:6b:95:d1:ec:26:ee:fa:c5:38:38:c9:16:c7:28:
                    45:cd:8a:e2:84:f5:fe:86:08:a5:2c:cb:d2:22:eb:
                    ca:c0:52:3c:d4:65:c1:20:b2:14:8a:ab:e3:5d:4f:
                    2c:98:0b:99:64:bf:88:9a:6c:b1:45:e2:0f:9e:4c:
                    ca:d1:bb:e7:92:bd:9a:b0:1d:fd:c0:43:30:8a:bf:
                    40:18:f8:0e:8c:52:7e:e2:a5:e0:05:e4:d5:20:97:
                    81:a3:a6:7e:f6:2e:01:20:00:e6:50:52:fb:71:68:
                    4b:46:8c:f9:ed:b8:9f:3c:c6:61:7d:a5:bb:5f:a5:
                    de:2b:0d:0f:86:7c:45:bf:5c:55:92:f5:19:71:ba:
                    c7:4b:67:02:1f:6c:1b:ae:61:a0:42:b8:66:51:c3:
                    46:d1:b9:68:6c:12:e7:f1:37:35:8f:94:0a:60:1a:
                    78:57:20:ed:c5:6b:2d:cd:0c:a8:cc:3e:f4:dc:ce:
                    0a:97:dd:26:76:af:dc:54:c4:67:cb:1f:50:25:e4:
                    61:12:78:f8:30:b5:22:18:6a:36:d5:86:07:fa:2a:
                    b2:8b:7d:85:e1:1f:23:0f:7f:e7:2f:c0:aa:ea:57:
                    ee:2e:b0:82:48:30:6f:d1:c5:6c:b2:15:c2:59:42:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:10:29:BE:A3:0E:B4:31:B5:FB:06:7E:72:28:42:FA:97:7A:29:1F
            X509v3 Authority Key Identifier:
                keyid:22:D6:79:86:8B:79:04:C5:27:3E:B2:40:52:FB:05:BF:AE:94:AF:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bp2sJ4RuAW4tudPvB8rejgScjsztoNnTgGAHepEtkPTH/0/22D679868B7904C5273EB24052FB05BFAE94AFF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22D679868B7904C5273EB24052FB05BFAE94AFF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bp2sJ4RuAW4tudPvB8rejgScjsztoNnTgGAHepEtkPTH/0/323830343a383635633a3a2f33322d313238203d3e20323635323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:865c::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:98:ef:c0:5d:28:32:d4:00:69:0c:ae:4a:01:49:56:fd:8c:
         6d:24:67:4a:b8:8d:21:3f:d5:25:1f:84:d1:e1:d3:87:01:05:
         3e:35:3c:be:96:87:fc:6d:e4:ee:81:3a:c4:f5:13:fc:b1:2a:
         d2:a2:a0:b9:a4:14:21:c3:2e:c1:c4:a0:d3:26:ba:35:5a:7e:
         f0:a2:f4:e7:0f:db:fb:59:62:04:d1:ec:0c:3f:51:73:41:66:
         5b:f3:7d:46:f6:44:94:ec:a7:c4:0d:af:a7:3a:fa:fd:6e:a8:
         96:1b:f3:a7:23:a8:11:41:fb:90:36:6f:fd:eb:f5:43:a4:ed:
         0b:6c:2a:be:6d:b9:ad:45:a0:38:b6:31:41:8d:e1:ca:35:02:
         37:8f:ce:75:98:47:9c:ec:eb:94:9c:b8:e0:04:c4:e7:78:de:
         2d:e3:90:ab:a3:c2:18:6d:21:30:8f:0b:54:84:b4:da:3e:f6:
         5d:6e:1b:0d:75:b5:75:37:5e:14:05:59:60:ba:0c:a5:3e:61:
         6e:0e:83:68:3c:a2:56:88:d9:1f:07:dd:80:1f:71:53:c3:78:
         06:10:71:40:37:39:66:aa:fe:f7:75:d2:c2:0b:5a:30:f8:4f:
         32:a5:7a:e6:99:08:6e:97:37:8d:79:f9:0f:6c:2b:5c:f9:df:
         36:0c:e4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:03 2025 by rpki-client on console.sobornost.net