Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/323830343a333464343a3a2f33322d3438203d3e20323635343833.roa
File:                     323830343a333464343a3a2f33322d3438203d3e20323635343833.roa (raw, json)
Hash identifier:          yLrtH58xC+1jIEbmKu34Mf1Eyz2Ki/HA5JUGdH+ENgY=
Subject key identifier:   8B:5B:33:44:95:E6:ED:75:BB:DA:3E:5E:CB:91:87:11:9C:84:2E:28
Certificate issuer:       /CN=0848CF0033EBDC84F70FE97CEF07FDEA40979FF9
Certificate serial:       0322A3F8E8F3E1ED15475251DC596F264943869E
Authority key identifier: 08:48:CF:00:33:EB:DC:84:F7:0F:E9:7C:EF:07:FD:EA:40:97:9F:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/323830343a333464343a3a2f33322d3438203d3e20323635343833.roa
Signing time:             Thu 06 Mar 2025 16:52:18 +0000
ROA not before:           Thu 06 Mar 2025 16:47:18 +0000
ROA not after:            Thu 05 Mar 2026 16:52:18 +0000
asID:                     265483
IP address blocks:        2804:34d4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.crl
                          rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 18:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:22:a3:f8:e8:f3:e1:ed:15:47:52:51:dc:59:6f:26:49:43:86:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0848CF0033EBDC84F70FE97CEF07FDEA40979FF9
        Validity
            Not Before: Mar  6 16:47:18 2025 GMT
            Not After : Mar  5 16:52:18 2026 GMT
        Subject: CN=8B5B334495E6ED75BBDA3E5ECB9187119C842E28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:74:7e:ab:63:61:41:77:90:e3:1d:5a:ac:d6:
                    69:d3:2c:2d:f8:65:54:10:9c:c1:b5:6a:3c:c8:ac:
                    1e:cb:e5:2f:f5:1a:2f:07:7c:5b:3f:87:71:e8:4e:
                    bb:af:b9:29:5c:2b:a1:15:51:b3:7d:5e:c6:2b:90:
                    f3:d1:6f:1e:97:ab:87:eb:c5:14:48:92:dc:09:4c:
                    b0:2f:b0:da:33:10:5d:c4:fd:c9:2b:28:a1:77:ca:
                    05:af:eb:9a:01:de:10:e4:c6:7a:28:4e:69:fe:d2:
                    29:d2:1c:78:2e:75:8a:51:30:f7:64:2a:2d:5d:a7:
                    a7:bc:a3:fa:aa:fd:44:f5:dc:23:d6:ee:b0:27:3b:
                    c3:38:41:56:32:ea:12:a8:5c:c2:81:ae:8e:64:66:
                    f3:a8:38:2d:b1:8e:0a:8e:bf:06:43:e1:69:97:f0:
                    65:18:30:a5:4c:31:ee:4b:05:29:6c:82:d6:a0:36:
                    62:7d:eb:c7:cf:ea:78:db:17:a7:d6:3f:e5:00:5d:
                    0f:1b:cf:64:85:48:b9:a6:bc:5e:e2:e3:92:cb:ca:
                    79:0d:f8:c3:90:53:cb:d7:b3:cd:24:b2:c1:35:8e:
                    1d:5e:a9:17:76:63:7a:23:b3:2b:a3:37:ea:17:a4:
                    d1:15:32:16:7e:cd:bb:c0:da:a2:41:4a:74:b1:ad:
                    46:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5B:33:44:95:E6:ED:75:BB:DA:3E:5E:CB:91:87:11:9C:84:2E:28
            X509v3 Authority Key Identifier:
                keyid:08:48:CF:00:33:EB:DC:84:F7:0F:E9:7C:EF:07:FD:EA:40:97:9F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/323830343a333464343a3a2f33322d3438203d3e20323635343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:62:ca:aa:b1:df:16:42:bc:fa:4a:09:a5:59:bb:de:96:41:
         53:15:9b:d5:e7:7e:a3:89:64:53:62:94:dc:b8:a1:da:00:fe:
         93:59:64:23:04:6e:8a:6b:4d:d5:99:bf:6a:75:e5:ab:08:69:
         74:c7:06:53:5c:df:55:40:63:bc:9a:f9:4b:aa:54:29:c6:b5:
         39:29:72:02:e3:47:3b:ec:d6:1c:26:94:4a:70:f1:ff:d1:60:
         27:b2:5b:9a:48:32:02:a1:28:0d:67:b7:9f:21:75:6e:11:5c:
         0f:5f:8a:8b:a4:6c:78:66:f4:f8:8c:c3:85:88:02:e9:df:05:
         b2:1e:12:42:e8:4d:37:4e:44:b5:8f:e1:c2:6f:49:b5:e8:08:
         16:5e:ce:e7:fe:29:f9:06:08:ff:f1:e4:80:91:e4:9c:0d:79:
         f5:9d:17:91:bb:ab:a9:d4:62:14:41:87:a2:79:a9:2e:94:48:
         79:21:4f:81:25:0a:21:84:fa:ac:df:33:13:3a:7b:fa:54:6f:
         98:48:8e:86:28:bd:97:f9:10:53:25:61:ca:dd:08:93:cc:ee:
         57:35:88:96:3c:df:0c:3f:bb:ee:73:dd:a4:5a:3a:ba:f7:fb:
         a7:a8:7b:09:a9:65:33:6f:e8:93:9a:1d:22:bc:64:bb:17:8b:
         32:3b:f3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:44 2025 by rpki-client on console.sobornost.net