Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a3a2f33332d3333203d3e203631363038.roa
File:                     323830343a383237303a3a2f33332d3333203d3e203631363038.roa (raw, json)
Hash identifier:          BNCGrDkWytMpPM9AhJBlZE9newk1iIjDVUL2IMms0Po=
Subject key identifier:   2B:A1:40:B0:77:43:6E:BC:A9:2C:8D:70:9D:BB:19:07:DC:76:40:56
Certificate issuer:       /CN=B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3
Certificate serial:       53D6DFF3A0FC4535BD630F70AB2317C2305CC227
Authority key identifier: B0:4E:CA:62:1E:6F:CB:90:F1:46:9D:B6:E8:9A:D4:D2:DE:D7:9C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a3a2f33332d3333203d3e203631363038.roa
Signing time:             Thu 24 Apr 2025 18:55:40 +0000
ROA not before:           Thu 24 Apr 2025 18:50:40 +0000
ROA not after:            Thu 23 Apr 2026 18:55:40 +0000
asID:                     61608
IP address blocks:        2804:8270::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.crl
                          rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 03:09:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d6:df:f3:a0:fc:45:35:bd:63:0f:70:ab:23:17:c2:30:5c:c2:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3
        Validity
            Not Before: Apr 24 18:50:40 2025 GMT
            Not After : Apr 23 18:55:40 2026 GMT
        Subject: CN=2BA140B077436EBCA92C8D709DBB1907DC764056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:97:6c:15:09:2a:de:59:4c:61:e1:e7:27:5f:
                    6d:95:62:3e:d1:52:ce:36:fc:be:ba:ae:c9:b1:d6:
                    62:af:b9:7b:d9:90:c5:42:55:d5:af:5c:44:94:e1:
                    ca:64:30:58:19:e4:c0:fd:5d:d1:a3:9b:50:42:9e:
                    4b:c1:18:4f:94:c9:ac:e3:12:85:f9:68:35:03:42:
                    74:22:a3:3b:7e:21:8f:5d:8c:80:53:a4:ed:1c:5e:
                    cb:04:ca:ff:b4:c3:bd:34:fb:a7:f8:a8:54:8d:33:
                    67:78:1a:91:4a:e1:7f:61:65:4f:4e:f7:3c:87:ac:
                    72:38:12:fb:08:c6:bd:05:1a:9b:0f:62:f7:f1:65:
                    fe:1d:43:68:7d:09:9b:b4:50:f3:36:07:71:c9:f5:
                    2a:6b:e4:5d:45:18:bc:44:b6:42:2b:14:ae:23:55:
                    e0:50:01:26:54:26:5c:27:d2:7c:0e:8f:48:b6:46:
                    70:43:c1:66:74:e2:0a:38:17:93:ac:74:79:b0:c1:
                    53:1f:ba:78:ee:a5:9d:4d:b1:dd:5e:1e:85:f1:2e:
                    9c:d0:41:ea:dd:4b:f0:b8:7f:9d:4a:a2:4f:86:33:
                    04:c6:ce:39:7d:73:68:1d:3f:23:67:f0:00:84:06:
                    f5:8c:e7:84:52:7f:b0:af:0a:8d:7f:fc:02:9e:fa:
                    aa:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A1:40:B0:77:43:6E:BC:A9:2C:8D:70:9D:BB:19:07:DC:76:40:56
            X509v3 Authority Key Identifier:
                keyid:B0:4E:CA:62:1E:6F:CB:90:F1:46:9D:B6:E8:9A:D4:D2:DE:D7:9C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a3a2f33332d3333203d3e203631363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8270::/33

    Signature Algorithm: sha256WithRSAEncryption
         5d:8e:74:91:75:f2:3c:9d:0b:5b:61:27:cf:73:f9:9e:21:6b:
         54:2d:68:c6:c8:8d:8c:c3:7f:e0:75:72:fc:8c:a0:fe:50:41:
         0a:61:db:a2:b5:83:0f:eb:0b:9a:ba:bb:2f:9c:87:e5:ce:27:
         1c:14:9c:81:35:ed:a7:14:60:1e:77:a7:7c:2c:eb:ec:7d:3d:
         d6:d0:c5:f2:70:10:4c:2d:ba:10:ba:dd:67:c6:26:c7:8d:9f:
         f4:41:a3:eb:fe:28:bf:4f:94:13:c7:c1:7b:36:49:78:37:af:
         2f:f8:64:45:dd:0e:02:5d:7e:f3:af:67:8a:79:a1:49:9d:63:
         35:59:50:78:7e:bc:12:1b:e7:73:67:56:a5:0e:d3:68:9f:2c:
         45:ea:b6:0b:b3:e1:75:35:ee:bf:56:8f:52:b4:aa:89:ce:9b:
         aa:89:1c:51:eb:03:e3:3c:56:26:96:86:35:11:63:b0:82:d4:
         31:2e:42:df:ce:63:f5:a9:b8:a8:95:e7:27:f9:2a:70:dd:06:
         ac:3a:db:a4:29:94:0d:6b:e4:2d:09:20:4d:f1:b2:1b:9a:cb:
         c7:a3:a1:45:51:da:61:7d:be:5a:89:28:ba:a5:d7:c7:6d:62:
         95:d7:01:f9:7c:ca:86:9f:7e:f0:7a:bb:16:3b:40:8e:9e:36:
         5e:91:45:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:04 2025 by rpki-client on console.sobornost.net