Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a343030303a3a2f33342d3334203d3e20323730363030.roa
File:                     323830343a366537633a343030303a3a2f33342d3334203d3e20323730363030.roa (raw, json)
Hash identifier:          zct78Fd9ZGiQUn2BmCjuhonQZlFbjbuubr/SGjRmWSI=
Subject key identifier:   81:84:12:19:7D:33:6F:7A:FB:F0:C0:27:03:B6:F6:FE:9B:FC:A4:A7
Certificate issuer:       /CN=1039A4787256342E0DAFE021E2BC0D6A74EF0354
Certificate serial:       522C8B77D92A6A6E6E5800220B7FA7261C9F350E
Authority key identifier: 10:39:A4:78:72:56:34:2E:0D:AF:E0:21:E2:BC:0D:6A:74:EF:03:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1039A4787256342E0DAFE021E2BC0D6A74EF0354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a343030303a3a2f33342d3334203d3e20323730363030.roa
Signing time:             Sat 29 Mar 2025 00:34:49 +0000
ROA not before:           Sat 29 Mar 2025 00:29:49 +0000
ROA not after:            Sat 28 Mar 2026 00:34:49 +0000
asID:                     270600
IP address blocks:        2804:6e7c:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.crl
                          rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1039A4787256342E0DAFE021E2BC0D6A74EF0354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 20:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2c:8b:77:d9:2a:6a:6e:6e:58:00:22:0b:7f:a7:26:1c:9f:35:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1039A4787256342E0DAFE021E2BC0D6A74EF0354
        Validity
            Not Before: Mar 29 00:29:49 2025 GMT
            Not After : Mar 28 00:34:49 2026 GMT
        Subject: CN=818412197D336F7AFBF0C02703B6F6FE9BFCA4A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:45:5d:00:2d:43:50:ef:43:23:ec:7a:97:61:
                    ce:64:ef:4b:46:c5:77:6c:98:6c:e7:f6:cd:01:31:
                    80:c6:bc:81:3e:15:c5:d9:72:04:72:ee:91:f8:62:
                    e3:77:a5:2c:88:9e:ec:6d:c5:42:6c:f1:c8:78:6b:
                    b1:97:0a:4e:f0:c5:ac:8e:4d:8e:83:d1:21:f5:8c:
                    19:53:b8:c5:ee:7e:9a:1a:64:be:db:4e:62:98:2a:
                    5b:cf:ff:ae:8f:6c:08:f8:8f:02:a4:db:4a:88:5f:
                    f5:b0:c5:c3:cc:8b:81:05:c0:bf:15:6c:1b:df:a7:
                    fc:fa:9b:6c:ca:3a:ef:08:41:48:ca:a1:f9:48:45:
                    ad:01:b2:47:c2:51:aa:93:20:cc:6a:bf:41:6a:55:
                    cf:10:37:44:bd:b7:c0:e9:e5:6b:fa:73:60:c5:14:
                    98:45:c9:d6:3d:fe:bf:65:78:5c:a8:79:43:d7:73:
                    df:04:cb:d4:0c:d7:8b:fe:9c:13:08:8b:e1:97:17:
                    9b:62:98:ff:4f:81:70:41:c0:fb:a7:c0:42:aa:4d:
                    e2:50:2b:59:62:fb:94:09:22:d4:bd:59:a8:06:a1:
                    7c:d1:85:fe:ed:78:d9:ea:05:e0:bb:d9:1d:7b:c9:
                    29:44:3c:be:64:98:c0:a4:99:e0:d9:2d:af:5e:8b:
                    8a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:84:12:19:7D:33:6F:7A:FB:F0:C0:27:03:B6:F6:FE:9B:FC:A4:A7
            X509v3 Authority Key Identifier:
                keyid:10:39:A4:78:72:56:34:2E:0D:AF:E0:21:E2:BC:0D:6A:74:EF:03:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1039A4787256342E0DAFE021E2BC0D6A74EF0354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a343030303a3a2f33342d3334203d3e20323730363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e7c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         94:5e:48:09:61:cc:cd:13:d5:6e:47:9c:24:61:a7:24:c4:26:
         f4:9a:04:18:e5:bc:e8:6a:8d:fb:bb:9b:e7:0c:e8:bd:ce:f7:
         a1:ea:10:f6:d0:b8:2a:68:e5:bd:52:6a:3f:71:a0:d0:8c:7d:
         8f:61:e7:f0:be:3a:af:b8:e0:5d:fa:91:df:a3:89:63:6e:e1:
         f2:7c:ab:2c:f9:5e:6d:24:a5:c6:9c:f3:92:b5:65:9c:c7:07:
         50:fb:30:0c:6e:87:96:35:63:cc:22:ca:fc:57:54:58:05:79:
         89:01:e7:74:58:85:6e:e6:c5:77:3b:af:6f:1b:25:ff:d9:3f:
         e2:41:d7:ef:5e:5a:77:75:13:25:31:72:3d:8d:0e:8b:ac:17:
         7f:2b:6c:ce:6e:d5:25:0c:ea:72:31:54:22:38:c3:6c:20:d8:
         f0:bf:50:aa:b7:5e:48:51:cb:e5:12:27:a5:01:6f:55:7f:61:
         82:09:b3:c2:0f:6c:b0:2f:e0:fa:f3:9e:b5:27:22:65:ae:9f:
         f4:93:ca:8a:27:99:e8:7d:45:06:c3:e8:5b:cf:75:2e:4a:20:
         7c:e3:72:aa:f4:1f:b6:60:0b:47:3a:2a:e3:6d:a5:25:ba:02:
         db:ae:46:9a:6a:6c:13:9c:ad:23:c2:48:d3:60:71:aa:2a:b9:
         2d:99:0c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:12 2025 by rpki-client on console.sobornost.net