Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/323830343a3136343a666130303a3a2f34302d3430203d3e20323632363633.roa
File:                     323830343a3136343a666130303a3a2f34302d3430203d3e20323632363633.roa (raw, json)
Hash identifier:          xY1fp9LzKvvzGpzzlrB0LUSIosWFCQefFDUn7ctLYGI=
Subject key identifier:   70:8F:7F:61:75:34:AC:BE:FC:A7:1A:D1:CD:37:8F:9D:97:AC:6B:7D
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       78628648245804D0AEC9E6BBB9880131A4BE5C06
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/323830343a3136343a666130303a3a2f34302d3430203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:16:59 +0000
ROA not before:           Thu 06 Mar 2025 03:11:59 +0000
ROA not after:            Thu 05 Mar 2026 03:16:59 +0000
asID:                     262663
IP address blocks:        2804:164:fa00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:62:86:48:24:58:04:d0:ae:c9:e6:bb:b9:88:01:31:a4:be:5c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:11:59 2025 GMT
            Not After : Mar  5 03:16:59 2026 GMT
        Subject: CN=708F7F617534ACBEFCA71AD1CD378F9D97AC6B7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f2:68:91:e9:a0:2a:57:0d:26:9a:85:c1:cc:
                    db:6e:0a:ac:1c:79:fb:54:b8:d5:80:0f:29:5b:5b:
                    92:83:b9:c0:b3:09:bc:8f:2e:d1:69:f5:85:4f:bc:
                    c1:f0:ec:73:48:02:a3:be:7a:01:6d:fd:3f:23:65:
                    04:c2:e9:d1:0a:23:b1:15:a1:c2:b5:d4:f4:ce:47:
                    dc:06:bb:e8:8c:aa:7f:9e:85:75:66:bb:ba:ec:4e:
                    f8:cb:98:45:9d:41:e4:d1:79:01:99:7c:29:e8:40:
                    ee:94:f4:b2:f2:ca:d9:bf:c4:92:e2:94:52:a6:6c:
                    19:e6:9a:8f:b2:1d:d1:26:81:02:69:95:8a:7b:52:
                    64:f4:31:04:ce:f7:06:50:fd:d6:6a:e2:48:10:9a:
                    33:a2:5f:21:80:45:65:5e:a0:a4:6f:87:8f:80:1f:
                    d6:8c:e2:7f:0d:16:ff:84:b7:83:9d:09:3d:80:58:
                    3b:d6:12:d0:ee:10:9c:83:62:db:1f:fa:c2:38:87:
                    f4:45:33:44:1d:99:15:b9:41:1e:e3:36:78:9c:77:
                    1e:bf:94:91:c1:7c:0a:11:94:4a:6d:32:d6:02:fa:
                    66:c4:8e:d4:9d:6d:56:81:a1:b7:da:65:a3:93:35:
                    f8:1c:e9:5f:f8:e9:a1:fa:5b:34:ba:83:40:90:10:
                    e9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8F:7F:61:75:34:AC:BE:FC:A7:1A:D1:CD:37:8F:9D:97:AC:6B:7D
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/323830343a3136343a666130303a3a2f34302d3430203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:164:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         cf:31:cc:a9:31:3f:cf:a5:af:e2:1a:36:18:e1:ce:8a:9e:91:
         4e:ac:c7:49:97:d7:b4:08:fb:0e:f1:57:ab:d6:57:69:e5:75:
         f4:3c:94:fe:3a:4b:94:87:94:33:f1:60:6c:f1:be:7c:ab:44:
         54:94:b8:67:38:bd:9f:39:e5:fc:d5:bf:20:2e:c3:15:c7:ac:
         e8:fb:05:1c:5e:54:8e:93:3a:38:a9:6c:ec:33:f5:9e:ab:5e:
         db:6e:f2:d6:e6:f0:e8:c9:26:7b:6a:ee:1a:b0:09:1c:a0:e2:
         31:4f:40:26:41:ce:54:a6:72:42:af:3a:56:79:ef:21:f8:47:
         a6:fd:2a:30:4a:c2:a5:19:86:be:6d:95:3a:90:93:18:a0:f2:
         c0:f5:ea:b2:40:50:bc:db:e3:a5:3f:6e:c1:c5:a0:c9:dd:ac:
         aa:b1:88:11:51:26:af:64:e8:3b:71:37:c2:e5:79:aa:bd:de:
         1d:0d:c3:4b:81:dc:41:18:85:78:7c:44:bc:d1:ab:c6:79:fa:
         ef:83:9f:a6:4f:1a:fa:b0:43:e5:60:60:70:2d:68:21:74:a9:
         6e:ba:f0:71:84:88:cd:12:86:80:74:70:aa:0c:98:e0:49:e6:
         5b:2d:74:74:41:f3:ce:15:68:c9:23:1b:fd:a7:0a:e2:f3:6d:
         04:af:15:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:40 2025 by rpki-client on console.sobornost.net