Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/323830343a373838303a3a2f33322d3438203d3e20323731323437.roa
File:                     323830343a373838303a3a2f33322d3438203d3e20323731323437.roa (raw, json)
Hash identifier:          MAqBnQ9SmfN3mdyuCA234HR4vt8s2UuzNpbYFEWGdQQ=
Subject key identifier:   C6:1A:18:04:20:34:BC:D0:85:D4:AA:71:F5:4A:9B:15:BE:6C:CF:9D
Certificate issuer:       /CN=AC154D8D44795F5E54B65B3B1FF4584355304522
Certificate serial:       2E9D80718F2ED70941F1853AF58CB88EEAA2CEE0
Authority key identifier: AC:15:4D:8D:44:79:5F:5E:54:B6:5B:3B:1F:F4:58:43:55:30:45:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC154D8D44795F5E54B65B3B1FF4584355304522.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/323830343a373838303a3a2f33322d3438203d3e20323731323437.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     271247
IP address blocks:        2804:7880::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/AC154D8D44795F5E54B65B3B1FF4584355304522.crl
                          rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/AC154D8D44795F5E54B65B3B1FF4584355304522.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC154D8D44795F5E54B65B3B1FF4584355304522.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:9d:80:71:8f:2e:d7:09:41:f1:85:3a:f5:8c:b8:8e:ea:a2:ce:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC154D8D44795F5E54B65B3B1FF4584355304522
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2e:78:3d:5e:06:93:4e:6b:80:fc:19:10:4f:
                    38:20:0b:3d:3e:e2:66:49:dc:f0:21:7b:e5:aa:d8:
                    4a:0c:ba:aa:ef:de:96:9a:15:ef:c3:9d:03:9d:96:
                    f2:7d:4b:19:cc:29:d5:82:96:2f:72:04:b0:ce:14:
                    f2:13:db:26:eb:77:40:02:4e:45:7f:85:97:8f:a8:
                    4a:fa:07:70:af:79:b1:da:95:68:36:cc:6c:a7:62:
                    7e:54:91:3d:4e:0f:88:c5:00:3f:34:d7:82:23:20:
                    cf:77:1e:c3:0c:ae:46:c9:3d:35:08:13:d9:e3:13:
                    24:d8:ff:95:f2:fe:5a:3c:75:2f:18:fa:ce:da:37:
                    46:e4:92:6e:43:c2:f5:a4:b9:61:60:6c:91:a3:b8:
                    d8:df:c5:f7:75:f2:6b:6a:a3:7e:87:9e:25:c7:08:
                    dc:9a:67:cc:7a:82:cf:d3:e4:66:c5:f9:ec:d2:04:
                    9b:9f:8f:b2:53:71:0d:00:39:7f:1b:6a:0b:7f:f3:
                    c1:ab:ec:ef:02:0a:de:16:af:ae:c0:ec:d0:bc:1a:
                    bf:49:26:45:a3:07:9c:33:06:87:93:1f:8a:99:2a:
                    35:b0:86:ec:68:28:de:f2:a1:07:70:4c:ba:1e:2b:
                    8b:5a:6d:73:dd:f6:94:4c:9b:94:c0:d3:f8:14:f7:
                    f5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1A:18:04:20:34:BC:D0:85:D4:AA:71:F5:4A:9B:15:BE:6C:CF:9D
            X509v3 Authority Key Identifier:
                keyid:AC:15:4D:8D:44:79:5F:5E:54:B6:5B:3B:1F:F4:58:43:55:30:45:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/AC154D8D44795F5E54B65B3B1FF4584355304522.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC154D8D44795F5E54B65B3B1FF4584355304522.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/323830343a373838303a3a2f33322d3438203d3e20323731323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7880::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:4b:d1:ec:b1:75:a2:a0:dd:d2:63:06:7f:b4:6a:0b:c0:23:
         d5:c1:57:00:6a:f0:af:18:6e:cd:80:85:34:70:e6:f3:31:c9:
         0e:fc:36:9d:dd:09:61:6c:52:b0:ae:b2:16:3e:21:97:df:24:
         9e:10:d1:b6:c1:c9:c1:e2:4d:82:a0:c0:ab:35:9c:35:05:0b:
         23:e4:a3:68:2a:74:a1:5a:72:8b:31:a5:fd:d0:de:02:da:fc:
         b5:af:27:e4:9d:05:63:7b:58:94:dc:f1:7e:a6:06:ef:ff:3a:
         98:38:9a:d6:40:37:35:80:06:cd:09:14:b8:b2:df:fe:3e:d1:
         f4:f0:45:8a:57:32:56:d8:e2:17:86:30:f3:f7:f6:84:87:92:
         f1:19:bd:70:55:a4:d6:25:c3:a8:a1:13:88:e9:6c:69:9f:e4:
         19:ca:fd:02:54:93:55:6f:f2:20:b6:d1:b7:5e:88:26:66:19:
         f7:20:10:51:e4:e7:4f:4b:d7:29:16:e4:8d:55:2e:1b:f7:2a:
         75:5d:00:2d:39:00:af:1a:d9:e1:1f:b3:18:1f:a7:e7:a5:9a:
         c0:f6:0e:ed:5a:d8:bc:6c:8e:fc:c6:73:8e:1d:07:54:76:23:
         71:8e:a9:a1:a2:8a:30:ef:0f:e8:12:c3:7c:6c:77:3b:1a:b3:
         5e:d4:90:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:31 2025 by rpki-client on console.sobornost.net