Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a383030303a3a2f33332d3333203d3e20323731353034.roa
File:                     323830343a376339303a383030303a3a2f33332d3333203d3e20323731353034.roa (raw, json)
Hash identifier:          1lUxA38+MgS6Zm03vb70SbCDJBy6MFRzcE9eoMxzzcg=
Subject key identifier:   F2:AC:11:5F:1F:48:E5:88:B9:BA:7E:C3:48:3A:0B:F5:2C:5B:71:82
Certificate issuer:       /CN=3B9278887F13B27AA11B20954CB918BC341F1426
Certificate serial:       603F4A985E0B2D43BFB46D3D4E0F34FDE4686D1D
Authority key identifier: 3B:92:78:88:7F:13:B2:7A:A1:1B:20:95:4C:B9:18:BC:34:1F:14:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B9278887F13B27AA11B20954CB918BC341F1426.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a383030303a3a2f33332d3333203d3e20323731353034.roa
Signing time:             Thu 27 Feb 2025 14:51:40 +0000
ROA not before:           Thu 27 Feb 2025 14:46:40 +0000
ROA not after:            Thu 26 Feb 2026 14:51:40 +0000
asID:                     271504
IP address blocks:        2804:7c90:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3B9278887F13B27AA11B20954CB918BC341F1426.crl
                          rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3B9278887F13B27AA11B20954CB918BC341F1426.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B9278887F13B27AA11B20954CB918BC341F1426.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:3f:4a:98:5e:0b:2d:43:bf:b4:6d:3d:4e:0f:34:fd:e4:68:6d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B9278887F13B27AA11B20954CB918BC341F1426
        Validity
            Not Before: Feb 27 14:46:40 2025 GMT
            Not After : Feb 26 14:51:40 2026 GMT
        Subject: CN=F2AC115F1F48E588B9BA7EC3483A0BF52C5B7182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f6:6e:ac:fc:48:cc:60:67:fa:de:af:33:12:
                    d3:da:0d:4d:67:59:b7:79:77:fb:90:11:3c:be:a3:
                    03:98:9d:72:a2:d5:5d:ce:c0:57:38:e3:33:17:69:
                    fa:8e:6d:7f:0d:ca:da:9e:a6:cc:f4:d9:99:9d:51:
                    55:09:06:cd:c5:5f:8f:e6:34:fa:1c:dd:25:f2:0e:
                    c1:17:78:70:9c:cb:b7:69:7e:aa:1c:00:a7:28:9b:
                    34:8b:e5:f1:79:60:71:ea:5e:c0:9a:a4:82:08:1f:
                    92:ed:b9:6b:2d:00:0e:2b:2c:e1:fd:66:d7:b3:9f:
                    a1:57:55:de:18:32:73:1d:7f:ff:31:6b:a9:74:92:
                    ff:a7:0e:d3:c5:d8:24:fd:de:31:94:1a:1f:42:76:
                    81:cc:08:e8:60:93:c5:e3:a1:8c:39:e7:fe:74:25:
                    b2:c6:1e:65:77:f4:a2:a9:3a:d7:6b:82:6c:60:4d:
                    3c:2e:71:99:39:1e:ed:1d:57:43:38:51:fc:d8:03:
                    eb:d3:df:3e:5f:c7:17:78:db:54:f5:d6:f6:f4:a4:
                    12:83:50:cb:2f:e6:46:2c:42:80:a9:2e:a0:5f:11:
                    ff:88:30:f8:3e:51:25:96:60:80:5d:2a:38:a3:96:
                    d3:c2:c4:a2:6e:91:a0:7b:34:4c:f1:74:59:88:d1:
                    27:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AC:11:5F:1F:48:E5:88:B9:BA:7E:C3:48:3A:0B:F5:2C:5B:71:82
            X509v3 Authority Key Identifier:
                keyid:3B:92:78:88:7F:13:B2:7A:A1:1B:20:95:4C:B9:18:BC:34:1F:14:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3B9278887F13B27AA11B20954CB918BC341F1426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B9278887F13B27AA11B20954CB918BC341F1426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a383030303a3a2f33332d3333203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c90:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0f:f7:1a:b8:dd:be:f3:2a:cb:5e:d2:63:9c:7c:f3:36:79:97:
         b5:b7:e8:b0:46:3b:e8:af:b5:ce:f9:e2:0c:e2:8a:88:21:4a:
         d5:bd:1f:43:2d:8a:5e:6d:de:c4:ba:bc:f4:c5:09:49:79:09:
         7c:ef:79:8e:a5:ed:cd:59:e5:28:71:a2:22:81:85:b3:37:96:
         f3:ec:b2:7d:e7:87:6a:53:70:dc:bb:d3:89:d7:58:45:b6:01:
         66:62:f4:76:9e:5e:4a:0f:61:f9:2b:fc:1a:1f:34:10:5e:fe:
         51:5b:9e:78:52:eb:73:2f:8c:5b:25:d4:ad:ca:3f:09:18:e6:
         06:a7:9d:36:42:1b:56:df:ca:4b:80:21:92:fa:41:30:17:a2:
         fb:25:21:24:53:21:b9:b7:00:a6:3f:64:b4:30:6b:8c:66:4c:
         7c:62:30:25:fc:c2:cf:41:84:0c:62:0c:ed:3d:4d:09:30:20:
         c6:8c:91:78:c7:c7:04:30:f0:3a:97:05:86:4f:23:a9:98:db:
         1f:f9:65:47:5c:a1:17:50:29:4e:43:71:7d:ad:39:63:03:bb:
         6e:09:ba:1a:66:9a:c4:58:56:30:e2:cc:bc:82:96:5b:92:b2:
         c4:e2:d4:71:e7:b1:7e:2b:ce:fa:06:93:ab:f4:52:3d:f1:6d:
         7a:1f:e0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:06 2025 by rpki-client on console.sobornost.net