Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/323830343a333434343a3a2f33322d313238203d3e20323635343436.roa
File:                     323830343a333434343a3a2f33322d313238203d3e20323635343436.roa (raw, json)
Hash identifier:          770fpicqjjqAM/JypvmABulMsr23frlub+j7OCkyBV0=
Subject key identifier:   F5:CA:C7:94:7B:8E:E6:52:F1:79:F4:FB:1E:BE:57:4E:EC:BD:13:06
Certificate issuer:       /CN=014392EBA63D7846A20EA8BF9E12662547C5239F
Certificate serial:       2F5D0EE5C4CF3F0E1F5CB99A217A27C0E5400CC8
Authority key identifier: 01:43:92:EB:A6:3D:78:46:A2:0E:A8:BF:9E:12:66:25:47:C5:23:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014392EBA63D7846A20EA8BF9E12662547C5239F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/323830343a333434343a3a2f33322d313238203d3e20323635343436.roa
Signing time:             Sat 29 Mar 2025 12:38:09 +0000
ROA not before:           Sat 29 Mar 2025 12:33:09 +0000
ROA not after:            Sat 28 Mar 2026 12:38:09 +0000
asID:                     265446
IP address blocks:        2804:3444::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/014392EBA63D7846A20EA8BF9E12662547C5239F.crl
                          rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/014392EBA63D7846A20EA8BF9E12662547C5239F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014392EBA63D7846A20EA8BF9E12662547C5239F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:5d:0e:e5:c4:cf:3f:0e:1f:5c:b9:9a:21:7a:27:c0:e5:40:0c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014392EBA63D7846A20EA8BF9E12662547C5239F
        Validity
            Not Before: Mar 29 12:33:09 2025 GMT
            Not After : Mar 28 12:38:09 2026 GMT
        Subject: CN=F5CAC7947B8EE652F179F4FB1EBE574EECBD1306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:45:62:f0:01:7a:69:2b:88:79:98:ad:54:58:
                    1c:b5:20:bf:56:e7:2e:db:9e:b5:36:dc:19:66:79:
                    37:15:d4:25:0d:9a:32:64:47:d9:f9:e6:83:b8:15:
                    59:46:d5:ea:0b:ac:7a:aa:67:a8:92:b4:a6:9e:b3:
                    7c:14:be:97:a8:a8:b2:ec:2c:07:f2:eb:63:f3:59:
                    e3:9f:84:13:c6:50:a8:c2:22:62:f4:1c:63:6d:a2:
                    28:e4:6a:e5:c1:c3:95:00:7a:82:b9:43:f6:6c:27:
                    34:b1:d1:18:0c:27:b6:a1:d5:64:49:b7:3e:93:84:
                    81:dc:18:46:56:d5:ff:d9:e7:0b:67:cd:e8:72:fe:
                    19:06:54:4b:47:01:24:2c:aa:ce:4c:4b:e1:2c:bf:
                    55:ab:ff:1d:22:b0:a4:70:40:89:1e:54:fe:11:26:
                    fe:ec:01:bc:89:01:ee:8f:eb:6f:be:19:cd:89:0d:
                    91:f0:68:6e:86:b5:b4:51:4d:94:0c:67:f5:3e:29:
                    ba:5d:86:53:ad:97:3a:e4:af:bf:3c:fc:dd:57:99:
                    46:88:be:c7:93:b2:e6:ed:4f:9f:24:ff:4e:ab:70:
                    dc:e3:7a:53:b3:06:8b:08:a3:82:49:3c:4f:88:06:
                    3e:e5:ab:8a:b3:ff:98:93:a0:34:d0:d3:31:57:f8:
                    43:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CA:C7:94:7B:8E:E6:52:F1:79:F4:FB:1E:BE:57:4E:EC:BD:13:06
            X509v3 Authority Key Identifier:
                keyid:01:43:92:EB:A6:3D:78:46:A2:0E:A8:BF:9E:12:66:25:47:C5:23:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/014392EBA63D7846A20EA8BF9E12662547C5239F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014392EBA63D7846A20EA8BF9E12662547C5239F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/323830343a333434343a3a2f33322d313238203d3e20323635343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3444::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:6c:01:a3:b8:bf:15:08:00:28:18:4c:51:8f:7c:e3:39:e9:
         df:a8:b6:5a:27:97:a1:f5:9c:ca:09:08:13:22:13:c0:e1:c6:
         bf:b5:be:06:3c:b3:f2:79:b6:e8:91:5e:73:0e:43:5e:94:33:
         34:eb:3d:b6:28:d1:c5:02:bd:a2:d3:30:9b:4f:09:f5:2e:7c:
         aa:46:60:21:af:2e:35:51:a5:12:18:c2:73:83:fb:45:4c:63:
         69:7c:02:e5:de:2e:bf:e8:3c:ae:b6:25:fb:e5:02:d4:f5:c8:
         62:ed:a0:9e:85:62:87:05:f5:21:b3:7a:9b:5c:0e:3e:ed:49:
         49:dc:d2:7c:74:52:f1:60:8e:d8:94:ea:92:08:15:8d:b3:f0:
         f0:a9:03:1b:75:28:53:e0:60:f9:be:e9:ab:01:18:72:56:05:
         a9:95:c9:2b:ca:4b:82:26:23:11:55:ee:97:4a:3a:b5:a0:23:
         77:7f:8e:11:96:54:b0:df:32:e3:6b:e7:ad:4f:da:55:90:35:
         57:e3:ea:eb:2f:16:6a:c4:ba:a9:70:53:c1:3d:5b:f8:51:77:
         2f:01:fe:c6:1d:b2:f8:3e:09:65:8b:ed:ae:02:d8:a7:42:51:
         51:5e:83:25:86:02:04:6a:c8:ca:70:f3:37:e7:21:6a:4d:82:
         fd:91:b2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:50 2025 by rpki-client on console.sobornost.net