Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/323830343a333164343a3a2f33322d3438203d3e203533313339.roa
File:                     323830343a333164343a3a2f33322d3438203d3e203533313339.roa (raw, json)
Hash identifier:          Tny32eTDORgq/MtVMRE6pvmeZrpwE0nT6BNCMfyIuNM=
Subject key identifier:   6B:C4:A0:C5:AD:82:3A:DD:26:BB:A9:1B:ED:1A:A9:B4:51:26:19:25
Certificate issuer:       /CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA
Certificate serial:       3BA884134C2E8DF53C250ADC02ECC0247AF56340
Authority key identifier: D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/323830343a333164343a3a2f33322d3438203d3e203533313339.roa
Signing time:             Thu 06 Mar 2025 05:59:05 +0000
ROA not before:           Thu 06 Mar 2025 05:54:05 +0000
ROA not after:            Thu 05 Mar 2026 05:59:05 +0000
asID:                     53139
IP address blocks:        2804:31d4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl
                          rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a8:84:13:4c:2e:8d:f5:3c:25:0a:dc:02:ec:c0:24:7a:f5:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA
        Validity
            Not Before: Mar  6 05:54:05 2025 GMT
            Not After : Mar  5 05:59:05 2026 GMT
        Subject: CN=6BC4A0C5AD823ADD26BBA91BED1AA9B451261925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c6:4f:25:33:61:85:58:96:14:ce:48:79:2a:
                    83:d8:63:27:e7:68:31:a4:d8:37:d7:7e:a6:54:06:
                    d0:a2:71:e7:65:26:7b:38:64:72:49:ef:2d:0e:73:
                    17:22:e3:58:0c:b9:12:69:d5:15:f7:a3:83:0e:2c:
                    82:87:48:ff:43:e8:90:5c:ab:df:5e:d4:50:fa:ae:
                    b1:a8:fc:3c:8a:35:ae:0b:83:5b:ca:36:97:3e:97:
                    ed:20:0e:19:73:b0:bf:57:bb:4e:69:34:e0:6b:38:
                    a1:e5:d0:0a:f1:63:a4:0f:ed:59:dc:45:39:4e:97:
                    6a:f5:c4:87:86:65:42:d1:d6:0e:cb:43:e6:ab:77:
                    f3:b4:b8:19:ae:57:5e:15:2c:b5:3f:0d:0d:6b:46:
                    e9:e7:58:51:78:62:ac:74:84:71:1f:f4:72:dd:fc:
                    e0:fc:06:c4:8a:11:1a:1a:ae:42:fc:8d:72:d8:b5:
                    bb:22:a6:ee:52:f5:13:29:54:d8:13:dc:1d:87:1a:
                    7e:67:2a:be:26:fd:4a:aa:ac:32:d4:bf:44:02:82:
                    b0:21:89:5c:64:0f:48:1c:e6:c4:70:e5:12:46:98:
                    90:b8:48:81:54:ec:16:28:9f:ad:e3:8f:ec:97:62:
                    ce:3d:c9:eb:d6:8a:29:7b:1f:f1:92:3d:23:91:09:
                    17:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C4:A0:C5:AD:82:3A:DD:26:BB:A9:1B:ED:1A:A9:B4:51:26:19:25
            X509v3 Authority Key Identifier:
                keyid:D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/323830343a333164343a3a2f33322d3438203d3e203533313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:a7:4a:cd:33:31:49:d5:12:ae:0d:34:e9:52:bd:ad:c7:6a:
         c0:de:6c:0b:85:e9:67:bd:53:6f:fd:7e:13:ab:b8:9b:82:1b:
         0e:cb:c6:a9:62:5a:57:f5:9b:52:12:3c:f8:12:0f:f8:fb:a0:
         ad:e8:4b:0d:4c:2e:90:4e:10:b5:f3:85:31:61:bc:90:cb:c0:
         99:17:78:f2:3b:e8:f3:94:17:bd:6f:10:1f:4c:ee:bd:88:74:
         b6:c1:85:52:9d:3b:d4:89:12:a5:9b:76:c7:8a:4d:4d:d0:76:
         f3:e8:d6:96:23:0a:70:fc:65:98:87:33:09:0a:41:65:a0:71:
         f6:2d:19:2a:41:15:62:da:a2:d5:4b:ee:cf:7d:a7:b8:b1:4e:
         4c:b2:f1:d1:eb:2b:53:1c:7d:c5:82:c3:54:6c:2a:d3:a1:41:
         11:25:4d:b0:a7:84:1e:ab:20:5c:d0:d2:de:fb:eb:83:3b:5b:
         46:56:b6:58:d7:96:1b:99:02:97:95:9f:aa:ef:24:10:e3:9c:
         bf:de:fd:d2:d5:d1:1a:b7:f1:37:6c:1f:a1:52:99:68:59:e1:
         b9:21:6b:99:f7:09:02:95:21:38:fa:e5:e7:3d:6d:06:49:3e:
         08:8b:f0:87:a0:e1:35:58:cd:e1:d5:c2:07:19:42:73:20:27:
         05:c3:f4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:32 2025 by rpki-client on console.sobornost.net