Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/1/323830343a313731303a3a2f33322d3335203d3e20323633313230.roa
File:                     323830343a313731303a3a2f33322d3335203d3e20323633313230.roa (raw, json)
Hash identifier:          gpMktx2b9zDNA6ouTzYn+fpjyuanP4S/jKNV5AwgoBM=
Subject key identifier:   B6:B9:2A:DE:01:79:C2:89:33:68:08:48:01:74:DD:8B:4A:3B:78:24
Certificate issuer:       /CN=934537D2006918539D4E641680E85DFE7A92F54E
Certificate serial:       1C8BED0104F0C0A6A817332C1B9D96576CC465CC
Authority key identifier: 93:45:37:D2:00:69:18:53:9D:4E:64:16:80:E8:5D:FE:7A:92:F5:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/934537D2006918539D4E641680E85DFE7A92F54E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/1/323830343a313731303a3a2f33322d3335203d3e20323633313230.roa
Signing time:             Wed 05 Mar 2025 19:00:07 +0000
ROA not before:           Wed 05 Mar 2025 18:55:07 +0000
ROA not after:            Wed 04 Mar 2026 19:00:07 +0000
asID:                     263120
IP address blocks:        2804:1710::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/1/934537D2006918539D4E641680E85DFE7A92F54E.crl
                          rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/1/934537D2006918539D4E641680E85DFE7A92F54E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/934537D2006918539D4E641680E85DFE7A92F54E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 20:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:8b:ed:01:04:f0:c0:a6:a8:17:33:2c:1b:9d:96:57:6c:c4:65:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934537D2006918539D4E641680E85DFE7A92F54E
        Validity
            Not Before: Mar  5 18:55:07 2025 GMT
            Not After : Mar  4 19:00:07 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:36:af:f0:c4:09:b8:0d:8a:1a:4c:e7:d1:e4:
                    25:d3:3a:09:ea:e9:18:7c:ec:5e:87:14:14:a6:10:
                    96:d5:90:f3:c3:bb:37:4b:35:17:a1:c7:f2:b0:ea:
                    1b:b3:66:37:cb:9f:89:57:8d:50:27:62:23:27:a5:
                    45:64:8a:61:3b:4b:a1:30:79:e9:a4:0e:e8:87:53:
                    8f:39:1f:3e:e0:34:c6:24:48:4d:33:53:96:d9:bf:
                    9a:26:37:20:0e:ac:86:35:99:35:b0:a6:60:0f:c3:
                    29:0a:55:c5:ef:6c:fc:cc:83:b9:4e:a6:21:7b:84:
                    fb:eb:4d:c4:e8:2b:ae:ce:f2:28:13:de:df:2a:c1:
                    70:7c:43:32:a1:20:61:d5:e7:64:93:9d:41:67:4b:
                    0d:ec:4b:dd:f0:1f:fd:10:20:8e:46:bc:a7:d9:36:
                    16:c6:0f:4e:da:a8:37:f4:92:6e:52:15:1e:ce:75:
                    08:c4:37:cb:60:bb:ee:08:7d:33:b8:de:5c:7c:be:
                    e8:e3:fa:e8:c6:80:6b:70:b7:25:dd:22:02:01:2e:
                    0f:bc:ef:56:1f:e9:ca:d1:d1:1b:43:7f:e2:0c:09:
                    d0:aa:d8:ac:98:9e:d3:a4:47:86:d7:1e:cb:eb:a9:
                    92:f7:7e:dd:52:04:70:01:35:83:e3:04:f4:e7:9d:
                    3e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B9:2A:DE:01:79:C2:89:33:68:08:48:01:74:DD:8B:4A:3B:78:24
            X509v3 Authority Key Identifier:
                keyid:93:45:37:D2:00:69:18:53:9D:4E:64:16:80:E8:5D:FE:7A:92:F5:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/1/934537D2006918539D4E641680E85DFE7A92F54E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/934537D2006918539D4E641680E85DFE7A92F54E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/1/323830343a313731303a3a2f33322d3335203d3e20323633313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1710::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:50:45:7e:3b:3d:e0:d8:b8:7e:4d:75:b5:2a:e3:7e:5e:02:
         da:c7:38:6e:d3:3e:7a:51:f9:0e:dc:11:56:ff:05:47:b4:88:
         4d:b5:3c:89:a3:2e:11:18:8d:c9:04:ae:aa:45:6a:56:6f:ea:
         00:d2:61:8f:32:25:47:54:3c:0b:7e:61:92:02:8b:9d:a4:d7:
         0f:18:76:d2:76:ea:05:49:52:41:e2:ed:82:6b:e3:99:10:de:
         61:c0:07:81:fa:aa:b9:92:67:04:6d:8c:be:9f:e5:47:55:17:
         a8:7c:31:21:0b:df:4e:7d:e1:28:d8:d9:b5:48:e8:e9:82:23:
         f0:5c:77:ab:f7:e0:78:41:71:b8:18:98:0a:df:c2:d1:35:13:
         1a:e9:09:30:75:87:f0:a6:82:04:e1:e7:21:c8:27:15:fb:e2:
         68:7c:f1:b5:57:d8:23:46:92:fa:a0:06:c2:de:8d:f3:2a:71:
         84:43:f6:b9:2a:7a:78:fc:df:3e:96:4c:7a:4b:ff:20:8c:cc:
         bb:28:7f:bd:2b:35:de:74:26:ef:3d:e8:09:af:e7:24:13:59:
         04:c4:22:6d:06:20:d7:5b:4c:c6:50:7c:89:85:2c:cc:13:1b:
         1c:82:d4:65:56:76:02:14:03:6a:d5:fe:0f:da:c0:0e:93:58:
         25:d6:a4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:24 2025 by rpki-client on console.sobornost.net