Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/323830343a373436633a383030303a3a2f33342d3334203d3e20323730393830.roa
File:                     323830343a373436633a383030303a3a2f33342d3334203d3e20323730393830.roa (raw, json)
Hash identifier:          UaGY3xBPp12fn0cro0Q7O6VDWzclIa/kXaHQQqgdAps=
Subject key identifier:   DA:F4:9F:6D:4D:9E:70:53:88:04:18:F8:FE:D5:AC:4C:67:BC:0F:49
Certificate issuer:       /CN=E8C5040EBFAB6D8F720040E80E512CBD965591B2
Certificate serial:       50B4C6C02F506018AAF775AA7A8B93673DFAA8D5
Authority key identifier: E8:C5:04:0E:BF:AB:6D:8F:72:00:40:E8:0E:51:2C:BD:96:55:91:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C5040EBFAB6D8F720040E80E512CBD965591B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/323830343a373436633a383030303a3a2f33342d3334203d3e20323730393830.roa
Signing time:             Mon 07 Apr 2025 21:00:22 +0000
ROA not before:           Mon 07 Apr 2025 20:55:22 +0000
ROA not after:            Mon 06 Apr 2026 21:00:22 +0000
asID:                     270980
IP address blocks:        2804:746c:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/E8C5040EBFAB6D8F720040E80E512CBD965591B2.crl
                          rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/E8C5040EBFAB6D8F720040E80E512CBD965591B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C5040EBFAB6D8F720040E80E512CBD965591B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:06:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b4:c6:c0:2f:50:60:18:aa:f7:75:aa:7a:8b:93:67:3d:fa:a8:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C5040EBFAB6D8F720040E80E512CBD965591B2
        Validity
            Not Before: Apr  7 20:55:22 2025 GMT
            Not After : Apr  6 21:00:22 2026 GMT
        Subject: CN=DAF49F6D4D9E7053880418F8FED5AC4C67BC0F49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0f:96:75:70:f1:b3:2e:da:45:13:53:11:15:
                    d9:cd:30:6d:df:c1:e3:0a:c3:3a:1c:86:64:3a:a6:
                    95:84:21:e3:a2:60:45:6d:54:a9:0d:74:4c:20:a5:
                    ec:01:24:7a:71:81:ea:0d:7d:fb:e8:e8:72:c2:5a:
                    06:43:d0:c9:64:96:40:a0:cc:0f:ea:13:c4:bb:4e:
                    6b:2f:2c:25:68:b1:1c:55:f8:31:29:5d:73:bc:fa:
                    b0:dc:46:76:c3:a5:a3:1f:ce:ba:1b:4f:b0:54:71:
                    90:72:ff:67:e0:a6:51:bf:aa:0c:9c:52:f1:96:67:
                    e9:94:19:cc:17:1e:6c:c9:7b:9c:5d:4a:cd:f2:ea:
                    13:c4:c6:d0:e2:1b:5e:ab:66:c4:5c:a5:90:52:6a:
                    45:2a:66:ee:9b:5a:54:13:7e:78:85:4b:e6:3f:60:
                    97:35:2c:a4:06:2c:3c:fe:3e:0a:d1:be:f0:f1:a4:
                    93:23:4a:d1:fd:d3:89:49:88:cd:a6:aa:0a:e4:47:
                    17:03:a3:b8:5c:6d:00:76:dd:36:10:31:2a:26:cb:
                    5c:21:c8:eb:1f:27:fe:8e:01:d7:81:88:11:08:d2:
                    69:4f:67:7b:37:05:43:20:97:77:e3:ab:fc:2d:b9:
                    bc:ca:65:91:df:60:8f:02:80:cb:c1:c2:c2:57:a5:
                    b0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F4:9F:6D:4D:9E:70:53:88:04:18:F8:FE:D5:AC:4C:67:BC:0F:49
            X509v3 Authority Key Identifier:
                keyid:E8:C5:04:0E:BF:AB:6D:8F:72:00:40:E8:0E:51:2C:BD:96:55:91:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/E8C5040EBFAB6D8F720040E80E512CBD965591B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C5040EBFAB6D8F720040E80E512CBD965591B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/323830343a373436633a383030303a3a2f33342d3334203d3e20323730393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:746c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1b:b9:39:ac:c5:c9:94:c8:a1:9f:86:7c:67:cb:fc:c5:99:09:
         91:07:79:4f:a3:f9:58:0f:11:3d:59:b3:f4:24:d8:4b:2f:02:
         68:fa:09:ad:90:0b:ed:fb:eb:c0:01:81:e0:c8:ab:0d:35:29:
         58:b4:96:34:a9:41:22:8a:73:7e:22:11:04:7d:08:a6:bd:ac:
         79:71:88:1e:d6:f2:0a:91:08:90:fb:87:e1:46:30:45:68:68:
         a8:8c:e8:80:1b:e3:b2:08:26:83:12:6c:d4:d3:e0:e9:dd:27:
         ba:df:92:20:96:d6:28:83:a6:1e:7e:56:a2:5c:79:c1:5b:fe:
         0a:f2:08:fc:3f:4c:5f:15:7a:8b:dc:4d:59:1b:9f:3f:dd:78:
         1b:4f:bd:15:c9:d3:f2:45:d6:f8:22:7b:10:a1:68:e7:4a:13:
         93:59:f2:cc:3e:c3:74:11:ec:a1:fd:6d:8c:60:f3:43:35:78:
         25:70:70:d3:29:d1:e2:1e:67:4e:91:27:b0:52:14:00:94:12:
         2c:cd:de:e5:8d:be:ff:c6:1f:65:77:5b:b0:af:38:e9:e9:55:
         40:89:62:26:e1:88:27:be:69:5e:21:b5:06:d9:7a:b6:08:9e:
         b0:db:74:88:49:7f:ef:38:76:71:82:dc:ad:e5:a5:d4:07:00:
         d5:ad:50:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:55 2025 by rpki-client on console.sobornost.net