Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/323830343a3638343a313a3a2f34382d3438203d3e203533313037.roa
File:                     323830343a3638343a313a3a2f34382d3438203d3e203533313037.roa (raw, json)
Hash identifier:          a0L5lE/9cAs3xAxeOww41VIuKH2MAJObzoxqn6fltnc=
Subject key identifier:   58:4D:5A:72:E2:B5:87:BC:71:7A:73:02:96:1C:0C:F3:11:3B:CE:EE
Certificate issuer:       /CN=231C01A4C21B4CA32569E7A61F40CB611354C269
Certificate serial:       4616695A05B918E9F71C3677244894B32A3CAC6D
Authority key identifier: 23:1C:01:A4:C2:1B:4C:A3:25:69:E7:A6:1F:40:CB:61:13:54:C2:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C01A4C21B4CA32569E7A61F40CB611354C269.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/323830343a3638343a313a3a2f34382d3438203d3e203533313037.roa
Signing time:             Fri 25 Apr 2025 18:13:27 +0000
ROA not before:           Fri 25 Apr 2025 18:08:27 +0000
ROA not after:            Fri 24 Apr 2026 18:13:27 +0000
asID:                     53107
IP address blocks:        2804:684:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/231C01A4C21B4CA32569E7A61F40CB611354C269.crl
                          rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/231C01A4C21B4CA32569E7A61F40CB611354C269.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C01A4C21B4CA32569E7A61F40CB611354C269.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 04:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:16:69:5a:05:b9:18:e9:f7:1c:36:77:24:48:94:b3:2a:3c:ac:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231C01A4C21B4CA32569E7A61F40CB611354C269
        Validity
            Not Before: Apr 25 18:08:27 2025 GMT
            Not After : Apr 24 18:13:27 2026 GMT
        Subject: CN=584D5A72E2B587BC717A7302961C0CF3113BCEEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:db:ec:9c:43:94:55:83:0f:17:19:9a:31:c6:
                    36:b0:9c:dd:66:f4:6b:13:11:fd:3d:90:8f:52:bb:
                    9f:94:81:9d:0e:30:8a:32:fd:88:ff:62:17:f4:af:
                    13:93:e2:a6:db:1e:0e:14:a1:a0:16:e1:5c:cc:72:
                    f1:bb:8a:6a:12:87:b7:7d:03:79:ea:33:11:0e:ca:
                    5d:a9:05:12:7b:4d:a8:d0:48:4c:3b:89:bc:f6:4b:
                    5b:0c:c0:09:7b:cd:ff:62:36:c3:71:9d:d8:da:a8:
                    88:8d:8f:60:c2:63:50:c8:a0:51:8d:dd:d1:5f:89:
                    15:e1:e7:10:eb:36:71:d4:e2:41:53:dc:a4:7d:4a:
                    bf:2f:ed:b5:b3:81:ee:52:26:94:17:7c:7f:85:f5:
                    88:7f:e0:76:a7:e7:0d:e5:d7:9f:6d:79:ad:d1:e3:
                    d4:19:a1:64:4f:8e:fe:4b:c6:2a:e0:f3:8e:58:f7:
                    05:ea:d3:ca:33:a3:73:ff:4b:b8:3c:07:18:ad:fa:
                    25:6b:85:5c:a4:37:2b:89:f2:45:3e:90:b8:c3:8e:
                    72:56:6d:65:0d:4b:e0:f3:03:fa:4d:22:22:22:dc:
                    d9:e0:66:a6:a0:7b:7c:72:98:d8:f2:0a:b8:11:61:
                    14:01:60:60:7e:92:84:99:3b:a7:02:93:77:09:cd:
                    d2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4D:5A:72:E2:B5:87:BC:71:7A:73:02:96:1C:0C:F3:11:3B:CE:EE
            X509v3 Authority Key Identifier:
                keyid:23:1C:01:A4:C2:1B:4C:A3:25:69:E7:A6:1F:40:CB:61:13:54:C2:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/231C01A4C21B4CA32569E7A61F40CB611354C269.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C01A4C21B4CA32569E7A61F40CB611354C269.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/323830343a3638343a313a3a2f34382d3438203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:684:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:2d:89:2c:04:01:cf:14:ae:53:a1:67:41:35:2e:a2:b2:00:
         d3:ce:ff:8b:2e:dd:ff:06:ea:e9:e4:b8:5d:81:d2:02:df:48:
         9d:f0:6c:b0:60:3d:4c:28:f5:81:82:fd:a9:b3:52:ef:ab:39:
         12:93:cd:1d:59:33:ae:74:86:93:1c:d3:3a:07:6d:18:fe:66:
         49:f9:a3:9a:31:93:06:da:e3:47:0d:c7:27:5d:7a:d4:63:be:
         fa:18:78:fc:89:ee:ef:02:27:28:be:4e:79:5e:46:b9:9e:b3:
         2d:34:b1:a1:23:60:14:07:6e:53:95:9f:77:00:77:e2:32:77:
         2a:ac:3a:4f:c5:2b:dc:b0:5c:c7:70:97:92:27:11:1f:2a:db:
         1a:6d:bb:f8:b4:3f:72:c5:e5:6e:5f:31:e1:ce:6e:aa:74:12:
         a5:ff:3e:7e:8d:31:ef:76:d8:6a:12:61:13:b4:a4:7f:72:b5:
         1c:ee:80:e5:03:6a:e9:fd:a8:91:b7:c3:b5:cf:33:8e:8b:6d:
         6a:40:d5:cb:c6:1c:35:b8:c2:dc:b1:86:8c:99:90:53:c7:2e:
         b2:36:0a:18:e1:9f:5f:1c:d2:ef:38:e0:ef:a5:9e:79:68:43:
         93:b3:8a:c2:e8:74:33:1f:6f:50:ad:dc:20:93:40:7b:77:04:
         fe:a5:c4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:09 2025 by rpki-client on console.sobornost.net