Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8FnCKSGhj2z1dTBBrWHFxTEVVw1ZKhFQPYJPnmBw4cj/1/323830343a373731303a3a2f33322d3438203d3e20323731313532.roa
File:                     323830343a373731303a3a2f33322d3438203d3e20323731313532.roa (raw, json)
Hash identifier:          0UZfH1zxrXVvT5YO+CCvyV9fPWkY5lSqzjQKtgJKfkk=
Subject key identifier:   7E:73:B6:67:6E:6C:77:8A:36:4B:F4:87:89:7A:59:B3:56:6C:E7:55
Certificate issuer:       /CN=DBC91D9240E3E033B5E4C0F07A164AE264F74272
Certificate serial:       614208CF692C7A71687EFED429D856600C001824
Authority key identifier: DB:C9:1D:92:40:E3:E0:33:B5:E4:C0:F0:7A:16:4A:E2:64:F7:42:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC91D9240E3E033B5E4C0F07A164AE264F74272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8FnCKSGhj2z1dTBBrWHFxTEVVw1ZKhFQPYJPnmBw4cj/1/323830343a373731303a3a2f33322d3438203d3e20323731313532.roa
Signing time:             Fri 07 Mar 2025 01:52:30 +0000
ROA not before:           Fri 07 Mar 2025 01:47:30 +0000
ROA not after:            Fri 06 Mar 2026 01:52:30 +0000
asID:                     271152
IP address blocks:        2804:7710::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8FnCKSGhj2z1dTBBrWHFxTEVVw1ZKhFQPYJPnmBw4cj/1/DBC91D9240E3E033B5E4C0F07A164AE264F74272.crl
                          rsync://rpki-repo.registro.br/repo/E8FnCKSGhj2z1dTBBrWHFxTEVVw1ZKhFQPYJPnmBw4cj/1/DBC91D9240E3E033B5E4C0F07A164AE264F74272.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC91D9240E3E033B5E4C0F07A164AE264F74272.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 21:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:42:08:cf:69:2c:7a:71:68:7e:fe:d4:29:d8:56:60:0c:00:18:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC91D9240E3E033B5E4C0F07A164AE264F74272
        Validity
            Not Before: Mar  7 01:47:30 2025 GMT
            Not After : Mar  6 01:52:30 2026 GMT
        Subject: CN=7E73B6676E6C778A364BF487897A59B3566CE755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:39:54:9c:84:6b:9f:c0:a9:48:25:fb:36:
                    3d:85:fc:fe:99:c6:e0:5c:24:4d:b1:d0:19:fc:2e:
                    57:54:45:9e:b7:1b:97:ce:ef:e7:30:0d:91:55:13:
                    fe:9f:d0:44:60:c7:28:dc:3f:28:46:94:7d:dc:90:
                    0b:b9:00:2f:13:f9:40:94:89:2a:14:08:6d:95:8d:
                    a5:7e:29:76:f9:4c:1f:8c:c1:e2:79:12:45:e1:5f:
                    29:e5:3c:6c:82:cd:ef:48:11:55:25:c6:2f:0e:0e:
                    d0:29:00:88:58:8d:a8:ac:c4:c6:bf:a4:df:0a:e3:
                    b0:8b:9d:d3:a1:11:f6:56:7a:25:3c:14:db:dd:db:
                    66:a9:40:31:5c:0c:27:6b:80:b8:41:71:76:1d:2d:
                    b3:32:1f:50:d0:8b:6e:13:e6:7b:f6:af:8a:43:df:
                    31:57:05:0f:cf:ab:d6:06:35:cb:90:d8:57:98:4e:
                    41:56:80:01:75:17:2b:ec:cc:69:cf:b2:2d:cb:9f:
                    21:be:b6:dd:47:56:6e:d4:98:a8:cc:0f:89:c7:66:
                    e4:52:67:da:f1:91:96:58:36:c7:c2:b6:35:2f:0b:
                    84:b5:79:4f:b2:07:36:5a:48:ba:62:a4:fd:51:a5:
                    db:2f:03:f6:bb:98:ff:ee:f3:3f:d7:6c:2b:b2:b3:
                    5c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:73:B6:67:6E:6C:77:8A:36:4B:F4:87:89:7A:59:B3:56:6C:E7:55
            X509v3 Authority Key Identifier:
                keyid:DB:C9:1D:92:40:E3:E0:33:B5:E4:C0:F0:7A:16:4A:E2:64:F7:42:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8FnCKSGhj2z1dTBBrWHFxTEVVw1ZKhFQPYJPnmBw4cj/1/DBC91D9240E3E033B5E4C0F07A164AE264F74272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC91D9240E3E033B5E4C0F07A164AE264F74272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8FnCKSGhj2z1dTBBrWHFxTEVVw1ZKhFQPYJPnmBw4cj/1/323830343a373731303a3a2f33322d3438203d3e20323731313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7710::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:1e:1b:fd:7a:d7:10:cb:f3:a4:f3:42:de:30:60:73:c5:6d:
         f5:22:76:7f:b0:fd:bc:80:ed:dc:3f:43:e0:cb:28:ad:ea:1b:
         40:f4:a1:e9:12:34:b1:d4:7d:ec:a0:ff:08:7d:20:2f:66:e6:
         b4:18:f1:54:9c:c3:98:3a:a9:7a:c6:c2:2b:4d:51:5b:3a:45:
         54:8c:b0:ad:81:ca:47:19:05:ce:8b:1e:4c:e3:31:10:8b:80:
         0e:4f:b1:24:82:fd:4f:14:d1:47:af:35:90:d9:27:5d:af:86:
         6c:22:97:68:1e:fb:c7:22:34:cf:9e:45:99:5b:0a:fc:7c:a2:
         9a:06:cf:eb:6a:bd:ee:d5:dc:80:5d:cd:c7:25:74:74:13:f2:
         e8:e9:67:d9:53:57:fe:4a:50:02:97:87:f3:31:ed:9b:9e:91:
         3f:3d:aa:81:68:d6:97:ee:10:ce:39:b5:23:5c:4b:70:03:8f:
         d1:93:ac:ea:c6:a9:f3:05:2a:69:97:b5:09:2d:0b:73:39:7e:
         4f:23:19:2b:18:13:e2:3d:8b:84:9e:d8:f8:d5:99:0d:fe:00:
         c6:cd:06:85:21:59:06:d7:0b:c0:7e:b4:c0:3b:97:42:bb:a6:
         8b:d9:6e:25:71:c8:d5:04:47:1b:28:e3:86:4f:54:c4:c2:61:
         3d:1b:0e:54
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUYUIIz2ksenFofv7UKdhWYAwAGCQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJDOTFEOTI0MEUzRTAzM0I1RTRDMEYwN0ExNjRBRTI2
NEY3NDI3MjAeFw0yNTAzMDcwMTQ3MzBaFw0yNjAzMDYwMTUyMzBaMDMxMTAvBgNV
BAMTKDdFNzNCNjY3NkU2Qzc3OEEzNjRCRjQ4Nzg5N0E1OUIzNTY2Q0U3NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuIzlUnIRrn8CpSCX7Nj2F/P6Z
xuBcJE2x0Bn8LldURZ63G5fO7+cwDZFVE/6f0ERgxyjcPyhGlH3ckAu5AC8T+UCU
iSoUCG2VjaV+KXb5TB+MweJ5EkXhXynlPGyCze9IEVUlxi8ODtApAIhYjaisxMa/
pN8K47CLndOhEfZWeiU8FNvd22apQDFcDCdrgLhBcXYdLbMyH1DQi24T5nv2r4pD
3zFXBQ/Pq9YGNcuQ2FeYTkFWgAF1FyvszGnPsi3LnyG+tt1HVm7UmKjMD4nHZuRS
Z9rxkZZYNsfCtjUvC4S1eU+yBzZaSLpipP1RpdsvA/a7mP/u8z/XbCuys1z5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUfnO2Z25sd4o2S/SHiXpZs1Zs51UwHwYDVR0j
BBgwFoAU28kdkkDj4DO15MDwehZK4mT3QnIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRThGbkNLU0doajJ6MWRUQkJyV0hGeFRFVlZ3MVpLaEZRUFlKUG5tQnc0
Y2ovMS9EQkM5MUQ5MjQwRTNFMDMzQjVFNEMwRjA3QTE2NEFFMjY0Rjc0MjcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCQzkxRDkyNDBFM0UwMzNC
NUU0QzBGMDdBMTY0QUUyNjRGNzQyNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U4Rm5DS1NHaGoyejFkVEJCcldIRnhURVZWdzFaS2hGUVBZSlBubUJ3NGNqLzEv
MzIzODMwMzQzYTM3MzczMTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzEzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR3EDANBgkqhkiG9w0BAQsFAAOCAQEAbh4b/XrX
EMvzpPNC3jBgc8Vt9SJ2f7D9vIDt3D9D4MsoreobQPSh6RI0sdR97KD/CH0gL2bm
tBjxVJzDmDqpesbCK01RWzpFVIywrYHKRxkFzoseTOMxEIuADk+xJIL9TxTRR681
kNknXa+GbCKXaB77xyI0z55FmVsK/HyimgbP62q97tXcgF3NxyV0dBPy6Oln2VNX
/kpQApeH8zHtm56RPz2qgWjWl+4Qzjm1I1xLcAOP0ZOs6sap8wUqaZe1CS0Lczl+
TyMZKxgT4j2LhJ7Y+NWZDf4Axs0GhSFZBtcLwH60wDuXQrumi9luJXHI1QRHGyjj
hk9UxMJhPRsOVA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:25 2025 by rpki-client on console.sobornost.net