Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3a2f34382d3438203d3e20323639353636.roa
File:                     323830343a363638383a3a2f34382d3438203d3e20323639353636.roa (raw, json)
Hash identifier:          ldVnJ/FMhEESU3cQnlcAA7eXEgRdrFJ+4nyWzbZ7Z5I=
Subject key identifier:   F7:A0:D6:E6:F7:25:F7:19:37:70:54:30:D0:C6:DF:38:C3:40:F0:1F
Certificate issuer:       /CN=8B76B82695398F313AF28AE7E54FA9B6036F0B82
Certificate serial:       5B6CE94D7CCF79C50FF813B708B1D94DDA1C06F9
Authority key identifier: 8B:76:B8:26:95:39:8F:31:3A:F2:8A:E7:E5:4F:A9:B6:03:6F:0B:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3a2f34382d3438203d3e20323639353636.roa
Signing time:             Sat 19 Apr 2025 20:26:46 +0000
ROA not before:           Sat 19 Apr 2025 20:21:46 +0000
ROA not after:            Sat 18 Apr 2026 20:26:46 +0000
asID:                     269566
IP address blocks:        2804:6688::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 06:05:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6c:e9:4d:7c:cf:79:c5:0f:f8:13:b7:08:b1:d9:4d:da:1c:06:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B76B82695398F313AF28AE7E54FA9B6036F0B82
        Validity
            Not Before: Apr 19 20:21:46 2025 GMT
            Not After : Apr 18 20:26:46 2026 GMT
        Subject: CN=F7A0D6E6F725F71937705430D0C6DF38C340F01F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:08:db:01:8d:eb:ab:50:90:52:32:5a:36:7e:
                    fb:bd:97:1c:23:3a:af:c1:3c:19:e2:d1:3c:e7:17:
                    bd:f1:47:71:ac:e4:1f:9c:b8:da:47:cc:55:ae:e6:
                    52:3a:14:55:3f:5b:6d:17:f6:89:5a:6c:dd:9c:cf:
                    57:9d:f4:87:51:36:e8:68:27:af:8d:ef:d3:59:98:
                    f2:f3:cc:01:5a:bb:01:84:49:4d:d6:3c:15:1e:07:
                    09:9c:a6:33:59:c1:64:82:da:f3:d2:80:aa:4e:23:
                    78:43:b1:8a:2d:40:71:fe:4b:6a:de:e2:5a:01:06:
                    79:4b:01:44:c1:80:29:1d:7a:52:b8:68:3c:4e:78:
                    66:4b:60:fc:86:ab:56:39:1b:34:6b:50:81:27:e5:
                    85:3f:a7:c1:9c:1e:2f:e3:3b:5c:64:d6:b3:93:26:
                    23:a9:71:c5:12:99:7e:e9:64:05:9b:e8:13:72:97:
                    85:4c:08:38:28:a9:26:ea:b1:31:bb:d6:1b:f9:4d:
                    07:c9:18:e3:18:19:38:a9:50:26:c3:b7:c5:87:8d:
                    3f:e3:ba:de:19:82:9b:94:b3:da:14:de:c9:cd:ab:
                    22:4d:25:91:ff:9b:1a:55:6d:55:fd:16:5e:15:0d:
                    63:be:c2:48:b2:40:74:d3:de:ee:a1:38:1d:3c:cf:
                    14:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A0:D6:E6:F7:25:F7:19:37:70:54:30:D0:C6:DF:38:C3:40:F0:1F
            X509v3 Authority Key Identifier:
                keyid:8B:76:B8:26:95:39:8F:31:3A:F2:8A:E7:E5:4F:A9:B6:03:6F:0B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3a2f34382d3438203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6688::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:23:a1:80:6d:d5:48:60:a1:27:ac:d5:06:38:ba:d3:0c:6a:
         e0:3a:14:30:87:12:61:16:4b:78:88:19:59:3d:c1:52:5c:4c:
         96:14:e6:cb:47:48:ac:8f:a9:8a:fb:c0:34:a1:35:e6:5f:76:
         23:62:52:0f:f0:6f:49:27:8d:07:16:05:cf:34:27:57:61:93:
         81:dc:0b:fd:a4:b0:87:8c:12:dc:b4:7d:b1:58:3f:f4:56:94:
         bd:72:08:48:b2:9f:b8:c8:e2:dc:74:20:58:4e:b4:18:16:9b:
         e6:50:da:a8:f6:67:e9:08:62:3e:49:53:36:41:f5:2a:6f:dc:
         19:52:22:3e:de:3b:ea:8e:9c:7a:a8:dc:ff:09:6d:5b:6d:f6:
         18:b6:4a:ff:94:10:41:f7:75:43:6f:ce:a9:97:44:2a:67:eb:
         af:7f:72:7c:73:b5:b8:30:08:0d:78:79:69:66:b1:87:5f:d9:
         f2:fd:8b:6e:35:77:01:e0:b8:a3:5c:48:60:15:44:cd:f2:59:
         f2:6f:96:7b:95:53:d3:d5:60:90:2d:69:27:18:f5:1d:b6:45:
         1b:d1:31:0f:6d:06:81:1a:25:88:0b:ac:9e:32:a9:f3:f3:56:
         ae:86:96:1a:03:26:db:15:60:f8:7e:cd:c6:84:37:ec:a5:dc:
         2a:2f:6a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:06 2025 by rpki-client on console.sobornost.net