Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/323830343a366335633a3a2f33322d3438203d3e20323730343633.roa
File:                     323830343a366335633a3a2f33322d3438203d3e20323730343633.roa (raw, json)
Hash identifier:          ddsIbAZOJTh3+tjq6/SEWlRfbksO7q6EoJBCa4htuwg=
Subject key identifier:   A5:87:03:9F:D3:2E:23:DD:68:7C:F9:7B:64:B2:F0:3A:DB:DF:50:E3
Certificate issuer:       /CN=B882C1C7F7853B50794B0D38584713A2C1528F9D
Certificate serial:       407995C669F95207D10C1AD395B8DB99BE70685A
Authority key identifier: B8:82:C1:C7:F7:85:3B:50:79:4B:0D:38:58:47:13:A2:C1:52:8F:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B882C1C7F7853B50794B0D38584713A2C1528F9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/323830343a366335633a3a2f33322d3438203d3e20323730343633.roa
Signing time:             Wed 23 Apr 2025 17:31:06 +0000
ROA not before:           Wed 23 Apr 2025 17:26:06 +0000
ROA not after:            Wed 22 Apr 2026 17:31:06 +0000
asID:                     270463
IP address blocks:        2804:6c5c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.crl
                          rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B882C1C7F7853B50794B0D38584713A2C1528F9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:79:95:c6:69:f9:52:07:d1:0c:1a:d3:95:b8:db:99:be:70:68:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B882C1C7F7853B50794B0D38584713A2C1528F9D
        Validity
            Not Before: Apr 23 17:26:06 2025 GMT
            Not After : Apr 22 17:31:06 2026 GMT
        Subject: CN=A587039FD32E23DD687CF97B64B2F03ADBDF50E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4d:06:2b:3f:8f:2c:67:6a:dd:e2:3e:98:0d:
                    98:74:75:0d:28:43:7b:fa:13:86:12:88:24:f9:3d:
                    5c:37:01:0f:24:e1:8e:a0:74:39:76:04:bc:d6:11:
                    d7:cc:5f:a9:99:de:ce:88:7e:b2:74:04:e5:d6:0c:
                    be:4c:02:e6:b1:83:e1:2f:8c:8d:67:7e:44:79:05:
                    aa:f2:7f:41:15:47:55:6f:69:2e:f5:6c:ad:1a:bc:
                    bf:ef:17:5b:64:69:bf:b9:cf:47:0d:de:d8:1c:83:
                    bf:db:ac:04:cf:6a:4b:88:c1:cc:bb:ad:0e:36:7f:
                    14:1e:11:e8:cd:40:4e:01:07:31:3f:3c:f6:e9:cf:
                    a6:d2:bb:87:0b:b0:ad:2c:3a:19:34:19:15:a5:74:
                    9a:b0:be:5a:b4:da:d5:c2:e9:e3:1e:32:a4:ca:44:
                    6e:40:99:71:33:a7:b8:02:68:d4:20:25:70:2b:1c:
                    44:68:3c:aa:d7:86:c1:a7:43:93:62:91:ec:42:1e:
                    d5:e3:11:8f:2d:90:a6:2f:65:29:2b:52:75:dc:5a:
                    ef:ae:6d:f1:65:a3:a0:86:2e:79:9d:f3:26:8b:bb:
                    09:02:ea:61:7b:79:ea:7f:67:b5:22:82:26:97:df:
                    81:41:91:c3:4f:03:8c:8d:47:f2:b7:12:b1:44:fb:
                    ed:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:87:03:9F:D3:2E:23:DD:68:7C:F9:7B:64:B2:F0:3A:DB:DF:50:E3
            X509v3 Authority Key Identifier:
                keyid:B8:82:C1:C7:F7:85:3B:50:79:4B:0D:38:58:47:13:A2:C1:52:8F:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B882C1C7F7853B50794B0D38584713A2C1528F9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/323830343a366335633a3a2f33322d3438203d3e20323730343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:b4:d9:ab:45:e9:5e:55:06:63:a3:69:4d:db:7f:c0:1b:4f:
         1e:13:97:2a:1c:3d:6e:6c:ff:5d:93:97:0a:c7:a0:0b:b7:ac:
         4d:b6:ca:4f:42:91:c0:d0:0a:50:04:61:5b:b2:a5:a5:11:48:
         73:72:89:dd:80:cf:ce:8d:35:af:13:7e:11:ad:83:ba:84:f5:
         ce:2d:1c:4a:95:e7:90:e1:85:bf:6b:f6:cd:c9:66:5a:62:5c:
         a2:ea:f4:f6:7e:59:4e:46:17:b1:e3:13:f2:af:47:fe:e0:90:
         e6:32:ab:5d:b6:ba:6b:99:03:15:77:f3:30:67:63:90:b5:75:
         f9:7b:26:c2:2e:b4:d6:cf:d4:fd:6f:aa:45:cd:90:94:fa:e0:
         ab:38:41:d2:cf:c6:28:9f:a1:00:17:e4:2a:be:97:cf:ec:30:
         19:de:9e:80:5e:a2:2d:64:ef:e7:be:61:ea:8e:81:1c:30:12:
         a3:0f:8c:4b:3c:e0:14:a9:e2:89:61:1a:f0:29:42:04:e9:97:
         f6:92:67:52:b6:43:c8:4f:a8:c9:df:9d:f6:26:8f:fd:e0:2c:
         4d:56:ac:27:b6:53:e0:14:79:2e:c6:b7:f4:00:be:bf:56:9e:
         d0:b3:1e:7e:ee:36:c9:98:24:95:f9:98:65:17:81:62:d5:50:
         cf:dd:45:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:08 2025 by rpki-client on console.sobornost.net