Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/323830343a313736633a3a2f33322d313238203d3e20323633303938.roa
File:                     323830343a313736633a3a2f33322d313238203d3e20323633303938.roa (raw, json)
Hash identifier:          6urLe1qWg2v8eMe2oKgYt0ZAQWt9DYnjfH3T405VXdY=
Subject key identifier:   A4:C9:B4:F8:87:39:35:18:65:39:76:40:E4:0E:C7:5B:BC:DA:FD:77
Certificate issuer:       /CN=4329045FF5A88F6B7949093B6FE2C5D28A774010
Certificate serial:       4C9DA0F36EDC647B526854C2232D3CDB18BF320B
Authority key identifier: 43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/323830343a313736633a3a2f33322d313238203d3e20323633303938.roa
Signing time:             Thu 17 Apr 2025 18:03:45 +0000
ROA not before:           Thu 17 Apr 2025 17:58:45 +0000
ROA not after:            Thu 16 Apr 2026 18:03:45 +0000
asID:                     263098
IP address blocks:        2804:176c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.crl
                          rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:9d:a0:f3:6e:dc:64:7b:52:68:54:c2:23:2d:3c:db:18:bf:32:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4329045FF5A88F6B7949093B6FE2C5D28A774010
        Validity
            Not Before: Apr 17 17:58:45 2025 GMT
            Not After : Apr 16 18:03:45 2026 GMT
        Subject: CN=A4C9B4F88739351865397640E40EC75BBCDAFD77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3b:cf:84:08:3a:31:b8:2c:1c:05:e9:d5:e6:
                    47:2d:c6:90:09:d3:34:c3:65:78:a5:b7:56:b9:db:
                    ba:25:ad:86:51:50:ec:30:95:4a:84:40:92:90:c3:
                    39:46:bf:e4:ae:3b:e4:77:06:09:aa:6b:ae:14:fc:
                    ca:21:94:8c:a3:e7:a2:a9:71:10:f1:0a:e1:20:09:
                    fe:0f:72:47:30:bf:ef:43:6e:1c:42:ab:40:94:d5:
                    72:16:03:7d:ce:25:39:51:5d:e0:01:e8:9f:1f:00:
                    8b:92:05:df:61:42:95:ec:23:3c:62:d9:b2:19:87:
                    6e:8c:81:4f:68:e8:85:ad:b9:e8:8b:1e:0d:7b:0c:
                    40:a5:b4:f0:ae:61:3b:45:6f:66:1d:ad:65:68:34:
                    a1:c1:b8:e1:c8:4a:42:b3:ae:91:ec:b4:9c:5b:92:
                    00:20:a0:0f:25:6d:aa:b1:18:66:3a:cc:e9:d7:d2:
                    47:29:07:27:30:f5:58:4a:41:4a:c4:44:fa:e1:7c:
                    8f:dd:bc:68:3d:3d:85:de:8c:4b:88:b0:be:4b:1c:
                    09:15:20:93:c8:23:01:2b:c3:ec:95:83:4e:0c:fb:
                    42:32:64:62:30:44:a7:23:5f:62:9e:2b:8b:5d:f6:
                    13:ae:2b:6c:8b:7d:d7:dc:1c:cb:d9:ba:16:aa:17:
                    47:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C9:B4:F8:87:39:35:18:65:39:76:40:E4:0E:C7:5B:BC:DA:FD:77
            X509v3 Authority Key Identifier:
                keyid:43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/323830343a313736633a3a2f33322d313238203d3e20323633303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:176c::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:8c:51:08:f9:72:c0:88:2e:9b:7d:50:91:0f:83:76:61:69:
         dc:30:da:6d:15:e2:b7:16:21:6d:7b:0a:92:00:62:20:20:5e:
         0a:30:24:86:3e:dd:da:98:df:f9:e1:6a:d9:73:ce:c1:25:a2:
         fa:0e:e1:0c:bd:c1:ab:57:70:6b:16:35:93:5f:07:d1:79:ea:
         87:6b:e6:1e:54:e7:b3:1e:93:19:62:3b:19:28:ce:27:e9:14:
         7e:4a:d9:09:5c:44:ac:73:c8:8a:fe:2d:6a:73:c6:cb:da:73:
         9e:0b:3b:2c:53:ce:90:ac:31:f6:92:bb:d2:86:d4:de:df:be:
         0a:b6:b7:ed:11:83:40:97:c3:ae:ed:67:91:27:33:04:8a:2a:
         4e:11:0e:ef:2d:71:36:59:d7:87:43:27:ab:7f:55:04:ea:56:
         44:4a:b9:90:0c:90:d4:fe:a2:12:2b:69:9c:4d:7b:29:ce:e6:
         f3:c6:a5:32:d8:8d:7f:e0:b2:21:54:e8:e7:70:b4:f3:93:ff:
         06:d4:6d:18:c8:e8:43:4b:56:ed:7c:91:f5:c8:33:3c:46:d9:
         01:ee:c0:ee:5a:4c:1d:56:b8:51:b5:1f:9b:7c:fe:99:17:d4:
         27:aa:47:26:76:ad:54:33:30:3c:d9:93:83:f2:07:9f:65:7a:
         b4:37:91:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:44 2025 by rpki-client on console.sobornost.net