Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/323830343a346632343a3a2f33322d3332203d3e20323638333037.roa
File:                     323830343a346632343a3a2f33322d3332203d3e20323638333037.roa (raw, json)
Hash identifier:          qEzv17rM+XES6/wodcNF76C7jyTtbPZB+LP3WCeG0JA=
Subject key identifier:   41:1C:23:CB:43:89:F8:66:E8:2C:EB:3C:E8:47:82:C8:1C:59:AB:09
Certificate issuer:       /CN=06F66D58259F2CB3C0146BED5F4B1E79A86988F2
Certificate serial:       66A1C35EF05009CA8B55FDF8DDFEE96F23BFDDE8
Authority key identifier: 06:F6:6D:58:25:9F:2C:B3:C0:14:6B:ED:5F:4B:1E:79:A8:69:88:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/323830343a346632343a3a2f33322d3332203d3e20323638333037.roa
Signing time:             Fri 18 Apr 2025 12:57:50 +0000
ROA not before:           Fri 18 Apr 2025 12:52:50 +0000
ROA not after:            Fri 17 Apr 2026 12:57:50 +0000
asID:                     268307
IP address blocks:        2804:4f24::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.crl
                          rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 11:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a1:c3:5e:f0:50:09:ca:8b:55:fd:f8:dd:fe:e9:6f:23:bf:dd:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06F66D58259F2CB3C0146BED5F4B1E79A86988F2
        Validity
            Not Before: Apr 18 12:52:50 2025 GMT
            Not After : Apr 17 12:57:50 2026 GMT
        Subject: CN=411C23CB4389F866E82CEB3CE84782C81C59AB09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:29:b9:22:3a:00:0b:70:2e:21:65:04:eb:
                    f5:b8:b3:53:cf:fe:47:67:23:33:70:0c:8d:62:9d:
                    3f:1b:6a:d6:e2:08:9e:f1:ed:15:7a:92:0a:02:20:
                    0e:1e:8e:d2:e2:60:ef:89:52:e7:29:ca:e9:87:75:
                    59:aa:ac:da:6a:3b:51:ca:e0:7e:0c:ec:c9:23:90:
                    ba:71:1f:9d:d1:8a:51:04:8e:0f:f3:79:dc:80:24:
                    6d:d0:63:9e:6a:d6:a9:eb:f8:f5:21:50:0d:43:02:
                    11:d5:c4:53:4e:e7:6d:5a:b4:ef:6f:ec:fb:15:43:
                    bc:e5:a1:c5:58:87:d9:54:cc:0c:df:17:14:e6:d0:
                    5b:e6:dd:9b:55:5a:1d:d6:aa:65:c0:8b:59:09:7f:
                    38:7e:ad:6e:30:03:2e:57:d2:fa:16:f4:07:4d:ee:
                    0f:8c:2f:28:6d:e4:98:cb:6b:9f:d6:cf:82:8e:1a:
                    8c:aa:82:60:58:21:9d:d7:f8:20:f7:54:af:99:52:
                    cd:d8:c3:bf:1c:1d:d2:4e:d6:bf:1d:43:d7:20:df:
                    77:05:ca:3b:ec:74:fc:4b:e4:a8:2e:f1:3f:45:0c:
                    21:41:17:0c:23:4c:1e:3c:75:3a:30:35:9b:4d:b5:
                    dd:9f:b0:1a:1f:c9:95:74:0a:9b:e4:bd:42:a3:f4:
                    70:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1C:23:CB:43:89:F8:66:E8:2C:EB:3C:E8:47:82:C8:1C:59:AB:09
            X509v3 Authority Key Identifier:
                keyid:06:F6:6D:58:25:9F:2C:B3:C0:14:6B:ED:5F:4B:1E:79:A8:69:88:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/323830343a346632343a3a2f33322d3332203d3e20323638333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f24::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:c6:5f:6b:4b:73:48:f1:8e:e2:f9:da:1b:d3:c1:74:55:95:
         a2:a3:e1:6e:e5:2e:68:30:ca:78:f1:20:6e:dd:04:b7:9e:80:
         a3:17:74:f3:83:7d:75:1f:5e:d2:a4:bf:27:17:4b:85:0d:24:
         42:de:e2:d4:3f:03:13:24:bb:9e:bd:06:97:3c:9b:93:9a:86:
         df:4e:1c:9c:e6:23:2b:40:6c:5e:dc:cf:fe:56:00:fd:06:a1:
         4a:20:eb:65:20:72:aa:87:41:04:12:2a:cb:01:35:16:4d:da:
         96:8a:11:cb:25:93:1b:12:8d:43:9b:a2:bb:e3:1e:45:71:19:
         ae:05:3d:c3:1a:28:62:ec:dc:a7:5c:c5:f5:89:d5:14:90:b1:
         97:02:91:33:85:32:4b:2a:cc:8c:74:f7:2e:0c:10:19:0b:d8:
         d6:eb:9f:bf:51:c3:28:b2:3b:cd:1b:d6:a9:b7:72:72:41:35:
         42:62:74:a0:93:8e:82:13:30:35:9c:09:1d:ed:09:73:11:52:
         01:46:bd:34:ae:c3:9b:17:2c:71:8f:b3:37:76:27:fd:82:1a:
         9c:93:c5:a6:00:47:94:97:63:a0:4a:09:92:17:5b:9f:e2:bf:
         ac:eb:5a:76:37:a1:09:13:9e:a9:77:7f:ef:69:69:c5:05:b5:
         a7:ff:ed:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:01 2025 by rpki-client on console.sobornost.net