Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a3a2f33332d3333203d3e20323636333735.roa
File:                     323830343a333664343a3a2f33332d3333203d3e20323636333735.roa (raw, json)
Hash identifier:          b5YnE1uiagOjHyZg436ksupLs4tbAcf2wPjLVdgfpRg=
Subject key identifier:   BA:EA:BA:9B:A2:F8:16:C4:41:AF:CF:0F:87:B8:93:63:D8:C9:94:86
Certificate issuer:       /CN=D6A90BECE8B023958D9E4927F946B5C29F86D4EA
Certificate serial:       6B5C17C70198F455C5A0B19AC3CC97EEF2E6770E
Authority key identifier: D6:A9:0B:EC:E8:B0:23:95:8D:9E:49:27:F9:46:B5:C2:9F:86:D4:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a3a2f33332d3333203d3e20323636333735.roa
Signing time:             Mon 07 Apr 2025 17:28:00 +0000
ROA not before:           Mon 07 Apr 2025 17:23:00 +0000
ROA not after:            Mon 06 Apr 2026 17:28:00 +0000
asID:                     266375
IP address blocks:        2804:36d4::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5c:17:c7:01:98:f4:55:c5:a0:b1:9a:c3:cc:97:ee:f2:e6:77:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6A90BECE8B023958D9E4927F946B5C29F86D4EA
        Validity
            Not Before: Apr  7 17:23:00 2025 GMT
            Not After : Apr  6 17:28:00 2026 GMT
        Subject: CN=BAEABA9BA2F816C441AFCF0F87B89363D8C99486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ec:6e:be:b3:fc:f6:60:59:d7:1c:e4:79:ac:
                    90:f6:27:b8:50:c0:4a:0b:d8:26:b4:8f:ed:db:30:
                    eb:0d:5f:b4:30:a1:68:30:c2:0b:90:3a:16:ec:b4:
                    75:a7:19:f1:e5:93:95:6d:9a:b9:c6:f9:10:bc:e5:
                    f6:d9:f3:62:4f:56:50:3f:92:5c:41:dd:10:56:41:
                    7a:bf:ca:58:f8:f5:1e:d6:62:2e:a8:4a:42:dd:50:
                    34:9d:24:61:d1:94:52:12:53:d3:29:80:ec:07:ad:
                    aa:ed:de:46:f9:99:44:92:ec:53:1a:8a:da:66:7f:
                    c2:bd:1f:1b:49:49:41:ae:67:10:4a:40:05:18:eb:
                    64:83:d0:e0:8f:19:16:a2:5b:79:e3:17:4f:1b:77:
                    2b:1b:24:70:3e:9f:e0:1c:a4:0e:9f:37:0f:8a:bd:
                    6f:2c:31:21:c9:a4:32:93:0b:82:8f:64:1d:76:2c:
                    03:c7:e6:d2:da:1f:bb:f1:a9:4f:dc:c5:e6:ca:ee:
                    ee:f3:12:3d:af:29:fe:29:d7:98:a1:64:7f:27:98:
                    34:75:4c:ff:e8:a5:74:26:c7:67:53:3a:c8:26:e4:
                    76:15:c1:54:3d:86:df:2e:d5:8d:0c:b7:82:8e:f5:
                    e4:6e:77:12:0f:97:32:5d:16:38:ae:2b:7c:5b:64:
                    b8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EA:BA:9B:A2:F8:16:C4:41:AF:CF:0F:87:B8:93:63:D8:C9:94:86
            X509v3 Authority Key Identifier:
                keyid:D6:A9:0B:EC:E8:B0:23:95:8D:9E:49:27:F9:46:B5:C2:9F:86:D4:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a3a2f33332d3333203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36d4::/33

    Signature Algorithm: sha256WithRSAEncryption
         97:f2:c5:aa:27:4c:50:19:c1:41:08:02:d4:bf:cb:4e:19:d5:
         fa:46:50:40:4c:19:c3:c1:bd:ff:2d:76:b1:fe:b8:2f:a6:4d:
         f5:5f:58:ed:49:38:43:13:48:9f:56:58:84:0b:b1:2e:48:64:
         6b:a6:6f:83:50:6e:4c:21:fa:8c:09:5e:bb:9b:3c:39:3d:4c:
         48:9b:f1:1a:53:a9:6a:89:54:83:93:80:4d:59:6c:18:8b:fe:
         4f:36:18:29:ce:7d:e2:af:38:64:bf:c8:73:f5:c1:52:65:4a:
         7e:61:6a:ee:10:79:f8:2d:7c:a1:9a:de:1b:f3:80:58:1d:f9:
         06:4f:2a:47:65:c0:95:f2:11:98:f1:60:25:61:61:c4:75:ef:
         63:73:e5:77:9e:5b:57:1e:9d:06:fe:21:a0:26:5e:47:81:c6:
         b3:5f:0e:2f:15:67:9c:a2:68:87:60:b5:30:d3:12:5d:6d:1a:
         b2:56:98:b6:ba:66:74:50:81:10:13:04:13:a5:2a:0d:e5:14:
         1e:10:0a:0c:a7:0d:16:20:1c:d3:e6:77:e2:f8:65:27:d9:ce:
         3d:c4:1e:c7:a7:e7:47:d6:57:54:e9:59:86:6f:ca:d8:85:91:
         51:76:8b:0a:10:f7:69:92:17:eb:3e:fd:e2:65:d6:3d:90:8c:
         02:71:4e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:56 2025 by rpki-client on console.sobornost.net