Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/1/323830343a366530303a3a2f33322d3438203d3e20323730353639.roa
File:                     323830343a366530303a3a2f33322d3438203d3e20323730353639.roa (raw, json)
Hash identifier:          2aA24C47Hn+VN2F7GO+zMnS0TkeTngTB2VSyoJ/yuUc=
Subject key identifier:   BC:AE:4A:E2:98:DB:14:A9:BC:96:0A:41:F3:DE:37:FC:9D:1C:AF:82
Certificate issuer:       /CN=072B7E06D438A56222390C3DCE8D0145589533BD
Certificate serial:       14307C67587AD000332601C57C30E937A42B1364
Authority key identifier: 07:2B:7E:06:D4:38:A5:62:22:39:0C:3D:CE:8D:01:45:58:95:33:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072B7E06D438A56222390C3DCE8D0145589533BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/1/323830343a366530303a3a2f33322d3438203d3e20323730353639.roa
Signing time:             Thu 06 Mar 2025 09:40:30 +0000
ROA not before:           Thu 06 Mar 2025 09:35:30 +0000
ROA not after:            Thu 05 Mar 2026 09:40:30 +0000
asID:                     270569
IP address blocks:        2804:6e00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/1/072B7E06D438A56222390C3DCE8D0145589533BD.crl
                          rsync://rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/1/072B7E06D438A56222390C3DCE8D0145589533BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072B7E06D438A56222390C3DCE8D0145589533BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:30:7c:67:58:7a:d0:00:33:26:01:c5:7c:30:e9:37:a4:2b:13:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072B7E06D438A56222390C3DCE8D0145589533BD
        Validity
            Not Before: Mar  6 09:35:30 2025 GMT
            Not After : Mar  5 09:40:30 2026 GMT
        Subject: CN=BCAE4AE298DB14A9BC960A41F3DE37FC9D1CAF82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:41:2b:f5:72:21:b2:0a:c2:93:29:32:91:
                    f5:d2:7b:76:21:7d:05:a3:f0:84:86:8f:8f:cc:1a:
                    21:2a:5b:79:a8:cf:3b:7a:4d:d0:05:f3:d2:59:c9:
                    3b:d3:d2:2f:f0:8f:08:4b:fd:70:a9:d8:43:2d:58:
                    da:ca:06:0a:89:09:3f:3d:20:06:69:e5:dd:1e:29:
                    92:33:15:1a:ad:f0:12:dd:d6:93:55:c8:b3:97:18:
                    ae:a8:4d:fe:81:ed:70:9e:c7:65:cb:ac:1c:14:54:
                    08:fa:dd:f0:77:84:a2:a3:78:e1:57:d6:50:1b:0e:
                    8f:b3:7c:65:0b:9f:62:5a:bc:71:a0:d8:31:e3:8d:
                    1c:a5:42:d0:f0:40:89:28:30:4b:ca:26:48:9b:c7:
                    88:06:a4:73:9a:c1:20:8f:15:e9:08:b8:b9:45:e2:
                    5d:59:12:dd:6a:85:68:84:51:35:c0:1b:9e:89:7b:
                    62:c4:1e:73:7c:dd:c5:02:47:11:d1:bc:44:8b:aa:
                    cf:e4:b4:f9:0d:27:d0:d3:4f:08:54:1a:98:fb:86:
                    31:93:05:96:f1:33:01:04:52:b1:8d:df:62:d2:08:
                    50:c9:cd:0b:b5:69:b9:ee:5b:d7:a1:f7:4c:ea:c6:
                    e9:bd:f9:53:de:d2:48:27:ff:4e:c3:d5:76:ad:2e:
                    22:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AE:4A:E2:98:DB:14:A9:BC:96:0A:41:F3:DE:37:FC:9D:1C:AF:82
            X509v3 Authority Key Identifier:
                keyid:07:2B:7E:06:D4:38:A5:62:22:39:0C:3D:CE:8D:01:45:58:95:33:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/1/072B7E06D438A56222390C3DCE8D0145589533BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072B7E06D438A56222390C3DCE8D0145589533BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/1/323830343a366530303a3a2f33322d3438203d3e20323730353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:8d:65:6d:2a:be:71:92:4f:de:cf:ec:cd:ed:a8:50:4d:29:
         1e:74:c4:35:0e:53:e4:e0:ea:53:48:eb:3b:db:02:33:4d:37:
         2c:1a:42:2a:a4:4a:18:e0:85:0f:6a:88:5b:82:56:f5:65:d0:
         ea:db:7f:bc:91:aa:42:f5:15:2e:2b:68:d8:4f:8b:9f:b6:38:
         f3:ec:10:7f:69:58:e7:09:3f:56:35:5f:44:a8:d0:fe:11:ac:
         86:4f:32:1f:2c:25:4e:1e:ff:cb:f4:5f:b6:42:03:89:32:3d:
         e0:ba:2c:ba:8a:64:7d:a6:2d:95:c1:c4:9a:b1:6f:d5:18:22:
         38:83:d9:ab:a1:dd:59:a9:f9:26:72:0b:30:1d:4d:b5:01:71:
         44:fd:ae:fe:17:a1:48:db:77:16:88:8a:c7:da:0a:ab:dd:57:
         e8:5c:ca:fe:81:26:f8:73:6e:45:97:76:df:90:65:38:25:b1:
         96:40:6f:5f:d5:6c:5b:ac:3f:9a:7e:2e:ba:1b:8e:7c:54:0c:
         65:c9:51:f1:63:4c:db:f4:56:80:51:c5:e7:9a:36:34:83:bd:
         08:9e:01:12:28:03:e4:59:d2:57:8a:a4:ee:89:fe:98:e9:06:
         d6:49:8f:d8:45:f5:99:05:d8:00:e6:9e:61:ce:71:0f:52:3f:
         e0:18:71:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:27 2025 by rpki-client on console.sobornost.net