Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/1/323830343a343931383a3a2f33322d3438203d3e20323637313634.roa
File:                     323830343a343931383a3a2f33322d3438203d3e20323637313634.roa (raw, json)
Hash identifier:          +rf0K+O6Bjfu2hm+srv3YS3RnhjRJMHwkbSLB0LVfQ8=
Subject key identifier:   4B:28:11:DD:12:14:B7:47:7F:AA:A7:57:94:3D:5A:90:B6:76:0C:E7
Certificate issuer:       /CN=81DD59DA77587B1BD0A14E971E442A926C1CFBAB
Certificate serial:       217D9DB3E23DC47DEF27FDC7A3A636707FCCB93E
Authority key identifier: 81:DD:59:DA:77:58:7B:1B:D0:A1:4E:97:1E:44:2A:92:6C:1C:FB:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81DD59DA77587B1BD0A14E971E442A926C1CFBAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/1/323830343a343931383a3a2f33322d3438203d3e20323637313634.roa
Signing time:             Thu 06 Mar 2025 15:06:05 +0000
ROA not before:           Thu 06 Mar 2025 15:01:05 +0000
ROA not after:            Thu 05 Mar 2026 15:06:05 +0000
asID:                     267164
IP address blocks:        2804:4918::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/1/81DD59DA77587B1BD0A14E971E442A926C1CFBAB.crl
                          rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/1/81DD59DA77587B1BD0A14E971E442A926C1CFBAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81DD59DA77587B1BD0A14E971E442A926C1CFBAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7d:9d:b3:e2:3d:c4:7d:ef:27:fd:c7:a3:a6:36:70:7f:cc:b9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DD59DA77587B1BD0A14E971E442A926C1CFBAB
        Validity
            Not Before: Mar  6 15:01:05 2025 GMT
            Not After : Mar  5 15:06:05 2026 GMT
        Subject: CN=4B2811DD1214B7477FAAA757943D5A90B6760CE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:14:97:d3:92:f1:66:00:9d:a1:10:06:5f:a5:
                    67:bf:6f:9a:c0:9a:ab:6d:2b:5f:33:8a:f4:e5:ec:
                    07:76:7a:3b:aa:d1:b1:02:96:21:86:7b:a7:35:ec:
                    9f:0e:9a:b7:70:5b:4c:f1:74:d9:3d:99:90:44:de:
                    84:57:41:c5:39:bb:9c:f2:11:98:f7:2b:c1:f9:70:
                    4d:d6:9d:22:49:4f:e7:c9:95:88:92:14:9e:05:80:
                    8d:69:2e:e9:66:57:36:24:cb:f1:6a:f7:a1:64:cd:
                    cf:7b:60:53:75:eb:23:00:06:61:37:7f:20:e7:ad:
                    8d:4f:78:87:9c:fa:5e:3c:b4:cc:84:42:62:d6:f0:
                    45:6f:aa:1b:a1:fc:44:b5:8b:42:29:5e:d2:12:bf:
                    f7:3b:e4:ec:76:eb:cf:49:77:28:69:2d:f4:da:c0:
                    e7:ab:e9:ba:cd:53:40:1c:10:6e:01:63:1f:cc:db:
                    1c:62:e9:3a:f3:ff:ed:9d:d4:a9:5d:26:ea:d8:79:
                    1a:75:0e:9b:f2:aa:c2:d7:bd:f6:90:ce:61:d2:28:
                    30:89:4d:ba:a2:9e:d6:cb:9d:30:30:7d:06:a6:46:
                    9e:30:be:77:c0:48:d7:e0:17:44:09:ca:03:9c:4e:
                    c5:47:13:63:33:fd:3a:5a:97:a2:bd:0c:e8:07:96:
                    8c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:28:11:DD:12:14:B7:47:7F:AA:A7:57:94:3D:5A:90:B6:76:0C:E7
            X509v3 Authority Key Identifier:
                keyid:81:DD:59:DA:77:58:7B:1B:D0:A1:4E:97:1E:44:2A:92:6C:1C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/1/81DD59DA77587B1BD0A14E971E442A926C1CFBAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81DD59DA77587B1BD0A14E971E442A926C1CFBAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/1/323830343a343931383a3a2f33322d3438203d3e20323637313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4918::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:e9:2c:8d:3f:8d:42:f1:b0:9c:70:93:06:3e:6a:c6:9c:66:
         02:1d:44:76:e8:e1:be:9b:66:99:a6:c5:d3:4d:3a:35:10:a6:
         80:f3:81:de:dd:00:42:1b:09:6b:85:09:38:55:40:f4:16:38:
         4d:1f:96:d1:cc:36:c9:f3:28:de:d1:99:33:4b:d1:fa:a3:34:
         0a:9f:3b:2b:ae:c0:89:bf:e3:53:e4:ed:9a:b1:a4:df:78:09:
         43:56:bc:8c:46:b0:55:17:64:6a:dd:d9:aa:97:e1:7b:b0:fa:
         98:f9:64:44:81:c9:fb:55:f7:fc:31:18:c8:36:9a:99:7a:84:
         05:d7:0d:a8:22:55:5e:39:49:4b:c8:0e:f2:66:83:ca:f2:3b:
         70:7f:16:71:9b:18:0c:dd:6e:2d:0e:82:7d:55:4c:34:ce:b9:
         be:3f:0d:9d:9f:75:3f:ba:43:64:12:9e:fd:06:29:64:c5:b4:
         d4:3e:4e:1f:f1:f7:ea:be:ec:b7:01:af:70:10:a2:76:11:44:
         66:f8:89:3d:a5:34:f5:ba:3f:62:e5:36:d8:ef:08:17:86:30:
         dc:90:d9:50:33:5c:ce:0d:7c:3a:7e:54:0a:27:5f:a6:0a:60:
         2e:83:03:d0:2d:ca:f9:75:68:58:8d:a3:51:ab:4b:2e:a7:97:
         46:cb:c7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:15 2025 by rpki-client on console.sobornost.net