Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/323830343a373432303a3a2f33322d3334203d3e20323730393630.roa
File:                     323830343a373432303a3a2f33322d3334203d3e20323730393630.roa (raw, json)
Hash identifier:          GjiymdvTqUdrG8Xpw9pQyey1hBMIcEvECgXIC6+Y0IE=
Subject key identifier:   1F:07:4F:33:AC:39:9F:54:1D:E9:D8:69:B1:65:F6:2E:7D:08:19:B7
Certificate issuer:       /CN=0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5
Certificate serial:       2EE8C09BC8C6E8B9E2029EB5312DF12D8FB817B1
Authority key identifier: 0D:D7:BC:EF:DB:A4:4C:DF:A5:2E:3C:F9:3B:50:7F:D3:5B:63:8C:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/323830343a373432303a3a2f33322d3334203d3e20323730393630.roa
Signing time:             Fri 10 Jan 2025 14:47:07 +0000
ROA not before:           Fri 10 Jan 2025 14:42:07 +0000
ROA not after:            Fri 09 Jan 2026 14:47:07 +0000
asID:                     270960
IP address blocks:        2804:7420::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.crl
                          rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e8:c0:9b:c8:c6:e8:b9:e2:02:9e:b5:31:2d:f1:2d:8f:b8:17:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5
        Validity
            Not Before: Jan 10 14:42:07 2025 GMT
            Not After : Jan  9 14:47:07 2026 GMT
        Subject: CN=1F074F33AC399F541DE9D869B165F62E7D0819B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:32:ca:d9:6f:04:07:8a:33:2f:ec:58:e8:ba:
                    15:e6:fd:c3:34:da:7d:60:30:43:3f:17:2c:50:6d:
                    fd:99:89:89:08:b6:48:ab:bf:eb:80:01:4d:9f:e7:
                    1b:84:87:c6:52:bd:50:6c:82:c6:af:bb:22:f2:3f:
                    b7:cb:d5:df:47:b4:77:da:dd:56:a4:8a:82:18:16:
                    d2:4d:76:bc:28:87:29:a0:c6:05:4a:87:55:37:d9:
                    19:9d:4f:3f:c6:e4:6a:f3:49:ba:32:c2:16:79:e0:
                    0c:d0:72:54:4e:60:e9:ee:2f:c1:51:4c:0c:7a:0f:
                    25:bb:91:fc:0b:b0:ad:63:50:19:fc:47:b5:a5:44:
                    af:1a:3f:31:c1:d6:9a:4d:54:1e:be:47:7e:2a:fb:
                    e1:03:ba:32:af:71:41:be:64:e4:e0:22:61:61:27:
                    94:bc:a6:00:62:7d:00:a2:cf:69:21:34:cb:85:b9:
                    fa:29:e1:ba:7a:84:93:6e:fc:e1:d0:c0:55:91:7d:
                    12:1b:a0:58:d3:83:bd:cb:bb:9a:f9:e6:69:c0:c6:
                    7f:01:a9:e3:af:76:8f:c2:17:98:0d:6f:66:1b:78:
                    4f:7b:ff:23:fb:b4:62:5e:33:6f:43:2f:ef:fe:f4:
                    6d:b6:ea:f2:d2:70:40:3e:24:c5:f8:be:06:38:e8:
                    29:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:07:4F:33:AC:39:9F:54:1D:E9:D8:69:B1:65:F6:2E:7D:08:19:B7
            X509v3 Authority Key Identifier:
                keyid:0D:D7:BC:EF:DB:A4:4C:DF:A5:2E:3C:F9:3B:50:7F:D3:5B:63:8C:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/323830343a373432303a3a2f33322d3334203d3e20323730393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7420::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:73:fb:27:9d:30:12:a3:27:30:49:8a:fd:75:e6:08:e0:a3:
         13:16:89:66:b2:f7:5c:9f:04:c9:d4:00:2e:b1:63:bf:1b:d9:
         dd:ca:b5:0d:b7:56:f1:1f:9d:28:4c:05:b6:1f:08:43:18:f6:
         ff:f1:d4:01:ad:01:3a:65:40:a5:f9:6f:39:a6:7a:fe:53:55:
         ad:7f:58:d9:cf:9e:81:47:e4:47:5e:7b:2e:97:21:71:3b:f2:
         9b:dc:be:e1:eb:5d:b9:61:39:ad:0a:ba:83:fc:17:86:1b:7f:
         fb:5b:cb:a7:69:e8:ec:e1:1b:4f:7f:41:f8:2a:37:3e:87:82:
         33:b4:5a:13:66:f0:78:c5:47:be:52:b9:4d:3c:64:73:01:54:
         39:5c:d3:49:d5:64:65:88:24:c6:22:84:8d:05:0d:6e:64:02:
         76:a6:74:ba:e5:cb:59:07:4e:a0:01:8b:0e:72:b5:d1:eb:6a:
         28:db:28:9b:ff:5d:45:99:fb:84:77:70:d8:19:37:0e:8a:19:
         6a:5f:ab:39:a5:9c:f7:1c:b1:5f:fe:94:c1:a1:5b:4d:95:01:
         5f:17:2d:5d:42:71:09:8e:8a:3e:d6:7e:f2:e8:f2:5b:d6:1e:
         a1:39:af:34:34:11:f5:e3:1e:04:8f:f5:dc:a5:65:9e:52:d8:
         bf:3f:50:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:27 2025 by rpki-client on console.sobornost.net