Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/323830343a313435383a3a2f33322d313238203d3e20323633333236.roa
File:                     323830343a313435383a3a2f33322d313238203d3e20323633333236.roa (raw, json)
Hash identifier:          F5ON8gZzCqPtJ/9LbD23FFV94FALELWlhQGHdqhM/rU=
Subject key identifier:   16:BD:5B:45:C9:B8:99:7F:28:25:22:16:E7:AC:01:F8:BF:35:8E:69
Certificate issuer:       /CN=811DD86140C7A0ACC8829D1B806C2E9ED36033B8
Certificate serial:       77E16AA4A584676A77F62C1A73BB201273E88B9D
Authority key identifier: 81:1D:D8:61:40:C7:A0:AC:C8:82:9D:1B:80:6C:2E:9E:D3:60:33:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/811DD86140C7A0ACC8829D1B806C2E9ED36033B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/323830343a313435383a3a2f33322d313238203d3e20323633333236.roa
Signing time:             Wed 26 Mar 2025 23:20:43 +0000
ROA not before:           Wed 26 Mar 2025 23:15:43 +0000
ROA not after:            Wed 25 Mar 2026 23:20:43 +0000
asID:                     263326
IP address blocks:        2804:1458::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/811DD86140C7A0ACC8829D1B806C2E9ED36033B8.crl
                          rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/811DD86140C7A0ACC8829D1B806C2E9ED36033B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/811DD86140C7A0ACC8829D1B806C2E9ED36033B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:39:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e1:6a:a4:a5:84:67:6a:77:f6:2c:1a:73:bb:20:12:73:e8:8b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811DD86140C7A0ACC8829D1B806C2E9ED36033B8
        Validity
            Not Before: Mar 26 23:15:43 2025 GMT
            Not After : Mar 25 23:20:43 2026 GMT
        Subject: CN=16BD5B45C9B8997F28252216E7AC01F8BF358E69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7c:a5:2f:5a:59:65:f0:12:28:0b:af:82:3f:
                    a3:e1:24:96:15:4d:ca:18:d4:b5:65:b1:82:f0:01:
                    ca:b3:ae:3d:72:5b:a9:12:78:cc:d3:4f:f4:ca:27:
                    79:e3:9f:89:5e:19:a1:15:e4:1a:bb:b1:44:22:79:
                    e8:ee:ab:ca:27:38:9d:1f:69:90:e6:32:cf:f9:37:
                    a7:b7:57:68:0e:ec:31:29:7b:e1:5e:6d:ad:df:93:
                    fb:58:b4:89:9d:6d:d4:08:ea:9c:f3:35:d3:6b:cd:
                    52:5b:17:a2:ef:8a:d6:26:5c:4d:1c:4a:17:d5:a3:
                    89:e3:cf:af:92:66:64:ac:4b:fc:af:fb:f2:1d:03:
                    17:00:3c:c0:a0:b2:48:d3:ee:70:da:d9:72:0b:f5:
                    d4:37:1f:53:52:fa:e4:0a:d0:3c:c6:36:69:98:13:
                    3e:f3:ad:b7:4e:2a:b8:0d:1d:80:39:1b:86:b2:b2:
                    f9:c4:d4:7e:a2:83:e9:68:44:0c:7e:e9:14:07:48:
                    bf:ff:51:53:7b:3b:a7:73:a5:77:96:f3:f9:50:a2:
                    bf:77:b3:25:22:28:8a:53:88:57:96:65:5f:2d:df:
                    f0:04:30:49:b5:c4:b6:63:05:48:a6:03:7d:13:ef:
                    7b:2a:1a:54:ac:89:82:d6:0b:63:58:68:a5:5e:92:
                    55:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BD:5B:45:C9:B8:99:7F:28:25:22:16:E7:AC:01:F8:BF:35:8E:69
            X509v3 Authority Key Identifier:
                keyid:81:1D:D8:61:40:C7:A0:AC:C8:82:9D:1B:80:6C:2E:9E:D3:60:33:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/811DD86140C7A0ACC8829D1B806C2E9ED36033B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/811DD86140C7A0ACC8829D1B806C2E9ED36033B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/323830343a313435383a3a2f33322d313238203d3e20323633333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1458::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:af:6e:a3:ce:04:3e:b5:25:46:ea:83:af:24:06:09:77:9e:
         12:0e:73:a1:bb:7d:ff:7b:a9:23:80:cb:05:62:44:a4:ee:ee:
         b3:46:ab:fc:6c:35:7f:54:6b:95:93:35:4f:0c:ca:8c:9d:a3:
         09:7c:e8:48:1a:3f:48:65:f7:14:6a:4f:8c:4c:69:dc:10:ef:
         d2:a5:51:5f:9b:71:e8:53:4e:8d:90:3c:fa:7c:80:c8:fa:b6:
         5c:01:04:37:00:6e:d8:dd:dd:17:36:e5:7c:5c:54:05:63:69:
         9e:c4:3d:58:d0:1b:38:4b:59:8d:a7:63:3e:01:aa:1f:78:1f:
         4a:80:d4:4d:92:e1:b0:b5:bd:41:34:ec:66:6f:26:94:fb:05:
         af:33:87:ac:9b:5e:fe:9c:5c:00:7d:f2:93:2d:5c:43:5e:ec:
         13:8e:d2:97:88:e6:11:1f:da:80:80:2a:7a:7f:1a:b7:8d:c9:
         11:eb:97:26:05:9a:b7:76:54:ca:45:93:ca:5e:02:94:43:9e:
         4b:a5:dc:3f:7a:02:4e:6d:af:1b:7d:ee:00:97:79:16:30:40:
         81:8c:1a:64:a8:5e:96:98:52:f3:46:b2:a2:fa:8e:46:6a:2a:
         68:3c:6c:8f:4c:8f:22:42:ad:9c:59:32:0e:cc:aa:bd:a3:f4:
         ce:15:e8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:50 2025 by rpki-client on console.sobornost.net