Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/323830343a343030383a3a2f33322d3438203d3e20323635393239.roa
File:                     323830343a343030383a3a2f33322d3438203d3e20323635393239.roa (raw, json)
Hash identifier:          hvcsJL+15g+sHCIcoaqDoNFc49qRkcfVNAlRBE7gMII=
Subject key identifier:   13:FE:B7:69:9D:24:C9:AB:93:E9:84:3A:8E:B0:C5:5B:EA:E3:A9:4A
Certificate issuer:       /CN=1A3ED1628CA42B3B4C8213417B61162F196BD434
Certificate serial:       0F87BC34C123E2671BE7F7DC52AD13E08000EC30
Authority key identifier: 1A:3E:D1:62:8C:A4:2B:3B:4C:82:13:41:7B:61:16:2F:19:6B:D4:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/323830343a343030383a3a2f33322d3438203d3e20323635393239.roa
Signing time:             Thu 06 Mar 2025 01:19:25 +0000
ROA not before:           Thu 06 Mar 2025 01:14:25 +0000
ROA not after:            Thu 05 Mar 2026 01:19:25 +0000
asID:                     265929
IP address blocks:        2804:4008::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.crl
                          rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:87:bc:34:c1:23:e2:67:1b:e7:f7:dc:52:ad:13:e0:80:00:ec:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A3ED1628CA42B3B4C8213417B61162F196BD434
        Validity
            Not Before: Mar  6 01:14:25 2025 GMT
            Not After : Mar  5 01:19:25 2026 GMT
        Subject: CN=13FEB7699D24C9AB93E9843A8EB0C55BEAE3A94A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7b:30:e1:b4:06:aa:4e:61:72:4a:bd:80:9d:
                    9f:05:36:a8:02:61:7b:7f:c3:3c:56:d2:b8:ff:8c:
                    92:97:c6:b6:69:f5:fd:9f:bc:34:e3:1a:a1:73:77:
                    3d:6f:1d:3b:cc:3b:01:b7:86:2f:3f:56:2c:88:e3:
                    69:26:e2:24:a1:48:dc:2d:a6:4e:e0:d6:94:fe:c5:
                    c9:59:bf:68:06:27:b9:6e:fc:7a:87:f7:46:a5:78:
                    f1:43:6e:e9:82:19:22:9d:ab:ca:68:aa:3d:80:2e:
                    9a:90:7c:91:53:76:d6:2f:b1:b5:04:c6:74:f0:b5:
                    93:62:97:76:a2:a2:97:a1:20:41:15:b9:b4:ef:30:
                    c3:45:72:ee:ef:1f:71:27:4f:a9:fb:ae:89:55:a9:
                    c7:83:49:23:22:27:96:98:89:f5:46:a6:4d:55:1b:
                    85:e9:0f:86:e1:32:d7:60:7c:e3:9b:d2:8b:0e:da:
                    0a:a9:75:75:9f:2f:e0:09:8c:fb:bb:3e:aa:5c:d9:
                    a9:db:61:d6:71:0b:b1:32:7b:c2:4a:28:18:6b:9f:
                    12:46:91:5f:fd:11:c1:36:c8:97:81:d0:c3:82:72:
                    8e:2c:08:17:89:c6:ee:34:88:76:f8:89:1a:3a:16:
                    0e:35:ee:de:58:ec:b0:41:2a:1d:27:76:ae:3e:04:
                    a3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FE:B7:69:9D:24:C9:AB:93:E9:84:3A:8E:B0:C5:5B:EA:E3:A9:4A
            X509v3 Authority Key Identifier:
                keyid:1A:3E:D1:62:8C:A4:2B:3B:4C:82:13:41:7B:61:16:2F:19:6B:D4:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/323830343a343030383a3a2f33322d3438203d3e20323635393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4008::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:44:63:9a:e9:7a:42:af:7c:08:35:57:1d:41:36:84:24:2a:
         89:d1:06:9c:96:98:b9:e9:42:a3:58:25:7d:64:b1:70:07:04:
         66:c0:00:76:e7:7f:87:16:96:59:f5:85:82:5c:7c:1b:1d:29:
         fd:9f:7b:87:d5:c5:2b:3d:51:c6:11:58:e5:0a:6c:36:3c:e0:
         19:f6:af:d4:21:b0:e1:57:fc:13:64:e6:1b:6d:a4:ea:58:c4:
         40:3f:09:78:47:86:85:ae:3c:6d:11:43:ca:69:d0:a6:0e:96:
         c3:ce:92:e2:51:1d:71:b0:5a:9c:64:9f:20:24:fa:f1:80:6b:
         20:63:40:d2:86:ba:58:6b:90:af:d2:50:f2:02:82:b0:55:8c:
         cc:98:0b:f3:f3:1e:75:bf:34:05:ee:b8:60:9f:f6:91:9c:72:
         c3:ec:b1:1e:2b:e2:07:5d:12:83:34:c2:89:ba:78:f3:51:3c:
         58:c3:09:a1:01:a4:cb:9c:c5:ac:97:72:0c:94:7d:f6:ec:55:
         10:22:d7:14:7e:41:54:db:9f:e9:5d:87:f2:7c:22:b8:73:7f:
         83:e1:a6:f6:26:37:29:61:61:c6:4b:c9:e9:fb:2e:d0:ff:05:
         9b:4f:e9:65:b4:d5:37:80:93:9b:1e:77:8a:4e:e9:85:7b:47:
         84:9f:18:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:41 2025 by rpki-client on console.sobornost.net