Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633030303a3a2f33372d3337203d3e20323730343430.roa
File:                     323830343a366330343a633030303a3a2f33372d3337203d3e20323730343430.roa (raw, json)
Hash identifier:          JYLzM7FcvSdXbcBNOTRipurhBpRivATJinmZ0fjEC4M=
Subject key identifier:   E4:5D:BA:38:A7:E4:87:6D:E7:06:31:53:1C:FA:55:75:E6:2A:6D:6A
Certificate issuer:       /CN=2E8459987E9776F5848158AEADDA7C12BA642F8E
Certificate serial:       5D05B776A5070269E3557715EF5CA2D61B23F748
Authority key identifier: 2E:84:59:98:7E:97:76:F5:84:81:58:AE:AD:DA:7C:12:BA:64:2F:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8459987E9776F5848158AEADDA7C12BA642F8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633030303a3a2f33372d3337203d3e20323730343430.roa
Signing time:             Thu 20 Mar 2025 12:36:11 +0000
ROA not before:           Thu 20 Mar 2025 12:31:11 +0000
ROA not after:            Thu 19 Mar 2026 12:36:11 +0000
asID:                     270440
IP address blocks:        2804:6c04:c000::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/2E8459987E9776F5848158AEADDA7C12BA642F8E.crl
                          rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/2E8459987E9776F5848158AEADDA7C12BA642F8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8459987E9776F5848158AEADDA7C12BA642F8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 00:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:05:b7:76:a5:07:02:69:e3:55:77:15:ef:5c:a2:d6:1b:23:f7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8459987E9776F5848158AEADDA7C12BA642F8E
        Validity
            Not Before: Mar 20 12:31:11 2025 GMT
            Not After : Mar 19 12:36:11 2026 GMT
        Subject: CN=E45DBA38A7E4876DE70631531CFA5575E62A6D6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:8f:bb:ec:9e:33:f6:fd:6d:8a:5e:a8:b3:
                    ba:21:14:78:8b:09:f9:ea:1e:e0:9b:9e:a0:93:a5:
                    b7:b3:3b:4c:11:dc:ca:fc:bc:a8:22:8f:26:13:03:
                    e3:8c:55:ed:76:61:10:90:8b:b1:6e:dd:17:f5:75:
                    02:80:26:80:10:c5:8d:c4:70:15:46:cc:41:ce:14:
                    ce:3e:1e:ea:2d:73:14:e3:d8:0d:d8:fa:21:02:10:
                    d7:02:d6:9e:b6:40:89:d7:2b:b7:46:1c:78:13:3a:
                    d0:09:07:f0:47:2e:ca:a0:e9:e3:10:78:fe:b8:d2:
                    0d:66:2a:ff:86:7a:03:81:c9:43:fb:8d:40:dc:c6:
                    cd:ed:a5:78:b3:a1:da:dd:4f:f2:5d:fd:03:50:bf:
                    50:33:aa:c5:52:69:d9:fa:69:28:d8:79:31:f5:36:
                    a9:3d:7a:58:8e:74:c4:96:ef:2e:70:93:d5:d2:6d:
                    8d:07:2d:4f:40:45:f8:05:b4:01:ae:06:11:a1:58:
                    f8:6a:64:31:8a:e0:61:09:ba:61:d5:c5:4a:32:eb:
                    f2:47:df:cb:65:3e:71:88:57:67:33:5d:68:1d:87:
                    e0:7a:66:cf:f1:80:eb:02:7b:eb:b3:fd:49:a0:e1:
                    cd:a1:c8:b4:36:67:2b:55:da:44:f5:bd:8b:06:fc:
                    27:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5D:BA:38:A7:E4:87:6D:E7:06:31:53:1C:FA:55:75:E6:2A:6D:6A
            X509v3 Authority Key Identifier:
                keyid:2E:84:59:98:7E:97:76:F5:84:81:58:AE:AD:DA:7C:12:BA:64:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/2E8459987E9776F5848158AEADDA7C12BA642F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8459987E9776F5848158AEADDA7C12BA642F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633030303a3a2f33372d3337203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04:c000::/37

    Signature Algorithm: sha256WithRSAEncryption
         6b:bd:1c:b2:45:ae:ee:9b:73:9b:6a:1f:63:bb:cb:39:bc:ee:
         87:d2:eb:ff:fe:76:0d:3d:04:e3:b4:6e:38:6e:4c:1f:29:5c:
         f4:b5:fb:76:62:73:cf:ef:81:24:ab:31:50:33:18:10:68:68:
         f7:ca:4d:bb:c7:90:31:4d:d4:6d:f2:d3:de:89:90:7d:88:37:
         c4:97:90:f4:db:87:5c:ce:9a:be:40:7d:7e:c8:43:25:bb:5d:
         20:c2:62:37:df:8d:a3:18:03:1b:e7:ce:50:dd:2c:29:7e:a0:
         54:c1:4f:90:0e:32:d0:c8:98:3d:9a:28:af:9f:97:1a:cd:1d:
         52:81:4c:2c:b9:90:25:65:60:3d:de:b9:be:3a:52:46:c5:b9:
         64:df:39:ae:b6:4d:01:52:03:81:a9:ef:06:69:ed:0a:b6:4d:
         a7:60:9c:2b:f7:b6:8a:c5:00:86:2d:bb:34:d8:91:1d:b6:9c:
         e2:0a:12:05:18:ce:59:f7:95:3f:dc:3e:08:06:64:6d:0e:e6:
         a2:10:5a:d9:3b:d9:09:60:80:c8:1a:5b:a9:32:43:cd:f3:c7:
         42:9b:a9:68:76:da:9d:bf:88:8a:a6:f9:e2:6c:40:1b:82:1c:
         41:f4:4a:d2:0e:36:64:4c:05:c5:b3:94:f3:91:2c:2a:72:a6:
         9e:8e:30:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:42 2025 by rpki-client on console.sobornost.net