Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgRGqjJFRBYufCZTo2DzW7BmGLDrujRuVbhW5EZcy3zu/0/323830343a373236303a3a2f33322d313238203d3e203532393236.roa
File:                     323830343a373236303a3a2f33322d313238203d3e203532393236.roa (raw, json)
Hash identifier:          cc7b091XHYKPAn3nsq1Jh7a+9M4WVhEES8naGzYghcI=
Subject key identifier:   E6:B7:97:85:3F:94:F1:B0:AE:64:FA:BC:38:8B:7C:8C:0E:67:48:30
Certificate issuer:       /CN=7ABD0BD500D8C0F7E2BED54B84975B5EE77AC60A
Certificate serial:       01606564B29D0DAC8D1B24015F96D42D15822493
Authority key identifier: 7A:BD:0B:D5:00:D8:C0:F7:E2:BE:D5:4B:84:97:5B:5E:E7:7A:C6:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABD0BD500D8C0F7E2BED54B84975B5EE77AC60A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgRGqjJFRBYufCZTo2DzW7BmGLDrujRuVbhW5EZcy3zu/0/323830343a373236303a3a2f33322d313238203d3e203532393236.roa
Signing time:             Tue 15 Apr 2025 13:14:32 +0000
ROA not before:           Tue 15 Apr 2025 13:09:32 +0000
ROA not after:            Tue 14 Apr 2026 13:14:32 +0000
asID:                     52926
IP address blocks:        2804:7260::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgRGqjJFRBYufCZTo2DzW7BmGLDrujRuVbhW5EZcy3zu/0/7ABD0BD500D8C0F7E2BED54B84975B5EE77AC60A.crl
                          rsync://rpki-repo.registro.br/repo/GgRGqjJFRBYufCZTo2DzW7BmGLDrujRuVbhW5EZcy3zu/0/7ABD0BD500D8C0F7E2BED54B84975B5EE77AC60A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABD0BD500D8C0F7E2BED54B84975B5EE77AC60A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 16:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:60:65:64:b2:9d:0d:ac:8d:1b:24:01:5f:96:d4:2d:15:82:24:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABD0BD500D8C0F7E2BED54B84975B5EE77AC60A
        Validity
            Not Before: Apr 15 13:09:32 2025 GMT
            Not After : Apr 14 13:14:32 2026 GMT
        Subject: CN=E6B797853F94F1B0AE64FABC388B7C8C0E674830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:b0:cd:0a:93:e2:ff:55:b4:27:0e:0d:03:
                    60:93:da:f5:a3:a0:df:f2:9f:05:2d:eb:a0:e5:b1:
                    88:c9:61:72:07:e6:5e:2c:ab:88:cb:92:eb:31:e1:
                    92:b8:51:22:34:e2:7f:9d:be:94:68:93:01:5a:6a:
                    41:5d:79:c6:48:1b:8f:a1:ab:b3:b9:af:01:7c:e0:
                    4c:44:b2:4b:38:2b:bc:dd:2c:3f:c7:ba:dc:3a:fd:
                    bd:e6:4e:13:95:41:65:63:2f:3f:a3:40:f9:8f:76:
                    e7:6f:43:68:4c:7c:dc:e5:51:07:f8:31:3f:75:1e:
                    60:a6:ad:74:04:89:f6:9d:48:32:e7:b1:0a:89:f8:
                    05:22:c7:d5:48:bd:53:de:c1:41:11:d2:1e:07:af:
                    85:b0:b6:ce:62:15:fe:7c:9a:a6:18:e6:ca:57:22:
                    73:81:e6:6b:dd:3d:8e:7a:3b:5a:61:0b:f7:4e:62:
                    b6:37:dd:85:fd:fa:b6:a5:c5:3f:0a:71:50:80:1a:
                    0b:b3:ba:5a:4d:41:63:f5:8f:89:de:09:0f:62:19:
                    af:e2:f9:01:43:63:39:82:cc:f2:60:aa:0c:ba:69:
                    5b:79:cb:47:7e:ac:b1:84:ce:70:43:c9:8f:6b:37:
                    f7:c7:d2:67:53:18:76:ad:dd:15:9b:fe:bc:90:a3:
                    d2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B7:97:85:3F:94:F1:B0:AE:64:FA:BC:38:8B:7C:8C:0E:67:48:30
            X509v3 Authority Key Identifier:
                keyid:7A:BD:0B:D5:00:D8:C0:F7:E2:BE:D5:4B:84:97:5B:5E:E7:7A:C6:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgRGqjJFRBYufCZTo2DzW7BmGLDrujRuVbhW5EZcy3zu/0/7ABD0BD500D8C0F7E2BED54B84975B5EE77AC60A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABD0BD500D8C0F7E2BED54B84975B5EE77AC60A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgRGqjJFRBYufCZTo2DzW7BmGLDrujRuVbhW5EZcy3zu/0/323830343a373236303a3a2f33322d313238203d3e203532393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7260::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:42:b8:f3:ac:b1:ad:79:75:7a:22:fa:70:86:60:47:dc:d3:
         03:0a:45:cb:11:6f:0a:c9:2d:1f:ee:aa:47:31:85:c8:f3:97:
         8a:06:59:14:cd:70:f9:44:05:b1:4a:c8:be:81:4d:59:bf:77:
         df:59:4c:4f:30:59:ce:96:82:24:be:8c:a5:6d:e1:bb:09:19:
         af:5a:b2:03:f9:1b:48:29:0a:51:9a:71:db:56:24:ec:16:5c:
         da:db:d6:7e:19:c1:0c:a5:ac:3f:6a:b1:9b:30:88:75:63:4c:
         02:fa:53:1f:21:73:32:c0:ec:72:21:20:fa:91:cd:06:a8:2b:
         7c:f5:6f:e1:9d:d8:e7:3a:d5:59:9a:8f:45:85:85:b2:5b:df:
         c2:b9:e4:53:06:37:23:38:0f:ab:74:f0:6a:f7:8f:10:fa:04:
         75:9b:0d:ce:a6:25:ad:39:49:a5:37:c3:74:84:78:5c:05:2b:
         59:e8:45:4c:45:44:4c:b5:fc:52:77:1f:f8:a7:03:b3:c0:d0:
         65:79:f7:ba:22:ac:b1:4b:c5:90:32:ab:f2:34:2c:cf:aa:a5:
         74:e2:97:b0:1c:60:3d:ef:93:c4:98:dd:a5:06:18:62:ad:e5:
         18:a4:8f:bd:10:b1:32:40:7e:69:46:38:de:11:33:1b:a6:6e:
         72:d7:d1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 15:50:56 2025 by rpki-client on console.sobornost.net