Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/323830343a333664383a383030303a3a2f33332d3333203d3e20323636333736.roa
File:                     323830343a333664383a383030303a3a2f33332d3333203d3e20323636333736.roa (raw, json)
Hash identifier:          kuOigvHk9xrkKy8rgef0si8YwKYGpZnUjEE9PLDNCZY=
Subject key identifier:   F4:81:7F:AF:B1:EE:21:C5:59:A6:D3:E1:45:99:F0:94:24:71:EE:65
Certificate issuer:       /CN=8A5716CE9AAF1F951C62F65F906316E9E6082CFE
Certificate serial:       029F51688F87BF9777EAFAA2DC457D95593AC8CF
Authority key identifier: 8A:57:16:CE:9A:AF:1F:95:1C:62:F6:5F:90:63:16:E9:E6:08:2C:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/323830343a333664383a383030303a3a2f33332d3333203d3e20323636333736.roa
Signing time:             Thu 10 Apr 2025 16:08:49 +0000
ROA not before:           Thu 10 Apr 2025 16:03:49 +0000
ROA not after:            Thu 09 Apr 2026 16:08:49 +0000
asID:                     266376
IP address blocks:        2804:36d8:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.crl
                          rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:56:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9f:51:68:8f:87:bf:97:77:ea:fa:a2:dc:45:7d:95:59:3a:c8:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A5716CE9AAF1F951C62F65F906316E9E6082CFE
        Validity
            Not Before: Apr 10 16:03:49 2025 GMT
            Not After : Apr  9 16:08:49 2026 GMT
        Subject: CN=F4817FAFB1EE21C559A6D3E14599F0942471EE65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5c:1b:d6:7a:fe:49:bc:1f:00:ba:bf:cd:c6:
                    26:1d:89:cf:ce:13:27:35:80:2e:fd:e0:58:f4:fa:
                    2a:fd:be:af:eb:a7:08:95:e9:c4:56:2a:db:a7:a4:
                    7b:cb:b7:65:94:00:b6:60:f7:93:a3:9e:d3:44:4b:
                    c3:36:65:a2:6b:5b:36:17:a1:fc:10:4f:52:96:b1:
                    14:4f:76:7c:0e:5d:6c:34:43:07:62:9f:44:f5:b7:
                    b4:c8:8a:b1:f5:7e:9a:22:e3:13:ed:cf:20:2c:ad:
                    58:dc:a7:51:bc:1b:c1:f6:c9:cc:f7:c6:c9:6a:d5:
                    e3:1d:7a:10:a6:15:63:da:78:be:f0:46:b7:ec:45:
                    d0:4b:5e:f1:06:36:ec:d2:04:47:74:9e:38:ac:50:
                    d1:cc:6f:eb:e2:4b:8b:47:a7:df:80:c3:f0:62:8d:
                    35:bf:3d:7a:c4:72:d6:2e:f1:d6:ef:c7:d6:f6:51:
                    a2:94:1d:48:db:72:50:3a:17:e4:38:b7:9b:66:70:
                    1d:5b:a0:cc:08:cb:c1:c7:c9:d7:71:fd:de:69:52:
                    07:66:8f:a4:3a:95:b6:ee:bf:39:73:dc:32:d8:56:
                    98:94:b8:26:2b:ec:dd:bd:a4:89:a2:ae:98:00:c3:
                    6f:a0:c7:23:3f:7b:ae:9b:aa:87:77:d6:a6:54:b7:
                    8e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:81:7F:AF:B1:EE:21:C5:59:A6:D3:E1:45:99:F0:94:24:71:EE:65
            X509v3 Authority Key Identifier:
                keyid:8A:57:16:CE:9A:AF:1F:95:1C:62:F6:5F:90:63:16:E9:E6:08:2C:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/323830343a333664383a383030303a3a2f33332d3333203d3e20323636333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36d8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         28:a4:f8:fc:28:80:1c:b5:09:6c:4c:19:35:f0:ec:80:1e:d7:
         4e:d8:56:63:11:8a:e7:c7:e6:0a:df:b7:d4:e6:b8:2d:d6:87:
         3c:02:f4:93:0d:4d:be:42:70:48:16:2e:a7:dd:99:1a:02:8d:
         d5:37:f9:3c:56:36:c8:91:10:44:70:d4:d9:20:fc:18:d3:76:
         f5:09:64:ec:45:79:98:91:9e:ea:51:4f:cd:66:2a:82:7c:a2:
         f8:3c:f2:88:b2:07:7c:29:14:2c:a4:47:64:0d:0a:5f:2e:68:
         fa:b5:25:1c:7e:b7:f2:0d:16:7e:17:48:9a:f6:0d:70:7b:bf:
         10:16:ba:dd:ce:d3:86:64:0c:00:b5:2e:1a:3e:59:63:46:7b:
         09:05:08:a2:fb:4f:c9:9b:26:5c:a3:31:fd:21:2c:6f:65:4e:
         dd:56:32:eb:0a:a4:77:34:58:8a:a6:e6:d2:1a:86:3d:58:dd:
         e6:34:7a:0d:1c:60:2e:0d:9c:be:dc:46:c8:a7:a0:8e:44:c0:
         80:c7:d3:d8:3f:79:5a:9f:eb:a7:fa:f6:b3:f3:3a:fd:e2:e9:
         2f:b3:9b:1d:8c:6a:82:66:8d:f7:4b:da:47:e5:16:95:f5:e9:
         ac:2c:f2:c6:de:ec:d3:66:65:9d:3a:c1:3e:8c:b4:a1:5f:fb:
         77:aa:84:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:12 2025 by rpki-client on console.sobornost.net