Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/323830343a373434343a3a2f33322d3334203d3e20323730393730.roa
File:                     323830343a373434343a3a2f33322d3334203d3e20323730393730.roa (raw, json)
Hash identifier:          4YyyuYPW5mBFHDLEU5S3Dz7mXr/+OMI8PIRUSU16EJY=
Subject key identifier:   69:70:15:A7:2A:EA:A3:38:4D:2E:FF:C7:BF:41:0B:D7:6F:33:7F:E8
Certificate issuer:       /CN=2E5712C9CCD0E705FECAA05DA82ADF1C847CA831
Certificate serial:       4BD65EF6C5B9430D83CCE3EE8DB3DA9F980C1F2C
Authority key identifier: 2E:57:12:C9:CC:D0:E7:05:FE:CA:A0:5D:A8:2A:DF:1C:84:7C:A8:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/323830343a373434343a3a2f33322d3334203d3e20323730393730.roa
Signing time:             Thu 06 Mar 2025 10:07:44 +0000
ROA not before:           Thu 06 Mar 2025 10:02:44 +0000
ROA not after:            Thu 05 Mar 2026 10:07:44 +0000
asID:                     270970
IP address blocks:        2804:7444::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.crl
                          rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 22:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d6:5e:f6:c5:b9:43:0d:83:cc:e3:ee:8d:b3:da:9f:98:0c:1f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E5712C9CCD0E705FECAA05DA82ADF1C847CA831
        Validity
            Not Before: Mar  6 10:02:44 2025 GMT
            Not After : Mar  5 10:07:44 2026 GMT
        Subject: CN=697015A72AEAA3384D2EFFC7BF410BD76F337FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dd:9b:a6:00:52:60:f8:5f:89:ab:21:6f:73:
                    95:85:80:64:71:90:84:a8:f4:8e:17:10:e3:18:4f:
                    eb:ee:53:8b:67:c7:78:8d:ea:d4:88:a7:99:8c:63:
                    32:2b:5f:0a:77:7f:86:3b:05:d2:38:ed:fa:ef:34:
                    bf:10:8f:95:68:76:dd:28:78:de:db:7c:33:59:e5:
                    6f:fd:f0:95:36:ea:2b:9e:fe:8c:02:19:0c:b6:62:
                    39:11:cd:ec:df:e3:d0:c3:ae:55:b9:3e:69:cb:22:
                    0f:f0:37:be:6b:f4:1c:a3:e7:fc:16:44:bc:6b:23:
                    aa:79:4b:54:ec:51:f9:9c:52:ce:f7:b8:88:c8:04:
                    ce:0b:b4:66:08:f0:69:a4:aa:df:bf:66:53:da:ad:
                    bd:b6:1a:93:e8:1f:55:46:9d:96:19:29:f1:d9:f5:
                    d0:66:f0:62:50:de:a3:e5:24:5c:e9:2e:f6:c2:fd:
                    21:24:86:8d:1f:0a:f2:7c:fd:79:e8:81:02:4b:de:
                    f6:a1:59:2b:2d:35:35:22:80:41:7b:05:9b:e0:ea:
                    df:eb:e6:95:e2:48:72:eb:67:dc:16:07:7f:34:6a:
                    dd:23:41:4c:5e:33:c5:78:d3:9c:05:40:92:20:a0:
                    d6:80:0e:4d:0d:9e:72:7a:09:22:77:64:b3:8e:27:
                    f5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:70:15:A7:2A:EA:A3:38:4D:2E:FF:C7:BF:41:0B:D7:6F:33:7F:E8
            X509v3 Authority Key Identifier:
                keyid:2E:57:12:C9:CC:D0:E7:05:FE:CA:A0:5D:A8:2A:DF:1C:84:7C:A8:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/323830343a373434343a3a2f33322d3334203d3e20323730393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7444::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:64:f3:3b:6d:0e:ab:d2:e7:7c:ac:2b:60:39:06:7a:a0:73:
         27:00:ae:c3:8c:ee:d9:e5:f6:77:aa:54:bf:8d:d2:1e:f4:e2:
         7d:f5:8e:e3:2a:f1:8a:46:78:83:4a:75:b4:b0:da:16:13:1b:
         96:32:30:43:57:d9:12:55:c4:b7:8a:d3:b8:6f:8a:f5:28:9c:
         80:a4:79:75:1c:9e:fe:48:8f:ed:d8:6e:e8:22:de:a5:1f:18:
         56:2d:f2:73:72:93:ed:25:25:f2:43:3a:6d:7f:4d:ee:43:5d:
         5f:78:a5:29:b3:6a:f6:85:fc:7a:07:6c:cb:73:1d:7f:aa:30:
         fb:63:49:fc:cf:03:0c:d9:db:dc:f4:05:47:7f:96:c5:a4:9c:
         b8:47:ed:67:f9:b8:bf:b1:40:6b:64:92:d1:9c:de:74:0c:09:
         5f:67:ee:04:cc:f9:35:38:53:b4:27:69:b2:28:6b:2b:ea:9a:
         da:a5:32:d6:ef:65:d7:9e:02:88:e9:33:9c:53:48:eb:2e:ec:
         7e:e4:db:6f:36:b9:f7:e4:94:d3:69:d8:b0:5b:a4:63:53:c2:
         13:7c:04:fc:e0:2d:6e:ff:66:f0:34:79:d7:45:59:d0:7a:77:
         4f:f6:86:ce:24:f4:85:9b:c9:fa:d2:eb:33:0d:db:60:4f:cb:
         b3:ac:c1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:28 2025 by rpki-client on console.sobornost.net