Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/323830343a373935383a3a2f33322d313238203d3e20323731333030.roa
File:                     323830343a373935383a3a2f33322d313238203d3e20323731333030.roa (raw, json)
Hash identifier:          n/nB3LvGbriZhPFAeWC3oZHk4dSRhzefVu/K5W9Weqk=
Subject key identifier:   2A:B9:E6:8B:24:66:25:AE:B7:D4:5A:52:64:E9:B8:69:F9:D6:F6:6F
Certificate issuer:       /CN=4FE40A6F50732749EF4639D0CD3746356543A732
Certificate serial:       314C56FA281984167ACBEFDB4287CF71DFC991C4
Authority key identifier: 4F:E4:0A:6F:50:73:27:49:EF:46:39:D0:CD:37:46:35:65:43:A7:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE40A6F50732749EF4639D0CD3746356543A732.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/323830343a373935383a3a2f33322d313238203d3e20323731333030.roa
Signing time:             Thu 05 Dec 2024 19:56:18 +0000
ROA not before:           Thu 05 Dec 2024 19:51:18 +0000
ROA not after:            Thu 04 Dec 2025 19:56:18 +0000
asID:                     271300
IP address blocks:        2804:7958::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/4FE40A6F50732749EF4639D0CD3746356543A732.crl
                          rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/4FE40A6F50732749EF4639D0CD3746356543A732.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE40A6F50732749EF4639D0CD3746356543A732.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4c:56:fa:28:19:84:16:7a:cb:ef:db:42:87:cf:71:df:c9:91:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE40A6F50732749EF4639D0CD3746356543A732
        Validity
            Not Before: Dec  5 19:51:18 2024 GMT
            Not After : Dec  4 19:56:18 2025 GMT
        Subject: CN=2AB9E68B246625AEB7D45A5264E9B869F9D6F66F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a1:6d:81:15:dc:84:b5:e9:d0:0b:2c:c5:c8:
                    d8:cf:85:6b:c5:6d:b9:39:0f:7e:60:b0:27:94:60:
                    64:29:31:4f:68:d8:9f:2a:44:5f:84:c5:1f:12:28:
                    aa:7f:d3:b8:3c:8f:b8:12:bd:19:77:99:b3:b7:46:
                    97:ef:1a:42:ff:db:8f:bd:11:55:06:fc:2f:a8:e8:
                    5c:a4:c6:95:d1:a8:8d:02:e8:42:a6:ac:07:a4:be:
                    f4:c5:6c:9d:d9:9b:50:e9:4e:a9:12:e8:cb:ce:3e:
                    cc:ff:da:01:bc:2c:14:40:cc:7f:7f:82:ae:bb:09:
                    0b:a0:e7:56:d4:9b:ab:a5:33:dd:12:e3:b1:6c:68:
                    b4:71:6f:7e:ee:0b:e0:94:fb:b2:dd:97:82:82:c0:
                    fb:c1:1c:a3:7d:fe:66:2d:18:72:2c:66:42:6e:c0:
                    71:47:79:92:08:45:d0:1c:a8:18:59:97:c0:d7:99:
                    e5:78:a3:da:9a:b8:7d:36:bf:e5:66:d2:4f:27:87:
                    8c:f9:b6:c4:87:31:ba:e1:ec:00:7f:cf:8f:10:b9:
                    da:dc:58:02:54:b6:ac:b4:43:86:48:13:91:d8:74:
                    e6:f1:88:04:98:0e:b3:2a:a6:37:bd:8d:28:10:4e:
                    f3:d1:49:fd:d4:e9:b6:c7:2f:55:95:e5:f7:b8:2f:
                    83:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B9:E6:8B:24:66:25:AE:B7:D4:5A:52:64:E9:B8:69:F9:D6:F6:6F
            X509v3 Authority Key Identifier:
                keyid:4F:E4:0A:6F:50:73:27:49:EF:46:39:D0:CD:37:46:35:65:43:A7:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/4FE40A6F50732749EF4639D0CD3746356543A732.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE40A6F50732749EF4639D0CD3746356543A732.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/323830343a373935383a3a2f33322d313238203d3e20323731333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7958::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:ad:c4:50:21:03:e6:aa:e5:fd:2c:ea:4c:87:5e:a2:6e:b9:
         0a:6c:56:fd:91:fd:13:64:e4:5d:3a:76:d7:50:91:2b:dd:15:
         8f:1f:23:13:3a:ce:31:86:e2:36:63:f9:b4:68:98:ba:9a:b5:
         5e:5e:bf:a2:3a:09:e6:06:ae:4e:e7:2e:39:34:28:75:11:5f:
         f9:ff:95:17:b6:73:e6:b5:ea:58:62:a5:e6:8d:ef:0d:9d:5a:
         45:61:4e:ba:43:42:16:fc:05:76:ce:d3:4d:30:76:f6:b5:9f:
         bb:fe:00:ca:ce:76:2d:bb:99:53:3d:fd:36:11:ab:e3:f1:dc:
         af:44:99:6f:dd:ea:1b:e0:e0:83:b9:2f:6e:3d:f7:04:05:61:
         7d:78:60:e9:64:09:e7:f8:e5:0d:86:b4:7b:ba:98:a4:0d:57:
         8e:f0:e1:fd:0c:76:07:3f:f3:54:eb:ad:ed:2c:d2:cc:f7:b0:
         2e:41:1d:33:b5:9d:b9:c7:f6:15:a7:47:fc:a6:13:b1:83:a2:
         56:f7:d1:7c:e3:82:4c:8a:40:a4:b8:b9:91:b1:88:eb:38:04:
         f7:54:89:a4:a1:17:57:8b:ee:e2:f3:ea:ef:60:a5:53:82:d2:
         40:f6:fb:a0:70:51:8d:75:1c:e4:bb:92:10:44:86:70:3d:bd:
         8c:98:fb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:15 2025 by rpki-client on console.sobornost.net