Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa
File:                     323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa (raw, json)
Hash identifier:          8RSZM5HyymJdv+uJZD31edAh3j1mf0toz1rtXvEg5Y8=
Subject key identifier:   02:5D:1B:1E:74:86:B4:F4:8F:E2:6C:54:B7:C4:4E:FE:7D:9C:DD:66
Certificate issuer:       /CN=49FFAF88F9E3352C5D66D4196264FC0F7B911B27
Certificate serial:       62D8A9B0D04A349428EEB9EE483935042D013937
Authority key identifier: 49:FF:AF:88:F9:E3:35:2C:5D:66:D4:19:62:64:FC:0F:7B:91:1B:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa
Signing time:             Fri 18 Apr 2025 17:29:13 +0000
ROA not before:           Fri 18 Apr 2025 17:24:13 +0000
ROA not after:            Fri 17 Apr 2026 17:29:13 +0000
asID:                     273728
IP address blocks:        2804:8b5c:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.crl
                          rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d8:a9:b0:d0:4a:34:94:28:ee:b9:ee:48:39:35:04:2d:01:39:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49FFAF88F9E3352C5D66D4196264FC0F7B911B27
        Validity
            Not Before: Apr 18 17:24:13 2025 GMT
            Not After : Apr 17 17:29:13 2026 GMT
        Subject: CN=025D1B1E7486B4F48FE26C54B7C44EFE7D9CDD66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:f2:b4:eb:0a:31:d6:2a:5e:e9:a1:61:2d:
                    c0:35:59:47:6a:3a:ae:05:98:05:48:23:b0:53:7d:
                    1d:eb:a2:37:88:ab:72:1b:2c:a5:81:2c:08:e3:bc:
                    23:b3:0f:3f:65:e9:41:e6:4c:ed:a6:4d:1c:d6:39:
                    e7:da:db:53:13:a3:e3:d5:6a:40:f5:18:79:ad:06:
                    e3:0c:10:fd:8e:c9:3f:e4:fc:98:8f:b8:d1:2a:c0:
                    00:1b:b2:65:6c:d5:e1:e5:38:28:17:6e:59:ed:bf:
                    a5:13:a2:fe:b2:9f:d6:80:1a:80:7e:6e:ad:6b:0f:
                    6b:9b:3e:1b:31:3a:74:2f:cc:2c:f8:99:c9:ba:1e:
                    6e:6f:3f:f0:87:5d:63:65:99:d2:a2:ed:e3:1c:d2:
                    d3:80:03:9e:de:8d:e2:53:26:d6:0e:a5:a6:3f:a5:
                    12:83:3d:f8:b4:c0:9d:6c:4a:04:27:41:52:7f:51:
                    84:34:99:ff:ab:42:4f:cb:85:97:f2:22:d1:58:2f:
                    70:51:a1:2f:7c:6b:73:5d:41:46:56:86:7f:a9:9d:
                    23:1b:d3:24:17:fb:43:26:56:1c:f7:54:ec:96:26:
                    af:d7:2c:33:75:04:6c:33:1f:85:ad:d0:31:8c:e9:
                    17:fd:ce:1f:65:1d:eb:7d:30:dc:f7:90:62:6a:05:
                    4e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5D:1B:1E:74:86:B4:F4:8F:E2:6C:54:B7:C4:4E:FE:7D:9C:DD:66
            X509v3 Authority Key Identifier:
                keyid:49:FF:AF:88:F9:E3:35:2C:5D:66:D4:19:62:64:FC:0F:7B:91:1B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6e:b6:58:f4:9c:5d:bd:df:e3:16:40:a6:66:40:19:5b:66:f7:
         f0:7b:8b:08:67:d6:30:43:21:87:c0:85:c1:31:bd:b6:6b:1f:
         83:e9:e6:90:d2:75:dd:16:84:27:2c:c4:b0:6b:7e:1c:af:e1:
         03:7a:48:47:b8:b2:6b:31:98:e8:ff:59:24:a3:0e:46:4f:af:
         28:29:cf:f9:d9:e6:61:60:13:f0:28:9a:fe:4b:e8:92:61:74:
         8d:21:cc:52:15:3a:46:38:a0:5e:69:97:b9:54:d5:e6:e1:a2:
         b4:50:cc:b0:43:c1:31:79:5b:b5:23:d7:8f:66:a0:f5:8d:2e:
         fe:0a:94:b3:06:cd:9f:09:d1:8b:ef:b5:1e:94:91:e5:b8:ea:
         70:96:14:de:79:be:7a:31:5c:e0:39:f2:90:1c:09:61:1b:2f:
         07:67:b9:9a:6a:87:b3:8a:dd:c9:32:20:63:9b:02:7c:f8:9a:
         81:ad:92:ce:44:68:1b:9e:dc:bc:20:c2:f7:ba:79:47:a1:75:
         e2:c0:29:78:a9:72:ef:7b:ca:50:ff:80:8a:82:58:c8:23:a6:
         f7:ca:11:21:92:c0:76:d5:0a:51:d3:c0:07:a3:4a:82:6e:45:
         da:47:90:c2:8a:09:af:73:bc:79:b8:f8:b3:e3:a2:f4:12:98:
         e8:16:89:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:16 2025 by rpki-client on console.sobornost.net