Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa
File:                     323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa (raw, json)
Hash identifier:          shimHszmX8wAqnKG/mu/0W8YOr2/P9Pbi7fYgYBfA4A=
Subject key identifier:   24:FF:4F:FD:B9:4D:E7:6F:A0:31:C0:8E:59:7A:82:FF:82:38:F6:17
Certificate issuer:       /CN=49FFAF88F9E3352C5D66D4196264FC0F7B911B27
Certificate serial:       24D7F430ECF4FD7F5B8FCA72A322F06BFA8ADEF1
Authority key identifier: 49:FF:AF:88:F9:E3:35:2C:5D:66:D4:19:62:64:FC:0F:7B:91:1B:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa
Signing time:             Fri 18 Apr 2025 17:29:12 +0000
ROA not before:           Fri 18 Apr 2025 17:24:12 +0000
ROA not after:            Fri 17 Apr 2026 17:29:12 +0000
asID:                     273728
IP address blocks:        2804:8b5c:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.crl
                          rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d7:f4:30:ec:f4:fd:7f:5b:8f:ca:72:a3:22:f0:6b:fa:8a:de:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49FFAF88F9E3352C5D66D4196264FC0F7B911B27
        Validity
            Not Before: Apr 18 17:24:12 2025 GMT
            Not After : Apr 17 17:29:12 2026 GMT
        Subject: CN=24FF4FFDB94DE76FA031C08E597A82FF8238F617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:06:d8:66:ef:0a:9c:7e:bc:d6:94:dc:0e:0b:
                    f6:f3:13:a3:ca:e6:1a:f9:c4:6e:ed:09:03:de:6e:
                    e7:82:e5:fd:c3:c4:90:1c:7d:63:5d:91:71:09:81:
                    2e:46:09:74:0e:5c:ce:d0:d3:e3:43:82:98:ea:51:
                    ac:8b:27:b6:4c:4c:26:48:d1:49:08:17:8d:8a:17:
                    b7:3d:34:ae:e4:25:b9:9d:69:83:ca:8f:ab:e9:7a:
                    06:48:6d:f8:96:a3:58:90:cf:75:47:20:fd:b3:34:
                    a2:04:b4:e9:a0:57:b6:c2:55:53:dd:47:d9:e8:58:
                    d3:af:15:79:5c:32:58:b0:1d:dd:64:01:31:e8:71:
                    d5:e0:cb:8b:3f:f3:13:b6:57:41:a4:78:f1:dc:90:
                    35:0c:c7:04:07:b5:a5:71:ec:3f:55:98:28:f1:6b:
                    8f:98:32:85:31:ac:36:af:19:1f:81:b9:7b:a2:bf:
                    f0:c2:ac:50:e8:15:ae:0b:7a:8e:a4:d6:73:01:0f:
                    f3:cd:66:0d:3e:37:13:40:ee:27:9c:99:5a:d3:de:
                    63:eb:05:ab:08:ca:ec:dc:e0:8a:21:ca:7c:1c:2c:
                    c4:47:3a:2e:7c:43:eb:05:c7:a2:bc:26:05:99:c4:
                    9d:dd:79:c4:76:fe:23:79:ca:04:8a:fe:05:8b:32:
                    9f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FF:4F:FD:B9:4D:E7:6F:A0:31:C0:8E:59:7A:82:FF:82:38:F6:17
            X509v3 Authority Key Identifier:
                keyid:49:FF:AF:88:F9:E3:35:2C:5D:66:D4:19:62:64:FC:0F:7B:91:1B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ac:52:9c:b3:ea:ba:86:87:72:e0:e8:88:88:4e:8a:2c:35:c5:
         84:a8:be:cd:c0:75:fe:af:7b:46:34:79:b0:aa:d7:a8:9a:23:
         10:44:cd:23:31:4e:20:38:10:fc:e5:73:b8:20:26:8d:0a:54:
         47:ae:3a:ab:f6:2f:f7:44:9c:40:29:2f:35:d0:49:98:89:71:
         64:6c:9f:5d:f1:68:ad:6c:46:6a:8f:69:d9:be:01:38:ba:0b:
         6c:77:d4:c8:a3:ca:9c:8f:f1:c1:02:39:9c:f5:e5:42:21:4c:
         1c:ba:aa:f3:3d:d8:fd:62:64:ce:5f:73:f1:ac:eb:3c:f5:2e:
         cb:21:75:b0:28:7f:43:cb:54:eb:23:f1:a9:cf:92:d7:f9:55:
         4c:46:ea:c8:55:ce:10:70:f2:1c:39:5a:5e:ac:c0:22:05:a3:
         5c:e8:26:75:e4:9d:2d:d8:18:0c:84:76:72:7e:0f:1a:c9:82:
         aa:a6:94:79:2f:09:a6:69:c8:93:d2:0d:bb:93:ce:d9:84:a2:
         dc:ab:a5:5b:62:8d:72:f2:19:a8:b4:29:06:e1:cb:17:c9:ec:
         3b:cb:3e:34:a5:3b:7a:70:8f:be:67:77:ad:c5:30:d2:f8:a7:
         50:5d:56:08:af:4b:7b:74:3e:79:a5:1c:03:ed:a2:c8:1d:b3:
         0d:fc:d8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:16 2025 by rpki-client on console.sobornost.net