Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/323830343a353839343a633030303a3a2f33342d3334203d3e20323638313337.roa
File:                     323830343a353839343a633030303a3a2f33342d3334203d3e20323638313337.roa (raw, json)
Hash identifier:          JVC/u3FRdrND4dm0UTY3BsYwshuc3phA3+UmF203Vjg=
Subject key identifier:   C4:1B:C6:14:88:D5:56:87:F4:9E:55:F4:00:E5:0C:D4:80:34:C6:C4
Certificate issuer:       /CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
Certificate serial:       5165252AD8F9CBFEC412776C2FF24A6E95D63AFF
Authority key identifier: 3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/323830343a353839343a633030303a3a2f33342d3334203d3e20323638313337.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     268137
IP address blocks:        2804:5894:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl
                          rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 20:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:65:25:2a:d8:f9:cb:fe:c4:12:77:6c:2f:f2:4a:6e:95:d6:3a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=C41BC61488D55687F49E55F400E50CD48034C6C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:75:a4:8e:d0:67:cd:88:52:cb:5e:5a:d7:49:
                    81:2a:86:ba:1c:ab:a4:bb:fe:d8:aa:57:83:23:49:
                    87:40:e8:34:96:1e:f9:2f:a5:bf:7d:35:05:86:4e:
                    36:e2:7e:4e:5e:f4:7b:08:d0:c7:16:77:e7:08:73:
                    e8:7f:88:a0:e8:17:8b:7d:19:52:eb:64:28:0b:5c:
                    42:6e:b9:a7:d6:85:54:3f:a0:2b:97:ba:b4:31:d4:
                    86:e2:e7:68:46:a5:5e:00:75:0d:6f:c2:eb:81:97:
                    a0:f0:33:99:fc:c4:2f:91:29:64:18:5e:3c:a4:9c:
                    eb:fa:62:3c:36:47:23:ae:2c:09:97:77:aa:44:86:
                    93:b4:a7:64:d1:86:1d:2a:58:50:02:bd:77:c8:7a:
                    2d:03:ee:63:cc:d0:cb:a8:f6:98:ae:b3:e1:4f:f8:
                    bd:7e:1f:44:ac:12:e4:cb:fe:da:5a:63:09:0d:a0:
                    05:07:e1:bb:85:f1:fc:0e:35:53:ae:6b:41:4c:79:
                    7c:68:00:65:f5:78:8e:ac:f4:39:50:ec:ed:db:d4:
                    85:dc:1c:7b:32:ff:bb:67:72:e5:93:20:ae:2a:d9:
                    c5:04:58:5b:65:0c:28:ec:af:97:ce:f2:9e:97:32:
                    0f:2e:d4:a1:0c:aa:f0:79:0b:fe:73:52:9e:64:f7:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1B:C6:14:88:D5:56:87:F4:9E:55:F4:00:E5:0C:D4:80:34:C6:C4
            X509v3 Authority Key Identifier:
                keyid:3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/323830343a353839343a633030303a3a2f33342d3334203d3e20323638313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5894:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3f:80:55:fc:0b:2b:a1:9a:cf:dc:94:d1:1c:67:61:5f:53:9a:
         96:c8:8c:e7:f6:6c:f3:8d:d4:76:4a:9e:51:35:6e:48:7c:af:
         1d:62:a1:93:cb:e9:73:3e:91:0b:65:68:69:bc:d2:52:df:62:
         aa:94:95:d5:89:e4:7b:60:7e:64:3f:da:63:bb:4d:36:24:6d:
         76:f5:21:96:a3:5c:4b:6c:52:fc:f8:af:fa:38:57:55:39:a6:
         8d:97:8c:2a:8a:0c:3b:a8:50:a0:4c:e4:83:a4:d3:c2:40:0b:
         50:91:df:4f:c7:62:0a:db:f3:51:b3:fa:45:25:78:08:76:d6:
         dd:ac:03:b8:b0:1f:43:e5:ac:4f:2b:49:f7:cf:b1:9b:69:eb:
         0d:21:bc:2d:bb:5e:76:a4:c0:a3:d5:00:e5:25:f0:46:5b:07:
         99:20:16:cf:f5:67:6e:f7:0a:e8:49:5b:2d:dd:f9:d5:ea:64:
         c1:c1:ab:82:f3:ca:66:04:5f:9d:5a:7d:bd:a3:3e:86:da:e0:
         22:5d:a5:c0:e3:f7:44:28:b9:22:0c:7b:02:7f:50:dc:48:9b:
         09:93:d4:69:7d:b8:e0:3a:be:f5:0b:ec:77:a8:13:0f:69:5c:
         cd:33:46:9d:fc:2b:05:2a:7a:b7:1c:82:d8:06:9f:64:88:6d:
         d3:36:8f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:49 2025 by rpki-client on console.sobornost.net