Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a383030303a3a2f33332d3333203d3e20323637303335.roa
File:                     323830343a343732383a383030303a3a2f33332d3333203d3e20323637303335.roa (raw, json)
Hash identifier:          JXtWl+CBu6/bp0DCenHAyCNFDR91YP/AFTUnnLwFBpQ=
Subject key identifier:   F4:ED:07:02:5F:57:A9:2F:3D:3D:8E:11:B7:64:D8:59:36:24:61:C9
Certificate issuer:       /CN=8DA0474053F934313743C68AD25CD499279BFBF9
Certificate serial:       5E7E1C99FEA9529B1FA1CC2FD5DB828479F414AA
Authority key identifier: 8D:A0:47:40:53:F9:34:31:37:43:C6:8A:D2:5C:D4:99:27:9B:FB:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DA0474053F934313743C68AD25CD499279BFBF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a383030303a3a2f33332d3333203d3e20323637303335.roa
Signing time:             Wed 23 Apr 2025 19:51:34 +0000
ROA not before:           Wed 23 Apr 2025 19:46:34 +0000
ROA not after:            Wed 22 Apr 2026 19:51:34 +0000
asID:                     267035
IP address blocks:        2804:4728:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/8DA0474053F934313743C68AD25CD499279BFBF9.crl
                          rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/8DA0474053F934313743C68AD25CD499279BFBF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DA0474053F934313743C68AD25CD499279BFBF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 11:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:7e:1c:99:fe:a9:52:9b:1f:a1:cc:2f:d5:db:82:84:79:f4:14:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DA0474053F934313743C68AD25CD499279BFBF9
        Validity
            Not Before: Apr 23 19:46:34 2025 GMT
            Not After : Apr 22 19:51:34 2026 GMT
        Subject: CN=F4ED07025F57A92F3D3D8E11B764D859362461C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e6:6d:44:5b:9f:c2:91:c9:88:54:b6:0b:e8:
                    5c:4d:ab:9c:86:bf:1d:84:ac:53:ee:20:ba:97:19:
                    6e:fd:ee:fc:b2:ff:fe:2a:92:9c:f8:fd:89:01:a3:
                    5d:d6:32:7f:51:7c:0c:20:ef:fb:40:9b:31:dc:a0:
                    25:a1:6f:a4:6a:7b:02:04:b9:c6:ef:b3:f7:a6:91:
                    d7:21:a1:f5:b7:69:d4:f3:e0:9a:c7:02:2c:8c:9c:
                    8a:2e:d8:0f:02:bc:26:6b:bd:aa:b4:77:ec:18:cb:
                    73:12:45:3e:79:d2:60:98:bb:26:f5:7e:f0:41:25:
                    df:95:1b:fe:b8:39:96:cb:63:51:7e:87:34:8b:d5:
                    04:cb:6b:63:95:64:7d:a0:6e:73:3a:ab:fe:bd:66:
                    66:c6:26:cf:6a:47:4a:7d:4b:e9:c2:3e:af:75:99:
                    ed:99:86:b0:50:78:05:72:d4:1c:c9:de:71:a3:7d:
                    62:7f:b1:d1:57:d8:05:ca:df:0b:36:87:27:5a:93:
                    a5:0c:c0:70:9e:d8:72:0e:49:8e:3f:f0:2e:7c:00:
                    de:80:bd:1c:aa:27:b5:e5:26:95:a3:c5:18:75:d1:
                    3b:06:14:af:cc:65:66:b7:15:96:e7:a6:fc:1b:e3:
                    04:fd:80:d9:22:89:f0:6e:27:fd:cc:ae:2e:26:a6:
                    d8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:ED:07:02:5F:57:A9:2F:3D:3D:8E:11:B7:64:D8:59:36:24:61:C9
            X509v3 Authority Key Identifier:
                keyid:8D:A0:47:40:53:F9:34:31:37:43:C6:8A:D2:5C:D4:99:27:9B:FB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/8DA0474053F934313743C68AD25CD499279BFBF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DA0474053F934313743C68AD25CD499279BFBF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a383030303a3a2f33332d3333203d3e20323637303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4728:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7c:0d:9b:84:58:47:1a:55:86:94:44:8d:21:86:c8:d1:b2:38:
         a8:8b:0f:22:59:20:b5:ee:14:4e:94:3d:ef:6b:42:c4:e0:53:
         4f:1e:7d:e4:5c:ea:d3:03:17:99:5d:d4:5d:d5:15:34:fb:e7:
         46:9e:f1:29:58:c1:2b:76:b4:00:09:01:38:9c:b1:b4:c8:c0:
         d6:88:d9:03:9d:ee:60:22:e9:02:89:ad:62:ae:42:2c:9b:ae:
         d7:c5:3d:5f:b1:20:e9:65:3a:0f:a3:db:bb:7e:6d:11:5d:0f:
         d5:58:b7:01:86:68:17:82:f0:6e:46:27:6f:ac:cf:ce:a2:8c:
         6c:bd:c4:e4:46:db:89:10:29:c2:dd:ad:9a:03:ed:2c:73:c8:
         5a:f3:92:07:3e:1a:2d:8e:b7:c3:94:b8:97:e4:44:be:73:ab:
         a1:79:0a:34:7a:6b:22:a7:50:70:49:a8:ce:10:62:d3:c6:7b:
         52:31:f2:ad:9e:0b:d7:c4:4c:5c:ed:7e:70:2a:87:b6:d5:d2:
         f6:6e:bd:47:9a:7b:fb:f6:29:f3:60:0c:d0:10:bc:68:40:93:
         44:39:75:32:7f:83:77:b7:b6:b8:56:b6:6f:25:a2:fe:ef:53:
         bf:ad:28:4d:48:44:f2:49:35:3c:55:b7:b8:d0:78:4d:e2:e1:
         e7:ba:ef:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:31 2025 by rpki-client on console.sobornost.net