Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/323830343a343334633a3a2f33322d3334203d3e20323637353631.roa
File:                     323830343a343334633a3a2f33322d3334203d3e20323637353631.roa (raw, json)
Hash identifier:          +mX59NMIaX5R64LXlD3cQXaX5rONei5QG916R6NdIlw=
Subject key identifier:   6F:7C:7D:AB:DC:CD:27:39:5E:28:07:05:BC:AD:D2:CE:82:3E:DD:D0
Certificate issuer:       /CN=95E83C1EC29F8251CA035F581B61B808604EC59D
Certificate serial:       23C22D266FB450A752E4286DE08F592F2857EA5C
Authority key identifier: 95:E8:3C:1E:C2:9F:82:51:CA:03:5F:58:1B:61:B8:08:60:4E:C5:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95E83C1EC29F8251CA035F581B61B808604EC59D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/323830343a343334633a3a2f33322d3334203d3e20323637353631.roa
Signing time:             Thu 27 Mar 2025 13:40:51 +0000
ROA not before:           Thu 27 Mar 2025 13:35:51 +0000
ROA not after:            Thu 26 Mar 2026 13:40:51 +0000
asID:                     267561
IP address blocks:        2804:434c::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/95E83C1EC29F8251CA035F581B61B808604EC59D.crl
                          rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/95E83C1EC29F8251CA035F581B61B808604EC59D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95E83C1EC29F8251CA035F581B61B808604EC59D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 13:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c2:2d:26:6f:b4:50:a7:52:e4:28:6d:e0:8f:59:2f:28:57:ea:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95E83C1EC29F8251CA035F581B61B808604EC59D
        Validity
            Not Before: Mar 27 13:35:51 2025 GMT
            Not After : Mar 26 13:40:51 2026 GMT
        Subject: CN=6F7C7DABDCCD27395E280705BCADD2CE823EDDD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ac:2a:26:ff:57:48:e8:b0:e0:c4:33:68:af:
                    36:1d:b4:67:84:22:a4:15:71:4d:0c:88:f9:e1:e8:
                    0e:c8:d6:71:31:13:d8:de:ff:a1:3b:ce:d6:18:72:
                    9a:7f:09:7e:3a:b6:2f:b7:d9:bf:7f:5c:00:d8:a0:
                    b0:b3:4e:cb:d8:d8:84:cb:bb:b1:e5:c5:d4:ee:bf:
                    0f:c1:59:fe:d1:d0:86:7d:99:5c:2f:de:1f:aa:bd:
                    a1:30:b9:db:e6:61:32:cc:85:e0:03:eb:2f:7b:c4:
                    a0:f5:5f:c5:6b:4a:60:80:62:d4:c2:6a:dc:7c:0f:
                    14:58:77:c5:5c:9b:95:28:14:56:63:b5:14:b6:bd:
                    a0:47:94:d9:e8:6f:7e:f5:a0:89:df:74:d4:e5:66:
                    08:1c:65:54:57:f5:2b:79:10:4f:51:e5:9e:57:ff:
                    df:b2:02:de:e0:1a:0d:6c:6a:40:4d:27:30:db:b4:
                    65:c2:a0:d2:02:d6:2c:20:b8:aa:8f:0b:09:ad:99:
                    cb:81:c3:6c:02:e0:2a:a2:70:ea:a1:c9:52:f7:ef:
                    df:5a:83:33:1f:1c:cf:fe:76:bb:5e:0c:1b:24:84:
                    15:32:9c:7e:7c:d6:84:b7:00:a2:6e:ea:df:96:74:
                    68:c4:81:03:d9:67:67:d7:a9:13:cc:37:b0:aa:ad:
                    2f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7C:7D:AB:DC:CD:27:39:5E:28:07:05:BC:AD:D2:CE:82:3E:DD:D0
            X509v3 Authority Key Identifier:
                keyid:95:E8:3C:1E:C2:9F:82:51:CA:03:5F:58:1B:61:B8:08:60:4E:C5:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/95E83C1EC29F8251CA035F581B61B808604EC59D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95E83C1EC29F8251CA035F581B61B808604EC59D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/323830343a343334633a3a2f33322d3334203d3e20323637353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:434c::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:54:50:af:01:7c:db:40:ce:14:fc:7a:72:26:0f:78:6f:75:
         3c:cd:97:42:0d:2f:64:2f:0a:de:30:fe:33:60:29:81:5d:58:
         76:d8:f2:ae:a7:b9:7b:0d:d2:eb:b7:40:21:97:ad:4f:c1:3d:
         44:42:01:80:e9:ca:e7:52:c3:57:e0:4a:19:9e:00:dd:67:95:
         22:65:0d:11:d5:2a:f9:c6:28:48:f1:15:91:1d:1a:a2:b4:03:
         7a:91:40:b8:53:36:9e:e9:ea:4e:92:b8:fc:db:86:5e:c5:aa:
         43:19:da:ad:31:b3:6a:d9:c6:ac:6f:a8:f1:1e:1a:66:37:ce:
         6a:01:85:c0:85:b4:9d:da:81:38:22:10:72:9d:95:cc:5a:94:
         7c:43:71:fc:81:44:92:cd:0c:25:5e:c6:21:7f:94:45:19:9b:
         d3:b6:65:52:27:92:10:a2:c7:70:f0:cf:9b:c3:20:e2:a4:91:
         3b:e6:1c:07:75:43:d3:ca:99:45:67:b9:00:49:60:1b:18:71:
         1e:35:6f:98:72:14:07:68:cd:e8:3b:d9:90:d1:43:e1:ec:5b:
         dc:3c:bb:06:89:52:a2:32:75:fb:45:64:67:45:c1:3b:64:17:
         c9:42:dd:51:2f:60:24:94:d7:74:ff:b7:10:bd:8c:09:2d:d2:
         5e:28:4a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:05 2025 by rpki-client on console.sobornost.net