Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a313230303a3a2f34302d3434203d3e20323731333830.roa
File:                     323830343a376139343a313230303a3a2f34302d3434203d3e20323731333830.roa (raw, json)
Hash identifier:          gsMS7Da5Tt1AjLas/xR2ZWzP4/1WELE24ZUdUodzM4U=
Subject key identifier:   D0:5C:8D:E1:5D:50:07:05:9B:69:71:82:EB:EB:25:EE:8E:02:E8:7C
Certificate issuer:       /CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
Certificate serial:       6433E0D99DDF1B4FBD9574B8EC14BF4DCBF2CD15
Authority key identifier: 4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a313230303a3a2f34302d3434203d3e20323731333830.roa
Signing time:             Thu 06 Mar 2025 14:33:21 +0000
ROA not before:           Thu 06 Mar 2025 14:28:21 +0000
ROA not after:            Thu 05 Mar 2026 14:33:21 +0000
asID:                     271380
IP address blocks:        2804:7a94:1200::/40 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl
                          rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:33:e0:d9:9d:df:1b:4f:bd:95:74:b8:ec:14:bf:4d:cb:f2:cd:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
        Validity
            Not Before: Mar  6 14:28:21 2025 GMT
            Not After : Mar  5 14:33:21 2026 GMT
        Subject: CN=D05C8DE15D5007059B697182EBEB25EE8E02E87C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:44:15:9a:e8:4f:10:bc:00:1f:9e:10:f7:7c:
                    c0:7d:67:21:27:b9:15:53:4b:e5:2b:ac:d6:a0:25:
                    04:60:e3:2e:67:0f:7f:5d:f5:89:94:88:34:93:09:
                    c1:00:36:6f:6c:7b:54:f6:99:df:92:29:f3:6a:fd:
                    29:2c:0c:dd:34:0a:91:8a:5d:c4:21:d9:66:58:d5:
                    e8:76:8a:4b:db:bc:e0:08:5a:ba:9f:91:e7:e3:ff:
                    70:65:f8:39:ee:ab:ab:3b:ff:8d:b3:6e:85:2b:83:
                    23:e9:b2:ba:c9:f1:76:31:59:86:90:65:4f:7c:6e:
                    01:8d:60:19:07:8a:56:cc:eb:c0:e2:e7:84:4d:66:
                    64:25:f1:8f:c8:28:e4:35:c7:c2:df:fa:4d:8c:cf:
                    b1:c6:0b:9c:6a:63:a7:58:6f:53:30:47:77:43:b8:
                    39:f9:6b:47:ed:08:d9:21:ba:00:68:ae:52:cf:d7:
                    c3:e8:f5:34:51:1a:f5:f7:41:36:6d:b7:5c:64:b8:
                    50:32:d3:da:bd:02:6b:92:f3:f3:65:59:fe:b1:be:
                    fc:d8:58:55:c2:0e:c4:a0:ce:88:9c:f2:2b:d8:52:
                    96:fe:b7:cf:55:e7:55:f4:29:d1:69:f0:2c:87:38:
                    b9:69:7e:84:78:a8:c9:9c:aa:66:11:86:c1:3d:6a:
                    62:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5C:8D:E1:5D:50:07:05:9B:69:71:82:EB:EB:25:EE:8E:02:E8:7C
            X509v3 Authority Key Identifier:
                keyid:4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a313230303a3a2f34302d3434203d3e20323731333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a94:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         ba:15:7c:e1:a2:60:4c:1a:30:76:de:a1:4a:ca:38:ba:ee:6c:
         ae:3e:35:29:63:d3:6b:f5:2b:fa:11:54:07:de:07:5c:21:bb:
         f5:b6:83:c0:70:5b:28:f8:17:00:7a:f6:51:65:c5:40:ea:17:
         fe:aa:18:f0:a5:a4:94:6b:8d:3a:8c:75:3a:fa:6f:4c:c2:c5:
         a0:8e:61:1f:84:80:57:0a:df:1a:ec:e8:37:2e:72:bf:2c:e4:
         3d:aa:71:0f:6c:37:51:bf:89:4e:2a:a4:8a:d2:e5:70:79:ad:
         42:cd:96:51:bf:43:22:7b:fb:39:80:92:4e:7c:2d:ac:e2:4f:
         76:f3:3c:7b:3b:cb:63:25:5e:5b:21:ad:44:c1:aa:98:e6:f9:
         9b:ab:66:e0:fa:50:cf:6c:ac:10:e4:b5:3b:35:c8:71:56:fd:
         6f:93:45:5e:6a:79:3f:91:3e:0e:e4:d2:89:05:ad:14:9d:bc:
         96:2e:a6:d7:df:da:1b:6d:6a:3f:d3:03:1a:48:77:73:4d:a6:
         70:5f:ed:76:77:2f:4d:1b:73:27:2c:ed:21:31:d8:26:94:ff:
         b0:90:41:b1:20:47:49:74:eb:21:0e:bf:5c:cc:d7:27:75:80:
         98:ee:81:8f:b5:d4:ff:c2:da:d8:81:df:ff:6b:f7:21:01:a2:
         54:8a:14:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:16 2025 by rpki-client on console.sobornost.net