Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/323830343a3863303a3a2f33322d3438203d3e20323632333931.roa
File:                     323830343a3863303a3a2f33322d3438203d3e20323632333931.roa (raw, json)
Hash identifier:          YKwG00j0fRBCjw+CdOU3whAtn8J3rw+T6gUyr30+diU=
Subject key identifier:   A1:DB:1B:99:B2:D3:59:CD:05:E4:2B:34:B0:66:5A:73:3B:A6:FE:8E
Certificate issuer:       /CN=3B45A474FDBCECA94BB8CBC36E107BC96D7A9194
Certificate serial:       618A119487FA85BC414D74F683EC95FCDCA48C24
Authority key identifier: 3B:45:A4:74:FD:BC:EC:A9:4B:B8:CB:C3:6E:10:7B:C9:6D:7A:91:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/323830343a3863303a3a2f33322d3438203d3e20323632333931.roa
Signing time:             Mon 07 Apr 2025 18:12:36 +0000
ROA not before:           Mon 07 Apr 2025 18:07:36 +0000
ROA not after:            Mon 06 Apr 2026 18:12:36 +0000
asID:                     262391
IP address blocks:        2804:8c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:8a:11:94:87:fa:85:bc:41:4d:74:f6:83:ec:95:fc:dc:a4:8c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B45A474FDBCECA94BB8CBC36E107BC96D7A9194
        Validity
            Not Before: Apr  7 18:07:36 2025 GMT
            Not After : Apr  6 18:12:36 2026 GMT
        Subject: CN=A1DB1B99B2D359CD05E42B34B0665A733BA6FE8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6b:71:dd:e0:38:54:cc:d3:06:5c:49:fc:d8:
                    ca:6e:2b:ad:7d:6a:f9:03:81:2a:e9:9c:77:da:0b:
                    59:7f:12:d2:93:6c:d9:e5:63:5a:8c:1d:41:ec:66:
                    22:05:3a:f1:43:44:50:33:20:e7:6d:53:83:cd:3b:
                    a1:e9:28:67:bc:ac:08:06:d9:64:87:cf:5a:29:55:
                    62:c3:de:c6:1b:9a:6f:b4:da:73:9d:60:a7:5f:00:
                    a2:2f:44:17:ee:0a:d5:14:79:f4:b0:1a:66:2d:81:
                    79:05:b2:59:b3:2c:df:af:94:d7:39:e2:99:1c:38:
                    35:f5:2f:b9:bc:41:07:24:41:65:7f:f8:9d:be:46:
                    19:c1:fa:18:8e:67:0c:eb:11:ab:ab:ac:4a:9a:cf:
                    5a:05:f0:81:4b:6f:8c:d9:aa:7b:2d:d9:dd:1f:d7:
                    cd:fe:0d:68:e6:9d:ed:f6:a5:1d:c4:3d:3a:d6:a1:
                    d9:da:c7:9d:4c:a0:9d:95:87:a6:3e:07:05:48:cf:
                    3d:75:bd:18:ef:21:ac:26:81:4e:ce:43:ba:47:ee:
                    25:78:03:b7:b1:c2:10:c9:3e:9f:34:29:b1:03:b0:
                    b9:d1:99:63:c5:6b:66:71:b8:49:8b:dd:bc:66:56:
                    9a:f2:8c:2d:a7:39:b6:80:7c:21:bb:88:a5:39:45:
                    ad:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DB:1B:99:B2:D3:59:CD:05:E4:2B:34:B0:66:5A:73:3B:A6:FE:8E
            X509v3 Authority Key Identifier:
                keyid:3B:45:A4:74:FD:BC:EC:A9:4B:B8:CB:C3:6E:10:7B:C9:6D:7A:91:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/323830343a3863303a3a2f33322d3438203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:7f:e8:75:0c:6f:e7:55:7a:26:f1:8c:b5:d0:e6:0b:bf:9f:
         9c:de:eb:59:71:f2:3a:30:8c:eb:e6:23:f2:a5:68:c1:be:57:
         c6:f8:27:6f:1b:16:d1:f6:82:a0:e5:48:e5:00:f1:a8:56:f7:
         15:cc:a4:df:83:14:4d:79:f4:1b:ad:c4:6c:2d:c8:06:32:d1:
         d8:93:62:23:a0:6d:02:be:17:b8:6b:32:8b:e7:68:92:b0:ad:
         da:45:6a:6d:47:3b:16:bd:55:a0:6d:1a:54:eb:93:fa:a0:5c:
         4d:0a:7e:a9:a3:25:3b:fa:5d:41:28:25:e0:e5:6d:7a:1e:cb:
         fe:4b:c0:28:dc:6b:02:ec:48:39:ae:e5:30:df:2b:27:62:46:
         37:3d:0a:e6:31:3f:73:d7:bd:47:0a:95:ae:3c:de:d1:ca:a0:
         9e:88:b8:33:67:71:81:63:a0:01:f6:e3:0e:c8:43:60:2c:52:
         e8:c7:a0:77:34:ac:a5:c9:9c:13:69:2b:9b:0a:f9:b0:4a:0f:
         ee:4e:ef:88:38:64:6a:3f:53:e0:ba:0d:78:b5:24:4f:7a:3d:
         62:34:6e:1a:7d:c1:6a:75:5c:50:8b:9b:f3:27:11:0e:ae:f3:
         fd:0d:41:03:e0:50:02:20:d7:ca:ec:99:0b:0c:d8:6b:a2:b3:
         3b:0b:17:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:49 2025 by rpki-client on console.sobornost.net