Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a313030333a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a313030333a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          wABqUXfcMAJ2Wy7wIiHNjwCLro8pIMoo5k/RSTaPzH4=
Subject key identifier:   0E:94:21:32:EC:A2:D6:23:D1:1C:17:87:00:81:11:DE:09:7D:1D:73
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       4C20D6E996381CE62FE09E3969CAA9600F5DB6AB
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a313030333a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Wed 05 Mar 2025 19:00:17 +0000
ROA not before:           Wed 05 Mar 2025 18:55:17 +0000
ROA not after:            Wed 04 Mar 2026 19:00:17 +0000
asID:                     266623
IP address blocks:        2804:3ed4:1003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 18:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:20:d6:e9:96:38:1c:e6:2f:e0:9e:39:69:ca:a9:60:0f:5d:b6:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Mar  5 18:55:17 2025 GMT
            Not After : Mar  4 19:00:17 2026 GMT
        Subject: CN=0E942132ECA2D623D11C1787008111DE097D1D73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e1:ce:bd:dd:df:c8:fb:24:a3:ea:9a:49:75:
                    e9:f5:15:2b:2d:cd:b8:13:80:17:ae:4d:66:f5:ea:
                    45:4a:74:f2:45:db:04:d6:15:dd:ad:9c:54:34:38:
                    ec:99:22:aa:e7:bf:ae:57:fc:1d:6a:5f:2d:93:6e:
                    de:89:cb:3f:de:24:05:93:ef:39:ad:c5:56:1c:a1:
                    2e:9a:22:28:70:67:a7:f8:51:ea:b4:33:af:af:cd:
                    f3:6a:8c:ae:0e:36:66:48:28:9d:b6:e3:b5:46:00:
                    28:76:c6:ca:a7:b0:c4:72:56:2f:10:9e:6d:ff:e1:
                    bc:29:df:23:d1:56:f7:57:ac:89:fb:d5:bc:47:0b:
                    ed:31:d1:03:eb:95:e3:63:be:2c:5e:65:e5:54:6f:
                    0e:02:e6:83:91:60:a6:c4:9c:3f:55:17:5e:6b:50:
                    38:f2:f1:2e:ce:07:a9:5c:06:5d:f3:87:10:1f:3f:
                    e9:1e:25:04:14:53:90:db:70:25:f7:5f:28:a5:24:
                    43:78:8e:37:5b:f6:ac:5b:b5:f4:28:4f:d8:5d:5a:
                    51:e3:43:1c:c9:2e:96:86:91:8a:b8:1e:01:af:f5:
                    5f:f6:44:44:82:c1:78:ce:f9:65:63:db:d1:22:09:
                    59:d7:5a:f9:76:3b:95:fd:62:0b:8f:4e:00:cd:ce:
                    aa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:94:21:32:EC:A2:D6:23:D1:1C:17:87:00:81:11:DE:09:7D:1D:73
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a313030333a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:1003::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:d2:b4:ed:e0:fc:21:ea:1e:72:e7:05:f1:cd:aa:5e:4d:8d:
         59:7a:a8:47:b3:55:05:5f:2f:ea:e4:db:75:53:4d:99:ef:58:
         c3:91:46:69:e3:72:fa:6c:cf:7f:50:2c:8c:d0:48:d1:d2:8a:
         d3:57:32:a6:d3:0c:db:02:fa:49:0e:a9:de:d9:49:f3:dc:cf:
         9f:e4:ba:e3:43:5c:e0:cd:3d:e1:35:c8:70:3d:7f:fe:d0:56:
         16:89:cd:d9:82:46:c0:e2:e4:62:be:11:eb:90:e5:5f:de:86:
         f7:44:b6:a3:97:4e:5e:47:2b:94:68:a6:25:bc:b4:4f:d2:b6:
         eb:66:f2:fe:6b:81:7a:af:84:81:0e:65:dc:c5:82:46:dd:18:
         e9:1d:a9:3f:f7:47:db:8d:77:7a:0e:e2:cc:45:79:ac:ce:7d:
         99:46:92:94:62:37:76:88:7f:7f:8d:a6:1b:24:07:df:76:56:
         fc:5d:8c:22:49:b3:f9:54:73:cb:b6:ba:73:06:d3:06:c2:cc:
         5a:5c:94:50:bb:5f:97:8b:a4:9c:34:8e:fb:fc:1e:05:0e:02:
         e1:a7:95:f8:e5:50:56:63:49:cb:77:ef:4f:f9:56:79:30:0d:
         29:59:9f:68:b8:23:03:60:c7:9e:9a:82:24:1b:73:93:ec:5f:
         d3:d7:77:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:38:16 2025 by rpki-client