Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a3a2f33322d3430203d3e203532393332.roa
File:                     323830343a323862303a3a2f33322d3430203d3e203532393332.roa (raw, json)
Hash identifier:          A9IESGVVB5yQU2RG8rX+8oPt2fkdP3Bu+kY+O7dosMw=
Subject key identifier:   10:E4:8C:93:00:C9:0E:3B:E0:04:49:A6:FF:38:33:77:0A:FE:EA:09
Certificate issuer:       /CN=058629EB1C805566CA700E3A2EE9B2B066B42FB4
Certificate serial:       188ED6806109598DF43594825971E93AEFB1FC3C
Authority key identifier: 05:86:29:EB:1C:80:55:66:CA:70:0E:3A:2E:E9:B2:B0:66:B4:2F:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/058629EB1C805566CA700E3A2EE9B2B066B42FB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a3a2f33322d3430203d3e203532393332.roa
Signing time:             Tue 29 Apr 2025 18:22:26 +0000
ROA not before:           Tue 29 Apr 2025 18:17:26 +0000
ROA not after:            Tue 28 Apr 2026 18:22:26 +0000
asID:                     52932
IP address blocks:        2804:28b0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.crl
                          rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/058629EB1C805566CA700E3A2EE9B2B066B42FB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 20:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:8e:d6:80:61:09:59:8d:f4:35:94:82:59:71:e9:3a:ef:b1:fc:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058629EB1C805566CA700E3A2EE9B2B066B42FB4
        Validity
            Not Before: Apr 29 18:17:26 2025 GMT
            Not After : Apr 28 18:22:26 2026 GMT
        Subject: CN=10E48C9300C90E3BE00449A6FF3833770AFEEA09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f5:72:19:71:26:26:9e:38:3e:0b:91:45:4c:
                    03:f4:7e:c7:0d:fa:61:a8:97:28:e7:92:bd:d6:7d:
                    bc:7e:57:f1:8a:09:a6:31:fd:cb:7d:bf:57:f0:9f:
                    03:99:59:82:f6:44:95:77:6d:d7:e6:52:0b:93:6c:
                    3c:92:f1:48:47:80:fd:15:12:f1:6e:60:8c:30:4e:
                    e2:91:f2:4d:ad:45:bc:cb:00:d5:0d:64:5f:1a:4f:
                    28:33:02:37:c1:77:df:a1:62:bb:b7:3b:04:6c:90:
                    57:30:10:84:4c:fd:0d:2a:8f:9a:bd:2f:8d:64:01:
                    76:0e:ce:26:2b:c3:7a:86:34:c6:4c:d8:a4:c8:b2:
                    f5:dd:1a:29:3a:bd:3c:20:52:82:87:e4:d6:1a:34:
                    d7:72:dd:4a:19:e3:92:fc:fe:72:25:f6:35:e5:2d:
                    08:91:ab:e4:6b:85:96:11:48:04:8d:84:75:ac:93:
                    9b:b7:03:31:94:fb:ff:8b:61:dc:84:39:da:4f:e2:
                    9a:55:f5:3f:98:80:91:e9:de:eb:e5:00:8d:8a:93:
                    c8:06:6f:b7:f8:a0:65:f9:3d:4a:ff:8f:2d:59:87:
                    11:64:4c:72:55:63:2d:18:28:f6:e8:d0:62:7e:fb:
                    9d:08:2e:56:66:70:20:10:9b:bd:bf:51:db:fd:dd:
                    51:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E4:8C:93:00:C9:0E:3B:E0:04:49:A6:FF:38:33:77:0A:FE:EA:09
            X509v3 Authority Key Identifier:
                keyid:05:86:29:EB:1C:80:55:66:CA:70:0E:3A:2E:E9:B2:B0:66:B4:2F:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/058629EB1C805566CA700E3A2EE9B2B066B42FB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a3a2f33322d3430203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:c5:1a:6f:ca:03:5b:34:5b:ec:d0:97:d1:02:f3:d1:7b:6f:
         1d:eb:c4:a3:94:e5:33:f5:5e:a7:4f:78:cc:c3:f1:00:90:e3:
         fa:11:ba:58:94:53:8b:67:50:72:d0:51:3b:0a:bb:db:24:bb:
         bd:09:cb:29:fd:8b:76:80:a2:3f:6e:07:f1:a2:45:8e:1b:92:
         bf:22:cb:e0:ed:88:c5:d1:a5:54:55:10:cc:0d:a6:97:ab:af:
         b2:4c:92:59:cb:7a:2a:bc:fa:9a:5a:f0:71:63:d8:3b:02:37:
         b2:2b:ba:f4:a9:e8:78:72:8b:f1:82:71:41:65:1f:23:97:21:
         1b:59:df:79:dc:ff:79:d7:19:1d:9f:be:38:58:28:fd:8f:34:
         02:cb:5e:3f:ac:f7:48:22:ce:91:36:7d:4e:f9:21:4f:58:61:
         5a:38:fd:13:78:e0:2c:4a:42:de:7a:cb:b1:7e:ee:37:74:db:
         b0:1e:99:24:06:74:0a:f5:09:4a:0f:84:63:a5:53:92:86:ba:
         c1:3d:b3:09:2d:92:5b:b9:f8:60:a2:74:18:ac:7f:ed:19:48:
         ff:8e:c8:77:d1:fb:af:59:d8:9a:17:1f:7a:13:dd:64:46:4e:
         c5:14:0e:c5:f9:74:ac:a5:ec:e8:9e:86:cd:a9:7c:a7:a7:1a:
         fe:ab:75:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:47:07 2025 by rpki-client