Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a653030303a3a2f33352d3335203d3e20323634303232.roa
File:                     323830343a323939303a653030303a3a2f33352d3335203d3e20323634303232.roa (raw, json)
Hash identifier:          Yj7JkGzK8O1h1ENMI3Z4iemc9qcroQeSjEpMzdLkm0A=
Subject key identifier:   3C:EF:F5:63:40:3E:BA:74:03:52:28:1A:BC:62:A4:60:B8:C3:0B:05
Certificate issuer:       /CN=F63047CFCA73277026C41BFD930CC304F5F342B7
Certificate serial:       28857125DB069BA65CAD75A3BFDF15CD5B67D375
Authority key identifier: F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a653030303a3a2f33352d3335203d3e20323634303232.roa
Signing time:             Fri 25 Apr 2025 14:05:02 +0000
ROA not before:           Fri 25 Apr 2025 14:00:02 +0000
ROA not after:            Fri 24 Apr 2026 14:05:02 +0000
asID:                     264022
IP address blocks:        2804:2990:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl
                          rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 09:17:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:85:71:25:db:06:9b:a6:5c:ad:75:a3:bf:df:15:cd:5b:67:d3:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F63047CFCA73277026C41BFD930CC304F5F342B7
        Validity
            Not Before: Apr 25 14:00:02 2025 GMT
            Not After : Apr 24 14:05:02 2026 GMT
        Subject: CN=3CEFF563403EBA740352281ABC62A460B8C30B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:95:df:fe:e1:da:6a:bf:2a:20:28:55:e6:b3:
                    02:07:11:4b:38:8f:3e:18:be:3d:d6:9a:e2:1c:2d:
                    f7:01:d2:98:d2:09:66:7f:a5:9c:de:de:90:9e:5e:
                    45:c9:c9:c4:02:fc:cb:0a:b7:75:c8:00:9c:52:65:
                    d3:47:1e:99:36:04:80:d8:5e:63:a8:4f:3e:d1:85:
                    33:10:af:dc:6c:96:b2:08:36:73:4a:9d:4d:f7:53:
                    6d:f2:0f:b1:8b:67:35:79:1d:76:6c:7c:f4:ed:77:
                    57:c5:d1:86:ba:f5:52:0a:63:9a:ed:f9:86:60:6e:
                    7b:c0:84:ec:bf:1a:10:ec:07:f9:8d:59:2f:18:09:
                    24:9d:82:d9:73:04:27:5d:d3:a1:e0:bc:5d:53:b9:
                    fc:54:b6:ab:bf:b0:90:2b:b9:c5:8f:93:52:a5:9e:
                    c3:53:07:db:22:d9:40:c5:4a:1c:68:bf:17:12:4a:
                    6a:97:d2:2f:88:c3:f9:00:b7:7d:64:06:a1:83:13:
                    71:21:28:bf:3e:d3:b0:b7:2b:a3:18:2a:d0:4e:8e:
                    a0:9c:f4:40:56:aa:53:7f:ec:22:00:31:ee:b9:47:
                    56:46:10:aa:c2:05:fe:98:b5:81:7f:bb:78:f3:56:
                    6f:92:ce:26:c7:58:aa:5e:39:2e:57:e9:e9:c1:fa:
                    ea:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EF:F5:63:40:3E:BA:74:03:52:28:1A:BC:62:A4:60:B8:C3:0B:05
            X509v3 Authority Key Identifier:
                keyid:F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a653030303a3a2f33352d3335203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2990:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         25:ed:9f:05:a7:8f:4b:29:5b:07:95:3a:6c:f0:ed:af:df:a4:
         fa:e5:50:93:35:43:dd:89:e0:93:c8:d8:87:f4:76:84:a0:c6:
         0c:29:51:6c:64:f5:36:e0:50:fa:b7:5b:64:46:15:50:8d:67:
         21:0a:ed:0a:d7:0c:6b:5a:79:dc:dd:99:ce:d6:52:b6:2f:83:
         32:ff:00:11:06:34:84:0a:a8:4e:28:28:4b:8d:4d:86:73:d3:
         9f:51:2b:19:14:a6:0d:9f:b1:bb:ee:0d:fa:59:63:4f:bc:29:
         45:d8:8c:1b:36:d2:50:cb:65:41:3b:b3:6e:ec:cb:8b:c2:4d:
         79:4c:06:5a:4c:0c:ae:fc:bb:9e:f0:1c:7c:09:22:44:da:53:
         55:67:aa:cf:d8:14:d9:da:07:a4:10:b9:20:e8:b8:50:b4:a2:
         09:36:61:86:b2:6f:bf:64:35:dc:d1:16:90:ea:95:71:ee:44:
         ee:22:12:fc:60:50:6a:5d:07:9e:a1:a6:10:83:95:a6:f4:37:
         db:7f:d8:31:4b:ee:c4:cd:2a:aa:8e:0e:fa:56:1d:87:6f:24:
         e8:f6:00:27:45:9f:b1:e5:e8:05:e2:07:ce:73:f8:80:85:fd:
         6c:4f:50:09:80:41:93:3e:c5:7f:dc:15:35:b5:41:36:5a:be:
         63:20:bf:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:27:07 2025 by rpki-client