Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a323030303a3a2f33352d3335203d3e203238323532.roa
File:                     323830343a313534343a323030303a3a2f33352d3335203d3e203238323532.roa (raw, json)
Hash identifier:          MHK1eYP4dtUGzNI5mAiUuLM4gf+Wlf1fapQDY07UvoE=
Subject key identifier:   4C:EB:25:5F:F8:E5:B0:B3:8B:51:66:C1:B1:58:D8:6C:F1:92:7A:F8
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       24F36D40466A124E46887583422F01481FE37CB4
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a323030303a3a2f33352d3335203d3e203238323532.roa
Signing time:             Wed 09 Apr 2025 18:47:13 +0000
ROA not before:           Wed 09 Apr 2025 18:42:13 +0000
ROA not after:            Wed 08 Apr 2026 18:47:13 +0000
asID:                     28252
IP address blocks:        2804:1544:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 04:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f3:6d:40:46:6a:12:4e:46:88:75:83:42:2f:01:48:1f:e3:7c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Apr  9 18:42:13 2025 GMT
            Not After : Apr  8 18:47:13 2026 GMT
        Subject: CN=4CEB255FF8E5B0B38B5166C1B158D86CF1927AF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:60:75:2d:7f:04:3e:19:fd:2f:cc:24:c5:3e:
                    d1:67:67:fe:22:ce:94:d5:1d:f5:87:8b:67:41:d5:
                    3f:47:f7:0c:ea:a7:53:2f:5a:2b:82:ee:c5:7e:b9:
                    f6:46:42:d2:53:e3:99:63:19:d3:7a:65:45:b7:12:
                    73:35:28:e8:d1:86:58:74:ec:a0:51:2b:4d:39:1d:
                    8f:ef:87:f4:ca:13:65:12:e4:a1:5f:40:f2:b8:b1:
                    0f:ff:c2:ab:4f:9f:ad:c8:29:12:e0:78:77:b0:1a:
                    de:ae:2c:67:34:c0:11:85:ee:a8:7a:70:87:63:6b:
                    50:88:66:cc:60:1e:e8:9d:00:53:7f:08:79:93:9a:
                    5b:0e:70:d9:9d:f2:6a:e2:58:3b:57:b7:51:5c:ba:
                    9e:c9:ec:a0:8d:1e:ec:10:17:dc:4c:b3:66:27:80:
                    03:89:bc:5b:03:d8:f5:c2:30:72:af:62:f4:06:d7:
                    d4:f2:ef:f3:24:81:1e:02:5d:e0:6b:ed:3e:9f:83:
                    8e:a7:37:f7:cb:c4:5f:c9:37:99:13:93:6b:76:0e:
                    01:db:8d:f0:74:b1:44:22:0c:a0:d3:5a:00:8b:58:
                    f7:99:dc:5b:51:31:e5:aa:d5:e3:9b:72:78:99:a7:
                    5a:0b:29:8e:92:58:58:16:12:50:0f:97:cf:89:66:
                    34:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EB:25:5F:F8:E5:B0:B3:8B:51:66:C1:B1:58:D8:6C:F1:92:7A:F8
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a323030303a3a2f33352d3335203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1544:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         29:a4:ff:bf:8e:7e:ef:7a:a4:62:b2:98:ec:e4:0a:38:fb:52:
         ab:fe:5e:3a:29:38:54:d8:81:91:e4:3b:a0:b5:3a:ac:6f:fd:
         14:75:fe:83:29:b1:59:dd:c9:13:2d:c4:5b:78:ee:45:61:0f:
         4e:a6:e6:34:d5:93:fa:7d:ef:c4:05:6b:4e:8d:c5:03:ee:a3:
         12:e4:ff:b1:24:6a:71:9c:c7:8d:f9:2e:4c:a2:a1:02:56:01:
         f4:e6:66:fe:6d:35:d9:f1:7d:6c:67:cc:ba:ee:fd:50:c4:66:
         d5:a2:9b:bd:eb:a0:ea:bc:f8:d2:9b:30:5c:37:b1:b5:12:29:
         70:86:f1:42:9e:ba:4c:5d:55:8d:1d:5a:b4:77:80:dc:41:0b:
         05:b6:16:87:9f:8a:11:a6:b1:39:30:c0:76:6a:89:02:22:46:
         9f:41:e6:aa:e4:90:e3:15:57:3e:bb:20:45:dd:2c:40:66:a1:
         1f:33:50:1e:e8:6a:12:ea:66:38:43:55:13:f8:ce:5d:ff:8f:
         b9:9a:e7:9c:21:a8:a6:b6:ad:8d:27:1d:e2:8e:aa:97:12:0d:
         c2:42:70:fa:2e:56:c2:20:07:51:c0:05:16:84:51:13:62:a8:
         30:57:ea:6b:87:dc:36:6e:ff:2b:9d:72:81:9a:1b:64:4a:c6:
         86:e8:54:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 18:00:32 2025 by rpki-client