Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a3930303a3a2f34302d3430203d3e20323632363837.roa
File:                     323830343a333835633a3930303a3a2f34302d3430203d3e20323632363837.roa (raw, json)
Hash identifier:          dHpI49DP5FtpHBsIThxWk0t7/rk2lA3Pvavl3PvRAYM=
Subject key identifier:   5C:16:05:46:5C:3A:E8:20:75:BC:7E:72:7A:48:63:16:DE:32:29:6B
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       132B560802B57DD49C14964D0CDADBB8CD4CCD34
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a3930303a3a2f34302d3430203d3e20323632363837.roa
Signing time:             Tue 22 Apr 2025 21:00:03 +0000
ROA not before:           Tue 22 Apr 2025 20:55:03 +0000
ROA not after:            Tue 21 Apr 2026 21:00:03 +0000
asID:                     262687
IP address blocks:        2804:385c:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 08 May 2025 13:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2b:56:08:02:b5:7d:d4:9c:14:96:4d:0c:da:db:b8:cd:4c:cd:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: Apr 22 20:55:03 2025 GMT
            Not After : Apr 21 21:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:31:f9:f3:60:bc:55:13:87:81:ee:f5:46:a5:
                    44:33:db:97:dc:4d:24:79:b3:88:e1:2e:1d:dd:3c:
                    f0:ba:d6:db:86:62:03:f2:20:2b:51:46:2a:1a:07:
                    0e:6d:b2:22:fc:47:84:d3:97:27:41:92:18:a1:6d:
                    89:f1:d4:2e:e4:c5:f2:3f:28:fe:1f:28:f1:b3:bf:
                    01:f8:02:88:02:fb:48:b0:36:e8:f7:28:94:4c:6c:
                    ae:4c:8b:0b:24:47:92:98:2e:e7:0c:bb:33:f4:1b:
                    10:a3:4b:05:b9:fe:d9:0a:8c:c1:6c:c1:fa:e8:bb:
                    14:8f:7c:b2:b5:a8:ed:40:7e:a1:f5:a4:99:3a:5e:
                    25:40:09:5b:f3:35:49:7d:83:4f:98:58:10:5a:ef:
                    9d:e1:ec:48:68:08:b7:ae:7e:ee:a7:b2:1e:05:8e:
                    4f:8b:96:24:69:e4:70:a2:b5:e3:99:20:55:5b:84:
                    90:c5:9e:a7:40:28:ba:b0:70:50:54:fc:e3:b8:57:
                    d8:b5:7e:ee:c3:5a:41:2f:31:6e:48:37:86:69:0c:
                    e6:bd:1d:a8:d0:a4:9e:d2:d2:78:eb:ba:f8:8e:9e:
                    a1:d7:b1:13:8e:3d:d6:4e:a6:5e:72:c5:d6:3b:e0:
                    3f:ca:34:a3:9e:b6:ff:41:71:7c:32:db:b7:33:f7:
                    de:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:16:05:46:5C:3A:E8:20:75:BC:7E:72:7A:48:63:16:DE:32:29:6B
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a3930303a3a2f34302d3430203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         29:bc:78:29:44:fd:7b:1a:e0:fc:82:68:6e:05:db:9b:bd:83:
         5f:24:f6:d8:0f:8f:30:2a:24:a8:c6:c0:9a:dc:da:33:e3:f5:
         07:4f:98:59:95:ce:97:00:fb:eb:7c:df:54:a6:a1:b8:de:e1:
         41:09:8a:7c:69:09:b4:f5:59:fc:6b:8b:4b:2e:ad:e0:dd:71:
         70:6a:d0:80:b6:14:db:a2:15:b2:4b:39:8b:b8:24:41:26:16:
         79:79:cd:c5:a1:9c:23:73:fe:a0:a9:69:07:f5:d1:44:a1:d4:
         4a:1a:bd:19:67:5e:eb:b4:6c:e4:b6:f4:3d:e9:cf:22:2c:9e:
         9b:a3:5c:fb:17:a9:12:6e:28:23:26:5f:f1:a5:8a:03:84:91:
         9f:ea:11:1b:aa:46:4a:88:62:63:63:62:7f:c9:ac:80:9a:a8:
         8f:e1:d5:fa:a0:8c:1e:7a:ad:d5:b0:11:c1:9e:eb:59:8f:b2:
         85:ac:5d:41:8e:7b:84:bb:41:e2:81:69:60:18:3c:b4:2b:f0:
         35:56:af:c4:c8:cb:1c:e0:2e:7c:1f:9b:1d:e1:77:f0:57:c3:
         46:94:66:4e:13:df:ca:87:82:ef:a3:85:b3:c7:18:43:c0:10:
         17:cd:fa:f7:47:77:fb:f8:51:ac:0e:d9:e1:99:63:3c:ff:67:
         f6:24:12:e6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 7 18:58:02 2025 by rpki-client