Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a313a3a2f34382d3438203d3e20323635333330.roa
File:                     323830343a326533303a313a3a2f34382d3438203d3e20323635333330.roa (raw, json)
Hash identifier:          ekQiOk66yjXXxrkAbjgn8yhj4Y0kMWNy89fTFuKpMxo=
Subject key identifier:   CF:BD:A2:C3:D4:86:81:28:54:2A:EC:15:D1:77:79:CE:0C:84:19:77
Certificate issuer:       /CN=A4A432E63DF7D41D50FADC5A6469974D42C44738
Certificate serial:       3336B04154E95569D7777DFBB825149D32AFCAF5
Authority key identifier: A4:A4:32:E6:3D:F7:D4:1D:50:FA:DC:5A:64:69:97:4D:42:C4:47:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4A432E63DF7D41D50FADC5A6469974D42C44738.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a313a3a2f34382d3438203d3e20323635333330.roa
Signing time:             Thu 05 Jun 2025 01:05:49 +0000
ROA not before:           Thu 05 Jun 2025 01:00:49 +0000
ROA not after:            Thu 04 Jun 2026 01:05:49 +0000
asID:                     265330
IP address blocks:        2804:2e30:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/A4A432E63DF7D41D50FADC5A6469974D42C44738.crl
                          rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/A4A432E63DF7D41D50FADC5A6469974D42C44738.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4A432E63DF7D41D50FADC5A6469974D42C44738.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 23:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:36:b0:41:54:e9:55:69:d7:77:7d:fb:b8:25:14:9d:32:af:ca:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4A432E63DF7D41D50FADC5A6469974D42C44738
        Validity
            Not Before: Jun  5 01:00:49 2025 GMT
            Not After : Jun  4 01:05:49 2026 GMT
        Subject: CN=CFBDA2C3D4868128542AEC15D17779CE0C841977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c3:d7:13:05:70:e2:5f:02:18:3d:47:ff:53:
                    d7:cd:8c:ff:a6:9e:d6:c1:1e:88:45:22:cb:58:c5:
                    c1:f7:e6:50:3f:30:9f:de:8f:8c:47:8c:de:e1:ca:
                    a3:86:35:f2:66:59:04:a1:6e:83:5a:2c:4d:6a:9b:
                    71:b7:29:e5:c3:53:4b:33:0e:87:29:4e:ea:50:0d:
                    48:85:12:f6:37:1b:4b:24:57:72:51:0a:31:47:d5:
                    60:1a:2f:0a:d7:2a:70:41:56:d0:8a:32:6c:40:43:
                    70:84:43:18:f6:c0:ae:09:e0:97:69:b4:45:85:c4:
                    09:77:7b:18:48:43:30:11:3b:08:9c:78:e9:d9:cf:
                    25:ed:f8:0b:b3:85:70:44:3f:2a:80:fb:e6:74:89:
                    09:d8:38:53:e5:d1:c0:5c:07:40:6f:cd:fa:10:4f:
                    d9:04:c3:45:d6:19:e7:a9:04:88:6f:c7:a9:42:8f:
                    86:d5:39:13:39:76:a4:83:c8:04:16:5b:79:f1:d8:
                    e8:54:73:e0:b0:94:9e:22:a0:1c:32:bd:d9:94:48:
                    28:d2:15:70:5c:c0:c6:8e:65:94:02:a2:94:bb:59:
                    40:c8:7e:86:fe:59:31:04:e4:d0:61:d6:ab:dc:9e:
                    64:12:9d:3d:97:48:88:ef:b5:14:3b:2e:b6:c3:49:
                    da:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BD:A2:C3:D4:86:81:28:54:2A:EC:15:D1:77:79:CE:0C:84:19:77
            X509v3 Authority Key Identifier:
                keyid:A4:A4:32:E6:3D:F7:D4:1D:50:FA:DC:5A:64:69:97:4D:42:C4:47:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/A4A432E63DF7D41D50FADC5A6469974D42C44738.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4A432E63DF7D41D50FADC5A6469974D42C44738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a313a3a2f34382d3438203d3e20323635333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e30:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:bd:1b:a5:e3:61:7f:29:cc:bb:3f:03:9b:f5:79:0c:f4:80:
         06:4c:aa:b1:b5:d8:0f:d2:0a:c8:b1:75:c9:38:40:0d:03:37:
         42:c4:cc:3f:bf:3e:5d:d2:43:09:cd:79:3d:b4:33:f8:68:63:
         ee:a6:71:34:d2:0f:be:27:8d:22:8e:f9:21:63:a0:fd:68:c2:
         e8:4a:16:a0:96:a3:d9:68:40:93:22:1c:ec:1c:41:f1:fc:00:
         10:19:05:99:f3:1b:04:a1:a1:6f:b7:2e:c1:b3:e4:3d:2c:89:
         20:19:ee:50:f1:f9:83:ae:bc:8b:87:20:1f:6c:c4:40:d8:58:
         7d:60:01:3d:ab:5c:df:6b:c5:83:c3:8a:9f:d7:3b:64:70:e0:
         45:3f:79:61:a5:c7:a7:4c:59:2d:76:fe:66:28:72:41:78:05:
         3f:1f:3d:5f:82:d0:ac:06:ed:5a:c7:32:2f:49:2e:f2:de:eb:
         2c:d9:d3:5e:bd:38:c2:94:40:0d:0c:ea:10:65:07:32:51:f1:
         75:7d:59:c1:31:82:ca:fe:13:f3:ad:8c:cd:e4:25:90:ab:c2:
         36:7d:f5:9c:8d:a0:59:a8:d8:ab:85:2c:e8:af:58:fd:e7:b3:
         d0:a0:72:95:18:64:a6:ba:0f:b3:fe:9f:e8:6d:c4:6f:78:d1:
         27:fb:69:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 11:14:24 2025 by rpki-client