Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/323830343a386634303a3a2f33322d3438203d3e20323733343739.roa
File:                     323830343a386634303a3a2f33322d3438203d3e20323733343739.roa (raw, json)
Hash identifier:          SKX2uUnNcwX7Q7xx7/JfMAsyY5D9bvlYs3WlWiArHR8=
Subject key identifier:   80:15:4F:97:45:ED:26:4A:E4:C9:01:F3:1D:16:15:46:BA:F6:3B:AE
Certificate issuer:       /CN=2E713E923F749B726D4F297C3D5A9D5A9B7C2378
Certificate serial:       54555A27FAFB2AB4126C8CB8E4D663C34F48A35F
Authority key identifier: 2E:71:3E:92:3F:74:9B:72:6D:4F:29:7C:3D:5A:9D:5A:9B:7C:23:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E713E923F749B726D4F297C3D5A9D5A9B7C2378.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/323830343a386634303a3a2f33322d3438203d3e20323733343739.roa
Signing time:             Tue 18 Feb 2025 18:05:29 +0000
ROA not before:           Tue 18 Feb 2025 18:00:29 +0000
ROA not after:            Tue 17 Feb 2026 18:05:29 +0000
asID:                     273479
IP address blocks:        2804:8f40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/2E713E923F749B726D4F297C3D5A9D5A9B7C2378.crl
                          rsync://rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/2E713E923F749B726D4F297C3D5A9D5A9B7C2378.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E713E923F749B726D4F297C3D5A9D5A9B7C2378.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 15:13:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:55:5a:27:fa:fb:2a:b4:12:6c:8c:b8:e4:d6:63:c3:4f:48:a3:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E713E923F749B726D4F297C3D5A9D5A9B7C2378
        Validity
            Not Before: Feb 18 18:00:29 2025 GMT
            Not After : Feb 17 18:05:29 2026 GMT
        Subject: CN=80154F9745ED264AE4C901F31D161546BAF63BAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:74:16:f5:fa:e7:a8:3f:75:ed:9c:29:7c:36:
                    d0:16:f0:a6:fb:bc:97:44:16:d6:fa:d1:d5:4a:ef:
                    ad:d7:ff:7a:bb:1e:83:79:cb:af:68:20:d0:f1:69:
                    df:8e:b9:e9:49:dd:a3:4a:c1:7a:9f:5d:af:0a:45:
                    91:a9:9b:0f:c4:2c:89:bf:47:8e:cb:5a:f8:11:9b:
                    76:3d:a2:24:dc:07:34:27:01:62:b7:e5:fe:b3:c2:
                    9c:4f:6b:0a:f2:51:dc:2e:fd:4a:7e:ee:fc:90:8a:
                    33:f1:a2:c3:9a:79:77:5a:31:0f:d0:41:5a:04:c7:
                    aa:31:58:ca:9c:05:7c:81:7c:cd:5b:9f:e4:5b:ae:
                    75:06:ec:5a:33:bd:26:a2:16:e3:5f:4b:32:6b:ad:
                    a2:1f:51:66:d2:89:e7:6f:1b:f6:9c:4e:48:34:2e:
                    e1:25:20:4d:7b:8e:21:43:48:a1:1b:a5:90:82:15:
                    68:31:90:12:f4:45:24:ea:b4:10:89:f5:1e:c6:82:
                    91:96:5e:c1:44:6b:a3:bf:c2:f3:7d:cb:a9:13:1e:
                    56:9d:3b:f3:9a:66:3d:0a:ac:24:1a:b0:b2:7d:13:
                    81:46:3f:4b:22:2d:51:66:68:0a:02:cc:62:6c:dd:
                    36:6a:19:a8:53:f6:85:b0:67:04:2a:0a:47:dd:bd:
                    1e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:15:4F:97:45:ED:26:4A:E4:C9:01:F3:1D:16:15:46:BA:F6:3B:AE
            X509v3 Authority Key Identifier:
                keyid:2E:71:3E:92:3F:74:9B:72:6D:4F:29:7C:3D:5A:9D:5A:9B:7C:23:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/2E713E923F749B726D4F297C3D5A9D5A9B7C2378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E713E923F749B726D4F297C3D5A9D5A9B7C2378.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/323830343a386634303a3a2f33322d3438203d3e20323733343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:40:e3:76:f1:1a:1b:38:d1:dc:c2:6d:69:b2:09:4f:b0:c9:
         cf:3a:bb:bd:33:36:d3:8e:32:ac:17:a9:83:d8:72:81:12:7c:
         b8:c9:d2:80:12:61:26:a3:f9:ed:94:b8:4a:f3:97:1d:bc:99:
         e5:5d:78:69:ca:0c:00:60:87:e1:eb:3e:01:19:e7:7c:d2:5f:
         ed:e1:16:ba:9f:fe:4f:70:9a:07:8b:26:5b:81:2f:5c:ab:04:
         29:1c:3d:81:f1:d8:85:28:00:66:32:24:e7:11:4e:07:39:aa:
         e4:79:b4:50:54:37:eb:c1:80:f4:71:02:74:93:13:b9:7b:08:
         f5:dc:b4:52:61:89:66:87:71:b0:83:73:62:b6:08:c9:64:81:
         c5:12:05:1d:4d:e8:36:0a:4b:81:98:13:a6:53:20:0f:a4:a2:
         e8:50:ad:94:f5:4b:e5:45:56:b3:fe:b9:f3:9e:d2:a2:0c:06:
         b6:22:41:7c:19:f4:fb:ec:61:dc:2d:3d:2e:2a:1d:c7:98:46:
         88:c6:2b:0f:8a:6a:26:65:79:72:f8:32:4c:6d:bc:c0:9d:25:
         db:4d:54:8f:52:e7:01:07:58:30:2c:c9:10:b6:30:a4:92:3b:
         d2:5c:bb:57:2e:01:1b:c9:ae:3c:5b:dc:e2:7e:04:14:22:07:
         b3:57:82:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:09:05 2025 by rpki-client