Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/1/323830343a3962343a3a2f33322d3438203d3e20323632383732.roa
File:                     323830343a3962343a3a2f33322d3438203d3e20323632383732.roa (raw, json)
Hash identifier:          ksCkV3X0bkXGLAJ3u3fPZvzQRTpfZJdS/Vgz5VXTb84=
Subject key identifier:   E2:0C:24:51:65:33:B0:80:1B:B3:0F:77:4A:40:77:A2:23:6D:2C:DF
Certificate issuer:       /CN=87B55EA11CC3C5018472A7EF4105A798D366CC11
Certificate serial:       5B1ACB19E1556901035C77AA39315B67DF2D4BD0
Authority key identifier: 87:B5:5E:A1:1C:C3:C5:01:84:72:A7:EF:41:05:A7:98:D3:66:CC:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B55EA11CC3C5018472A7EF4105A798D366CC11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/1/323830343a3962343a3a2f33322d3438203d3e20323632383732.roa
Signing time:             Thu 06 Mar 2025 15:55:39 +0000
ROA not before:           Thu 06 Mar 2025 15:50:39 +0000
ROA not after:            Thu 05 Mar 2026 15:55:39 +0000
asID:                     262872
IP address blocks:        2804:9b4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/1/87B55EA11CC3C5018472A7EF4105A798D366CC11.crl
                          rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/1/87B55EA11CC3C5018472A7EF4105A798D366CC11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B55EA11CC3C5018472A7EF4105A798D366CC11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 08:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:1a:cb:19:e1:55:69:01:03:5c:77:aa:39:31:5b:67:df:2d:4b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87B55EA11CC3C5018472A7EF4105A798D366CC11
        Validity
            Not Before: Mar  6 15:50:39 2025 GMT
            Not After : Mar  5 15:55:39 2026 GMT
        Subject: CN=E20C24516533B0801BB30F774A4077A2236D2CDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:78:31:f4:dd:8f:1b:95:e0:97:99:78:85:7c:
                    be:94:11:f1:1e:8b:f6:8a:93:6c:10:0a:7d:8e:9c:
                    47:59:80:a4:11:f8:70:31:ba:29:c4:6e:04:82:8e:
                    57:f6:16:0b:64:26:1a:25:f0:2b:cf:64:ce:01:5e:
                    4e:b2:62:15:3d:a1:f0:c9:f8:39:78:d4:7a:98:85:
                    b7:04:6d:f0:32:a8:a2:72:44:e2:cc:ba:86:44:44:
                    bb:8a:ac:92:1a:c2:f9:65:b4:41:1e:a9:14:cd:aa:
                    a6:80:07:4f:94:56:91:d6:dc:43:df:aa:67:ae:5d:
                    66:f0:ce:dd:58:e5:9a:d3:d7:82:70:8d:f7:21:3c:
                    3e:30:b2:c6:2e:b3:0f:97:c1:24:61:07:99:2c:63:
                    30:2a:53:b3:9d:fe:e0:6c:f2:7a:14:99:51:c9:89:
                    b5:86:68:fb:ae:92:df:84:06:e3:ef:1c:b3:15:ce:
                    af:f2:e7:df:96:31:a2:9f:b5:b7:80:37:cc:71:81:
                    8a:1d:1f:1a:19:ed:d3:e0:41:15:3f:09:db:11:66:
                    77:f7:d3:eb:fa:45:d0:bf:de:6e:4a:e5:85:27:e6:
                    f0:6a:d4:60:ac:21:27:e1:0f:9c:b4:20:d2:02:aa:
                    37:b9:9c:22:9e:79:35:97:2d:f1:2c:76:a6:b6:83:
                    49:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0C:24:51:65:33:B0:80:1B:B3:0F:77:4A:40:77:A2:23:6D:2C:DF
            X509v3 Authority Key Identifier:
                keyid:87:B5:5E:A1:1C:C3:C5:01:84:72:A7:EF:41:05:A7:98:D3:66:CC:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/1/87B55EA11CC3C5018472A7EF4105A798D366CC11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B55EA11CC3C5018472A7EF4105A798D366CC11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/1/323830343a3962343a3a2f33322d3438203d3e20323632383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:22:05:31:12:16:19:73:a6:fb:02:b5:88:16:0a:ae:24:2f:
         e8:25:ef:91:d8:c7:b4:33:16:f3:69:20:4d:41:a8:c8:a5:13:
         50:e0:f9:65:c8:66:a4:f8:11:17:75:35:ee:0b:47:82:ca:d0:
         31:3d:9b:0a:f3:3c:d8:7d:b5:c9:11:ae:46:fc:d6:21:9f:8b:
         a3:78:dd:15:69:c6:91:d6:a7:b1:0d:72:4c:47:c5:c7:15:be:
         60:b9:f2:2c:e9:66:f1:71:18:de:a6:00:d6:ec:5f:93:f2:1f:
         35:63:62:d3:1f:c4:be:a5:bf:55:83:06:cb:0a:bc:08:28:4d:
         55:dd:7c:cd:53:1c:b7:e9:0e:56:21:35:4e:69:48:82:95:56:
         c9:b6:99:f2:2b:19:69:16:56:04:fb:41:00:59:16:8b:84:e2:
         39:70:98:18:28:52:49:57:75:37:52:9f:cd:68:1d:b7:69:3d:
         3b:32:80:8e:04:1d:fe:99:ba:6a:d0:33:2b:e1:b2:7f:8d:6a:
         cc:98:c6:d8:da:e8:49:fc:93:fe:59:fc:01:b9:78:21:47:ca:
         a9:05:f4:b9:86:48:81:fc:1b:cc:b5:37:7b:3c:64:28:57:b8:
         b3:a6:5b:54:e2:38:ba:47:a5:cb:23:6d:35:0b:e1:8c:1f:0a:
         01:88:e9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:53:20 2025 by rpki-client