Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a3a2f33322d3438203d3e20323638333937.roa
File:                     323830343a353039343a3a2f33322d3438203d3e20323638333937.roa (raw, json)
Hash identifier:          Z1boymgadhqyXxNZYF1q8FyV3V5e6woWlxKOcxmjbuo=
Subject key identifier:   A7:56:14:41:7F:BF:A0:8B:1E:45:B1:6F:F2:C7:4B:CA:E6:48:8E:C1
Certificate issuer:       /CN=D1D35D39498F93F9C9E8E1411E361CC7878B222A
Certificate serial:       6C25C9A87C9885BE8214312C5CB1F94AEBCE99DE
Authority key identifier: D1:D3:5D:39:49:8F:93:F9:C9:E8:E1:41:1E:36:1C:C7:87:8B:22:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D35D39498F93F9C9E8E1411E361CC7878B222A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a3a2f33322d3438203d3e20323638333937.roa
Signing time:             Tue 25 Feb 2025 12:39:46 +0000
ROA not before:           Tue 25 Feb 2025 12:34:46 +0000
ROA not after:            Tue 24 Feb 2026 12:39:46 +0000
asID:                     268397
IP address blocks:        2804:5094::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/D1D35D39498F93F9C9E8E1411E361CC7878B222A.crl
                          rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/D1D35D39498F93F9C9E8E1411E361CC7878B222A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D35D39498F93F9C9E8E1411E361CC7878B222A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 11:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:25:c9:a8:7c:98:85:be:82:14:31:2c:5c:b1:f9:4a:eb:ce:99:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1D35D39498F93F9C9E8E1411E361CC7878B222A
        Validity
            Not Before: Feb 25 12:34:46 2025 GMT
            Not After : Feb 24 12:39:46 2026 GMT
        Subject: CN=A75614417FBFA08B1E45B16FF2C74BCAE6488EC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1e:c7:12:8c:49:c2:cc:18:d5:59:cd:25:9c:
                    c5:d9:65:cb:bd:fd:fb:95:df:20:e5:43:69:d3:f4:
                    c2:64:24:96:d4:63:e4:67:83:da:59:db:4d:75:43:
                    8c:f3:c2:7e:37:9a:ab:3c:c2:0e:be:cd:f6:1e:76:
                    61:af:5e:69:b7:ad:a0:be:3e:79:55:0f:13:ef:33:
                    b5:01:63:f7:76:6e:e3:d4:4d:0e:84:7a:cc:6f:60:
                    7c:08:90:8c:1b:dc:bf:3b:08:50:1e:27:cb:6d:55:
                    3a:86:38:c1:68:21:c6:fe:df:b7:fa:50:8b:51:a1:
                    de:69:e4:95:a3:e5:33:9c:ea:61:bb:b7:4b:a6:f2:
                    49:f4:be:f1:7a:74:2a:c9:b2:4b:fc:59:49:41:12:
                    9c:52:99:9f:e7:da:20:75:c4:3e:65:3e:18:fd:8a:
                    13:e7:8a:a1:dd:41:33:0b:5d:c7:a6:95:67:6d:64:
                    5f:31:d7:1a:ee:42:69:9b:a7:16:6f:41:b4:dc:1c:
                    15:47:03:d3:08:af:6a:49:d4:a1:75:e1:4a:3a:04:
                    80:db:e6:e5:d1:68:1d:8d:f6:7b:f9:30:4c:6c:43:
                    82:d6:ca:88:b3:6e:b2:99:a3:f0:33:bc:ce:ba:b2:
                    21:82:28:8b:ad:bc:0b:cb:9c:6c:b0:59:1e:b8:2e:
                    b9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:56:14:41:7F:BF:A0:8B:1E:45:B1:6F:F2:C7:4B:CA:E6:48:8E:C1
            X509v3 Authority Key Identifier:
                keyid:D1:D3:5D:39:49:8F:93:F9:C9:E8:E1:41:1E:36:1C:C7:87:8B:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/D1D35D39498F93F9C9E8E1411E361CC7878B222A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D35D39498F93F9C9E8E1411E361CC7878B222A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a3a2f33322d3438203d3e20323638333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5094::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:9f:bd:09:68:36:d9:e5:e7:e8:0c:13:48:cd:ea:91:dc:35:
         86:de:e2:b3:71:4c:9b:0d:de:5d:e1:e3:82:67:de:f6:a7:33:
         7c:6b:db:c9:ca:37:9f:d9:87:f2:2d:1c:1c:d7:23:41:52:dc:
         bb:3c:13:5d:f7:91:27:f2:b8:da:30:b7:53:0b:ab:f0:77:07:
         eb:25:9c:65:ad:1d:bd:a3:00:77:ca:20:a9:e5:ac:21:09:47:
         d4:51:d9:68:1c:b4:8b:b5:a9:66:d1:4f:c6:e9:b1:b1:3d:c1:
         d1:05:7a:72:20:5d:20:41:25:63:a8:d5:3b:06:26:f4:f6:8b:
         8d:2e:d5:e9:2c:0b:ab:07:9a:d5:0a:82:22:dd:ec:f8:b2:84:
         85:97:5e:05:39:eb:8e:2d:dd:2f:6d:1e:96:c0:59:e3:fe:3e:
         16:15:b1:73:e6:62:82:8c:55:4a:90:a7:05:74:7a:5c:d0:91:
         35:c0:e9:d2:3f:74:4b:7a:7f:06:8f:ec:f8:8a:31:de:fb:c2:
         4d:39:09:d9:09:28:7e:5a:68:46:f2:3d:d0:eb:1f:46:68:de:
         33:eb:84:75:44:ea:0e:1c:25:6a:80:b5:62:8d:56:52:06:4d:
         0c:5d:61:9a:eb:b2:ba:7e:a7:b7:7e:ef:c4:9b:e6:ca:0e:4a:
         35:42:69:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:05:05 2025 by rpki-client