Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/323830343a3936343a3a2f33322d3438203d3e20323633303830.roa
File:                     323830343a3936343a3a2f33322d3438203d3e20323633303830.roa (raw, json)
Hash identifier:          jU+zIonsxu9H+S1bdZMMihUCEyrM0yt7YI6ccE3aQVg=
Subject key identifier:   11:25:D9:9C:3D:05:62:1A:87:88:1C:EB:0A:D8:92:2B:BE:AB:FD:5D
Certificate issuer:       /CN=883F9EED8D520E746FE5A46BDE2594C335F2E812
Certificate serial:       4BF5743719FF46970E285E353F6677D2BB95B323
Authority key identifier: 88:3F:9E:ED:8D:52:0E:74:6F:E5:A4:6B:DE:25:94:C3:35:F2:E8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/883F9EED8D520E746FE5A46BDE2594C335F2E812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/323830343a3936343a3a2f33322d3438203d3e20323633303830.roa
Signing time:             Wed 02 Apr 2025 19:44:38 +0000
ROA not before:           Wed 02 Apr 2025 19:39:38 +0000
ROA not after:            Wed 01 Apr 2026 19:44:38 +0000
asID:                     263080
IP address blocks:        2804:964::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.crl
                          rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/883F9EED8D520E746FE5A46BDE2594C335F2E812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 19:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f5:74:37:19:ff:46:97:0e:28:5e:35:3f:66:77:d2:bb:95:b3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883F9EED8D520E746FE5A46BDE2594C335F2E812
        Validity
            Not Before: Apr  2 19:39:38 2025 GMT
            Not After : Apr  1 19:44:38 2026 GMT
        Subject: CN=1125D99C3D05621A87881CEB0AD8922BBEABFD5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6f:3f:99:42:d3:42:ef:ec:a3:63:99:8e:cc:
                    f1:eb:e2:fb:2a:fa:47:08:a4:35:26:88:d9:94:42:
                    ac:52:71:85:f5:25:6c:7f:25:c6:9b:53:29:64:34:
                    18:cc:f2:e2:38:4e:65:84:89:a3:40:b4:ad:96:54:
                    75:f7:3e:4b:b8:5a:ab:4f:28:8d:3b:d7:9d:ae:c3:
                    13:06:88:9a:8e:fd:5a:0e:61:33:d3:23:a4:82:50:
                    51:b1:96:34:3f:07:cc:12:a2:e3:22:20:f4:64:8e:
                    e4:6a:88:ac:08:1d:c9:3f:31:c4:9b:22:19:e5:a5:
                    72:90:ce:ff:53:f4:e6:89:ff:48:a9:64:69:92:19:
                    ca:ac:3e:61:5b:2d:27:9d:bf:96:da:29:ec:29:b0:
                    a7:3a:68:90:cd:da:59:2b:60:4e:61:ee:81:59:bb:
                    81:9e:18:3c:26:04:84:19:73:e6:91:b2:6a:c2:b8:
                    62:e2:f8:62:6c:a5:05:81:53:cf:3e:8a:eb:ad:c5:
                    ee:16:ec:bf:ab:e2:20:96:61:87:4e:da:35:9f:09:
                    07:2a:7e:46:18:d3:31:a3:17:39:99:4f:2e:6e:54:
                    a3:85:db:7f:bd:08:7e:59:e6:f0:0c:5d:13:02:91:
                    d3:1c:ec:05:b9:f6:85:0d:cd:a5:31:d0:68:e1:d1:
                    9c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:25:D9:9C:3D:05:62:1A:87:88:1C:EB:0A:D8:92:2B:BE:AB:FD:5D
            X509v3 Authority Key Identifier:
                keyid:88:3F:9E:ED:8D:52:0E:74:6F:E5:A4:6B:DE:25:94:C3:35:F2:E8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/883F9EED8D520E746FE5A46BDE2594C335F2E812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/323830343a3936343a3a2f33322d3438203d3e20323633303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:964::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:92:ed:b9:f7:fc:b0:10:c9:54:ad:d4:2d:3b:ce:9c:67:13:
         43:51:50:48:5a:2f:5a:c2:74:e8:44:f2:7b:52:74:3a:61:27:
         e1:75:e3:3c:c9:6c:cc:bf:32:0d:92:91:ad:0f:67:b7:13:23:
         fb:d5:46:03:9d:c7:7b:a1:00:85:02:64:30:de:db:ad:05:58:
         ee:75:2c:9e:20:83:0a:bf:6d:ec:d8:10:04:4e:91:6e:b7:55:
         f7:43:a3:79:e2:de:d7:ff:73:2c:84:dd:93:40:e1:b6:d3:57:
         01:1f:6a:64:a8:e6:79:4a:0b:e2:e0:33:a1:82:40:3e:be:f5:
         8c:cc:1e:0b:43:be:94:a2:e5:e3:4a:30:45:a6:58:3e:e1:b6:
         7c:ab:cf:53:1c:a3:44:a4:ac:07:a7:75:84:f3:f5:ad:73:77:
         2b:f7:af:26:2c:fe:a9:9b:34:20:a2:51:3e:b2:90:1c:b1:8b:
         0d:de:c7:d9:b9:fd:ce:aa:52:eb:45:d6:30:01:00:66:87:fd:
         b4:fd:95:88:c4:d5:2e:70:d7:97:6f:ee:ed:02:97:e5:9e:23:
         00:b1:aa:f2:f3:9c:41:2c:35:b9:04:a2:3d:c0:55:42:a7:73:
         18:45:6e:65:ff:05:02:da:89:e4:89:7e:57:36:a3:d8:b1:f4:
         1c:ac:01:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:10:34 2025 by rpki-client