Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a623030303a3a2f33362d3336203d3e203631353932.roa
File:                     323830343a346333343a623030303a3a2f33362d3336203d3e203631353932.roa (raw, json)
Hash identifier:          heM2leC69GtAkJhPrT7KYIGEUtR2kDd+r41zTyHPftk=
Subject key identifier:   38:8F:D2:5C:5A:47:B5:3B:55:02:94:13:B1:00:09:B0:9D:B6:A3:C3
Certificate issuer:       /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial:       5D8F195A4787575EFD917FC713F1515607B4E9CB
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a623030303a3a2f33362d3336203d3e203631353932.roa
Signing time:             Wed 12 Feb 2025 14:31:01 +0000
ROA not before:           Wed 12 Feb 2025 14:26:01 +0000
ROA not after:            Wed 11 Feb 2026 14:31:01 +0000
asID:                     61592
IP address blocks:        2804:4c34:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8f:19:5a:47:87:57:5e:fd:91:7f:c7:13:f1:51:56:07:b4:e9:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
        Validity
            Not Before: Feb 12 14:26:01 2025 GMT
            Not After : Feb 11 14:31:01 2026 GMT
        Subject: CN=388FD25C5A47B53B55029413B10009B09DB6A3C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2f:14:37:2b:37:4d:03:7a:d6:3a:ff:9c:5a:
                    e7:2c:a3:89:9e:23:07:26:20:4a:80:bb:58:53:0a:
                    6c:d5:e7:c3:98:b2:41:e8:c8:88:24:31:79:1a:96:
                    d4:a1:d8:25:a4:39:f4:dc:f1:1d:11:81:2a:ba:5d:
                    44:77:85:1f:e0:32:4f:d5:2c:7e:26:ab:51:2e:c6:
                    0f:2e:8c:2b:c4:b9:1f:0d:75:09:b0:61:51:f0:a5:
                    b1:fa:85:c0:99:57:07:0d:4e:fc:65:5c:50:0a:a8:
                    92:69:98:5e:43:aa:08:1e:17:d3:3c:51:09:ed:ca:
                    a1:aa:36:ae:d9:16:31:a5:4f:fd:68:1f:96:b2:73:
                    9f:b6:a7:ad:eb:83:05:af:49:db:9a:78:a6:f7:db:
                    95:bd:cc:cb:6a:58:7d:33:39:a8:0f:15:47:94:be:
                    66:83:4f:8f:75:30:86:83:63:5f:00:84:9c:78:28:
                    27:97:c0:9d:29:90:72:22:eb:b8:b0:df:64:dc:69:
                    11:3c:3c:6b:9e:31:8c:64:3f:37:bd:22:1d:77:4a:
                    88:dc:78:74:35:2b:6c:34:4d:50:f1:f2:d3:4b:d1:
                    3c:e1:87:8f:b1:4b:d5:42:14:73:c1:ea:7c:00:22:
                    46:2a:9b:20:6e:f2:c8:3e:46:8b:53:61:6c:ec:d0:
                    05:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8F:D2:5C:5A:47:B5:3B:55:02:94:13:B1:00:09:B0:9D:B6:A3:C3
            X509v3 Authority Key Identifier:
                keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a623030303a3a2f33362d3336203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         25:89:79:98:98:b0:d3:8a:ae:c9:76:9d:0b:8e:ca:07:4a:e6:
         7a:72:3d:f0:eb:8d:58:ae:a7:70:07:3c:b8:00:ab:d9:3c:b0:
         da:96:76:9e:69:6c:45:81:7a:8b:25:7e:b1:fa:5d:fa:20:2c:
         0f:1b:c2:9d:b9:69:5e:74:8d:88:8c:ba:65:55:31:24:06:bd:
         51:a7:61:b6:b8:af:c6:61:05:45:79:06:95:55:33:b4:93:18:
         b2:ed:54:3c:fa:df:ec:06:73:6b:39:7a:72:91:53:09:ad:94:
         74:2e:b6:cf:b7:11:a2:d1:37:1f:58:bf:f0:8a:67:26:03:b8:
         bb:46:4d:47:3e:91:9b:36:cf:cd:30:21:ca:ef:dd:69:ce:d7:
         36:8c:06:54:8f:7c:44:f6:6b:58:b8:f6:7c:c2:fa:ba:f6:5c:
         d3:65:f7:7c:e5:38:09:fd:81:c1:43:14:f7:9e:e7:bd:aa:b8:
         5f:26:5f:bf:7e:2c:f7:08:c8:e5:02:6a:b1:93:1f:61:01:75:
         0a:f2:c7:6c:a3:b6:92:71:60:b1:36:da:76:c1:f4:26:2f:ce:
         85:c1:46:24:c0:44:6d:ba:67:05:fd:12:45:c7:73:89:b9:ee:
         87:ed:fa:ec:7b:40:ec:15:e0:9d:45:a7:a8:69:e5:3d:10:10:
         42:66:75:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:24 2025 by rpki-client