Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633031303a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633031303a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          HOETKXOnhE64qLXsLY9gew0YjSVxRLYHU4vsgpHoSWI=
Subject key identifier:   4B:A7:0F:8B:6F:7F:36:54:56:2D:6A:83:7F:37:A3:AA:3D:8B:DD:EA
Certificate issuer:       /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial:       54FEC979370C09D7BD765067D539BEFFFB08DD6C
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633031303a3a2f34382d3438203d3e203631353932.roa
Signing time:             Wed 12 Feb 2025 14:31:00 +0000
ROA not before:           Wed 12 Feb 2025 14:26:00 +0000
ROA not after:            Wed 11 Feb 2026 14:31:00 +0000
asID:                     61592
IP address blocks:        2804:4c34:c010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 22 Feb 2025 08:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fe:c9:79:37:0c:09:d7:bd:76:50:67:d5:39:be:ff:fb:08:dd:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
        Validity
            Not Before: Feb 12 14:26:00 2025 GMT
            Not After : Feb 11 14:31:00 2026 GMT
        Subject: CN=4BA70F8B6F7F3654562D6A837F37A3AA3D8BDDEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:9b:4d:cc:5d:9e:2e:e3:1b:f7:b9:19:32:
                    dd:f3:0c:ca:ce:16:72:1f:b2:de:03:a4:5b:f5:e0:
                    3b:18:c6:80:9e:5f:c3:b5:83:fd:7a:c8:b6:36:92:
                    93:5c:6d:6a:e4:19:6a:15:99:d6:df:89:b8:a7:67:
                    a2:67:53:1e:9d:16:47:ca:fe:8c:9f:c4:31:24:65:
                    43:be:0e:b2:9f:7d:f5:91:91:6e:82:43:65:a8:4d:
                    86:82:c0:40:81:e6:60:cb:b5:01:03:a4:60:1b:86:
                    7e:28:65:d9:45:91:a2:85:81:b4:b2:3f:2d:04:32:
                    1f:e7:99:07:e0:03:48:5b:c8:ea:88:33:c0:84:f6:
                    8b:19:bd:f6:e3:65:06:ed:c1:d2:7a:df:05:c6:b1:
                    53:d4:05:bc:cb:2f:f4:6e:9f:45:f6:4d:8c:6d:d4:
                    b9:54:db:3a:b3:1d:11:df:37:f5:14:4a:8b:24:1d:
                    1b:54:98:c6:69:6d:ba:46:55:94:2e:49:d5:1d:ce:
                    3d:4a:1a:45:ca:8b:fa:01:7a:17:e5:25:68:4e:e4:
                    64:61:4b:60:15:df:9c:1f:d3:72:22:8e:32:77:4e:
                    57:15:6a:b1:a2:a5:19:fd:79:5a:99:40:2f:bc:d5:
                    7f:ab:ae:a0:07:d7:59:ea:82:66:82:19:23:67:f2:
                    33:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A7:0F:8B:6F:7F:36:54:56:2D:6A:83:7F:37:A3:AA:3D:8B:DD:EA
            X509v3 Authority Key Identifier:
                keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633031303a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c010::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:16:f6:e5:88:16:03:38:bc:d9:6b:e2:f3:b0:25:78:e6:aa:
         a5:16:6a:a7:55:75:ae:db:ad:0c:46:d4:5b:bc:37:d7:d0:74:
         1c:8a:1b:c3:f3:95:c2:61:bf:b7:f8:d9:9e:6b:31:fc:96:f3:
         a7:63:b2:58:12:75:5a:d0:d0:0f:04:19:ab:f3:e3:54:e9:0e:
         57:03:b0:9d:03:ab:c7:b3:c3:15:bc:b4:ed:91:d9:6f:02:68:
         21:10:a9:37:d7:cc:2a:d0:ba:6e:68:eb:65:bb:37:3a:f2:b6:
         56:83:94:81:29:84:97:0c:cb:41:b1:ef:27:38:1c:00:cd:2b:
         2b:f5:33:89:d2:98:3a:49:fb:14:1f:71:c1:d5:a4:24:59:f4:
         5e:aa:10:1c:a1:bb:db:a6:6a:17:02:e5:eb:46:dc:05:bb:b4:
         47:cf:76:94:ae:d2:a4:5a:5d:0e:ff:39:e0:f5:f3:be:6c:f5:
         f8:ea:6b:9c:e0:3b:ff:c2:5f:9a:8a:68:8d:31:55:b8:43:82:
         2f:92:78:87:11:be:a6:79:c6:d0:76:19:c9:e7:46:db:2d:6b:
         9a:6b:a4:f8:51:92:e6:af:09:ad:df:14:8a:3b:09:06:36:83:
         30:e0:ed:bb:9d:d1:96:1b:56:75:52:69:de:76:54:a7:d0:3d:
         29:d9:bc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:41 2025 by rpki-client