Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/323830343a323135633a3a2f33322d3634203d3e20323634353530.roa
File:                     323830343a323135633a3a2f33322d3634203d3e20323634353530.roa (raw, json)
Hash identifier:          H6bJaH3iLc3+jpqi5fuX568GmDvEHyGXcd8Xxicq0k0=
Subject key identifier:   93:FC:21:CD:CE:1A:1E:77:E7:2B:32:C6:3E:47:99:21:29:45:60:7D
Certificate issuer:       /CN=460AB498EE332630D0D0D3A518D373758466C069
Certificate serial:       0D05854E85C9EB00EF504C88C3E77293D79893E8
Authority key identifier: 46:0A:B4:98:EE:33:26:30:D0:D0:D3:A5:18:D3:73:75:84:66:C0:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/460AB498EE332630D0D0D3A518D373758466C069.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/323830343a323135633a3a2f33322d3634203d3e20323634353530.roa
Signing time:             Thu 10 Apr 2025 17:54:06 +0000
ROA not before:           Thu 10 Apr 2025 17:49:06 +0000
ROA not after:            Thu 09 Apr 2026 17:54:06 +0000
asID:                     264550
IP address blocks:        2804:215c::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/460AB498EE332630D0D0D3A518D373758466C069.crl
                          rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/460AB498EE332630D0D0D3A518D373758466C069.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/460AB498EE332630D0D0D3A518D373758466C069.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 01:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:05:85:4e:85:c9:eb:00:ef:50:4c:88:c3:e7:72:93:d7:98:93:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460AB498EE332630D0D0D3A518D373758466C069
        Validity
            Not Before: Apr 10 17:49:06 2025 GMT
            Not After : Apr  9 17:54:06 2026 GMT
        Subject: CN=93FC21CDCE1A1E77E72B32C63E4799212945607D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2b:a6:bf:ba:c1:e2:e3:9d:be:46:1b:70:92:
                    df:32:03:e6:6e:a4:b6:30:da:27:a5:50:3b:56:0f:
                    4f:8d:78:24:e3:46:68:12:7f:6e:05:64:2a:e9:d2:
                    24:71:da:c3:32:4e:3d:f6:6e:d2:2a:2b:68:e7:72:
                    52:ae:59:92:f5:b9:f0:f8:8f:1a:4e:b2:a8:17:f5:
                    77:0f:c6:37:65:6f:36:b2:e8:4b:14:45:8d:e2:cb:
                    66:82:12:93:f7:d7:21:01:c8:24:ae:08:79:3e:3e:
                    85:30:9c:ca:c6:0c:2d:ed:aa:09:9a:e2:33:b9:62:
                    5f:1c:d6:77:e8:b8:28:be:3a:e2:36:99:60:fa:b6:
                    a5:e9:b9:b0:45:e4:e0:c4:28:e9:07:2b:26:cb:72:
                    f0:cb:bd:dc:22:5e:2e:51:b8:e9:82:02:4b:29:ef:
                    a7:9c:15:7d:31:48:43:44:da:2f:47:39:ef:d4:06:
                    41:95:50:57:53:5b:07:3e:f7:62:45:ee:38:c5:8b:
                    52:97:51:8c:ff:bb:ac:4e:45:a5:d0:c4:7b:45:47:
                    2f:cc:c4:2a:a4:3c:8e:c9:82:c0:d7:93:62:56:7f:
                    f8:81:94:28:28:89:88:1d:61:69:92:66:e5:a2:c0:
                    72:c0:1f:d3:4c:27:93:de:e6:4c:d2:78:21:3f:9e:
                    50:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FC:21:CD:CE:1A:1E:77:E7:2B:32:C6:3E:47:99:21:29:45:60:7D
            X509v3 Authority Key Identifier:
                keyid:46:0A:B4:98:EE:33:26:30:D0:D0:D3:A5:18:D3:73:75:84:66:C0:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/460AB498EE332630D0D0D3A518D373758466C069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/460AB498EE332630D0D0D3A518D373758466C069.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/323830343a323135633a3a2f33322d3634203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:215c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:10:ac:b3:19:45:75:c9:68:eb:d4:1a:f3:e4:c4:ee:20:83:
         c7:a5:be:a6:c6:53:ef:7f:46:af:e6:56:9d:04:cd:08:99:e5:
         ef:4d:ec:6f:c5:35:8b:26:2a:e6:23:84:8c:ca:e9:9f:b3:c9:
         48:0d:b2:82:bc:df:67:a0:ce:5b:26:5c:97:5f:44:64:11:c6:
         67:48:0a:72:7c:38:3f:a2:be:4c:84:7f:45:ff:55:79:28:93:
         fe:35:29:76:5c:21:0f:fe:ef:9d:13:45:14:e3:36:99:6f:73:
         c8:22:36:c0:0b:be:0c:ca:59:5c:4d:19:e7:38:90:f3:08:2d:
         05:84:93:20:70:22:93:58:f9:0a:74:62:52:6b:3a:75:8a:10:
         ad:b2:7a:d2:e8:65:74:23:e2:50:da:d5:cf:6e:df:dc:cd:70:
         3a:e9:76:c1:75:b9:bd:05:c9:a1:3a:76:56:cb:ef:01:c4:67:
         2d:5b:a9:3d:54:67:60:fa:c5:6d:89:d1:5e:89:46:60:43:27:
         04:b1:1e:d1:7d:62:06:03:2e:f5:9a:8d:2a:73:04:c1:e5:b8:
         df:63:cf:bc:ce:ce:9a:12:e4:bf:19:a1:8d:33:d3:5c:9d:15:
         b5:28:7e:f3:d3:bc:f4:ab:fa:7c:76:42:2d:62:cf:d1:b3:e5:
         e0:ea:be:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:06:41 2025 by rpki-client