Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/323830343a323439383a313830303a3a2f33372d3337203d3e20323634323332.roa
File:                     323830343a323439383a313830303a3a2f33372d3337203d3e20323634323332.roa (raw, json)
Hash identifier:          TcifDOad8dfsyP9d0J5yPbYGLZmY2O+gINcaheSYUeA=
Subject key identifier:   E7:7A:06:7A:EE:A7:86:C1:34:0F:6E:F0:99:96:30:5D:35:EB:0A:72
Certificate issuer:       /CN=75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9
Certificate serial:       54E998463624125311FA29FEB53724F303F2D256
Authority key identifier: 75:DF:9C:1F:A1:27:1A:E2:2F:8D:43:C4:6C:93:44:E9:39:B5:CF:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/323830343a323439383a313830303a3a2f33372d3337203d3e20323634323332.roa
Signing time:             Fri 17 Jan 2025 11:42:28 +0000
ROA not before:           Fri 17 Jan 2025 11:37:28 +0000
ROA not after:            Fri 16 Jan 2026 11:42:28 +0000
asID:                     264232
IP address blocks:        2804:2498:1800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9.crl
                          rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 21:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e9:98:46:36:24:12:53:11:fa:29:fe:b5:37:24:f3:03:f2:d2:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9
        Validity
            Not Before: Jan 17 11:37:28 2025 GMT
            Not After : Jan 16 11:42:28 2026 GMT
        Subject: CN=E77A067AEEA786C1340F6EF09996305D35EB0A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:24:e1:5f:2a:90:14:6f:b4:eb:16:9b:f1:4b:
                    1e:ae:12:4b:5d:21:d4:c2:21:f4:6d:df:d6:c8:5e:
                    fa:97:48:d2:04:ff:b0:f3:ea:36:34:5b:70:0c:9f:
                    55:88:1b:15:56:ee:45:09:b5:0d:15:4f:38:13:e0:
                    6a:ce:20:b8:ef:09:2a:51:8e:3a:30:7f:df:e1:5f:
                    6a:42:1c:9e:9f:ca:a5:08:b6:2c:16:5c:7c:72:3c:
                    16:02:43:39:07:5c:3c:95:c6:9a:86:ca:73:26:38:
                    31:36:7d:da:ef:3a:49:43:0b:57:47:cd:58:af:06:
                    5e:b0:1b:22:32:71:2c:a9:d6:81:35:45:3a:4b:72:
                    b4:db:b2:7f:58:cc:cc:f4:12:7c:35:11:9f:45:1a:
                    f3:bd:ff:7b:09:64:c4:a1:8d:b8:6d:6a:4a:48:43:
                    68:5d:77:1f:4b:49:eb:08:6b:b5:7f:eb:59:04:ab:
                    84:e9:c5:64:f0:82:f0:a0:f1:13:c7:80:2f:6e:09:
                    ce:20:4c:28:81:6f:13:2f:93:d2:08:ea:88:b1:a9:
                    28:ba:65:fd:79:16:04:ca:05:e1:5f:7d:49:4a:3f:
                    01:2d:1c:14:32:e6:6c:26:69:b2:69:fb:77:83:52:
                    72:df:8e:2f:dd:0e:81:be:d7:cb:c6:e7:cc:21:9d:
                    b3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7A:06:7A:EE:A7:86:C1:34:0F:6E:F0:99:96:30:5D:35:EB:0A:72
            X509v3 Authority Key Identifier:
                keyid:75:DF:9C:1F:A1:27:1A:E2:2F:8D:43:C4:6C:93:44:E9:39:B5:CF:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/323830343a323439383a313830303a3a2f33372d3337203d3e20323634323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2498:1800::/37

    Signature Algorithm: sha256WithRSAEncryption
         5d:61:67:a9:26:46:37:52:f2:b1:1c:39:fb:41:a1:89:18:fe:
         af:31:ce:b7:1c:d8:e7:d0:0b:5b:58:3a:8e:1c:79:a0:2a:ba:
         12:08:dd:4d:5f:e8:94:72:d7:58:ed:d1:60:55:a4:7d:46:4a:
         7e:9f:b1:b8:ab:0c:a9:4a:c1:a6:a4:62:79:9b:bf:c9:e7:38:
         d2:60:f9:cf:0e:c8:a8:e4:5c:29:cf:b1:27:00:37:b4:b5:60:
         b1:bf:ad:00:02:48:11:9e:7b:57:f3:b9:41:c4:b6:91:eb:c9:
         03:0a:fb:76:ad:bb:4b:99:17:12:37:bb:27:50:86:f3:12:32:
         ae:6a:ec:35:cb:e0:ab:1a:45:a3:e5:87:6e:7b:d4:60:5c:31:
         de:d6:0a:0d:42:d9:3b:ea:a3:da:c5:fe:47:f1:14:98:53:04:
         b5:f3:c8:6a:60:61:03:1c:08:83:8d:72:3f:0b:b4:ea:53:28:
         24:5e:90:f4:cb:e3:4b:f4:07:0f:32:b9:62:17:2b:22:7d:bf:
         f5:73:69:50:2b:d2:02:19:d7:db:b2:44:39:30:f6:9b:5f:d9:
         73:4c:5c:55:95:d1:8f:91:ff:b6:77:9d:44:2e:db:f3:7b:d8:
         3f:00:17:34:c4:7d:3a:c9:f0:b2:6a:34:7d:87:53:20:bd:57:
         28:75:28:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:48 2025 by rpki-client