Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/323830343a3964303a3a2f33322d3438203d3e20323632393935.roa
File:                     323830343a3964303a3a2f33322d3438203d3e20323632393935.roa (raw, json)
Hash identifier:          tMsMFYZcDGgxLlAz93XzzIggQ8A+5Kkr/FmAstWbKmc=
Subject key identifier:   84:B2:D0:97:00:52:B2:44:0E:A2:C6:7C:35:C0:D4:87:03:91:AF:65
Certificate issuer:       /CN=8132D5957E193240246C2622115FA8F1706B3CE2
Certificate serial:       50768E780C46BF38861504A44FF21332AFB9E06D
Authority key identifier: 81:32:D5:95:7E:19:32:40:24:6C:26:22:11:5F:A8:F1:70:6B:3C:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8132D5957E193240246C2622115FA8F1706B3CE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/323830343a3964303a3a2f33322d3438203d3e20323632393935.roa
Signing time:             Thu 06 Mar 2025 20:00:00 +0000
ROA not before:           Thu 06 Mar 2025 19:55:00 +0000
ROA not after:            Fri 06 Mar 2026 20:00:00 +0000
asID:                     262995
IP address blocks:        2804:9d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.crl
                          rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8132D5957E193240246C2622115FA8F1706B3CE2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:76:8e:78:0c:46:bf:38:86:15:04:a4:4f:f2:13:32:af:b9:e0:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8132D5957E193240246C2622115FA8F1706B3CE2
        Validity
            Not Before: Mar  6 19:55:00 2025 GMT
            Not After : Mar  6 20:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2a:f8:4f:0f:02:cb:fa:aa:ae:65:9c:59:0e:
                    25:9a:f9:4f:ee:12:9d:a1:57:5c:0d:29:d9:c1:3d:
                    6b:0f:09:5b:56:3e:de:56:bc:05:29:18:80:c2:ef:
                    b4:39:c0:1d:77:17:6d:6b:40:7c:74:e3:cf:0d:4f:
                    4f:22:66:6b:fa:43:a7:2b:65:f4:7c:f8:ee:8e:2f:
                    7b:5f:d3:4f:e0:10:73:da:8d:9e:0a:55:e2:17:98:
                    78:ef:32:4b:7a:be:f2:5c:9a:78:45:58:91:9a:58:
                    1f:5e:ca:c0:ee:dd:17:a0:9e:19:02:86:64:5b:eb:
                    59:70:e7:17:fc:de:94:16:7d:8d:45:84:c2:58:b1:
                    87:be:0b:35:ed:19:9b:8e:80:cc:fb:ef:49:4b:86:
                    58:6f:f9:56:67:61:99:70:a1:27:d5:45:84:3e:79:
                    b8:87:97:8e:62:8c:17:b2:65:56:fe:0a:a6:34:c9:
                    dd:99:a0:b8:72:fe:bd:60:c5:95:0e:02:b8:51:8a:
                    dc:e2:85:51:1a:db:f2:50:bb:ad:4f:07:59:1e:81:
                    1c:22:3d:15:61:49:20:15:8a:7d:94:c2:10:7b:df:
                    41:70:bc:bd:4e:ea:24:3a:27:c1:74:55:22:f1:38:
                    a4:20:e9:f4:8d:3f:a8:78:3d:40:47:8c:1f:13:24:
                    be:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B2:D0:97:00:52:B2:44:0E:A2:C6:7C:35:C0:D4:87:03:91:AF:65
            X509v3 Authority Key Identifier:
                keyid:81:32:D5:95:7E:19:32:40:24:6C:26:22:11:5F:A8:F1:70:6B:3C:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8132D5957E193240246C2622115FA8F1706B3CE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/323830343a3964303a3a2f33322d3438203d3e20323632393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:55:0a:ac:7d:12:4f:63:2c:41:6f:0f:9a:bc:76:21:11:c1:
         5f:23:46:ac:b6:ef:c8:29:4c:cb:1d:a0:9e:3f:30:c8:66:10:
         75:dc:54:0d:fb:73:9d:22:ff:09:28:9e:de:65:f9:7e:15:88:
         6e:42:3f:fd:13:67:ed:07:38:d5:a2:b2:e5:b2:96:d8:65:9c:
         ed:d3:22:83:45:25:3e:28:a6:be:e0:13:46:8f:f8:d0:dc:b5:
         11:62:ed:b7:f2:a7:71:77:1a:e8:72:80:4f:e1:ce:4d:cb:09:
         fe:9d:a1:e4:64:57:fd:26:41:e1:68:4c:16:46:5b:c4:c0:fd:
         fb:4d:49:6c:92:93:f7:f8:27:19:61:6a:21:8a:a7:d8:8d:71:
         39:20:60:86:4b:e6:60:2c:42:db:0a:65:74:52:8e:50:df:32:
         5e:46:77:67:81:e6:e3:8a:e8:c4:06:a6:aa:48:bc:5b:dc:62:
         1e:97:dc:de:ec:3e:44:c3:80:92:d6:8a:43:f2:dc:52:3c:3a:
         9b:af:03:91:f7:77:5e:7e:8c:41:8c:91:ce:7a:85:e4:57:57:
         d6:f8:57:41:ea:d9:aa:12:a5:ae:51:74:ed:70:01:2a:f0:b6:
         28:40:e8:61:2a:bb:ba:62:50:e3:21:8b:5c:0d:6b:d8:2e:ca:
         23:bc:8a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:42 2025 by rpki-client