Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/323830343a383631343a3a2f33322d3434203d3e20323732363139.roa
File:                     323830343a383631343a3a2f33322d3434203d3e20323732363139.roa (raw, json)
Hash identifier:          pQviQjOONbuzn6pqxVPP7SoctO2grbtBArJUd8XQvF4=
Subject key identifier:   0D:EA:83:49:FB:09:9E:4B:08:68:60:07:79:7D:C8:98:A7:72:64:11
Certificate issuer:       /CN=2601DE669734AEE0385101964D2ED4C0B8A927D4
Certificate serial:       3F171B45F9B4CA15BEC82254B066B060D0D4A267
Authority key identifier: 26:01:DE:66:97:34:AE:E0:38:51:01:96:4D:2E:D4:C0:B8:A9:27:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2601DE669734AEE0385101964D2ED4C0B8A927D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/323830343a383631343a3a2f33322d3434203d3e20323732363139.roa
Signing time:             Thu 13 Feb 2025 13:32:25 +0000
ROA not before:           Thu 13 Feb 2025 13:27:25 +0000
ROA not after:            Thu 12 Feb 2026 13:32:25 +0000
asID:                     272619
IP address blocks:        2804:8614::/32 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.crl
                          rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2601DE669734AEE0385101964D2ED4C0B8A927D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:17:1b:45:f9:b4:ca:15:be:c8:22:54:b0:66:b0:60:d0:d4:a2:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2601DE669734AEE0385101964D2ED4C0B8A927D4
        Validity
            Not Before: Feb 13 13:27:25 2025 GMT
            Not After : Feb 12 13:32:25 2026 GMT
        Subject: CN=0DEA8349FB099E4B08686007797DC898A7726411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:65:2f:57:90:35:c8:3c:48:f4:1a:1d:85:aa:
                    f4:9b:1b:e7:a4:23:fe:f4:af:cb:de:c4:15:af:bb:
                    ac:b4:f5:5d:fc:73:3b:de:22:c6:16:c3:fa:19:bc:
                    a2:c0:15:dd:9d:c5:1b:77:b5:ce:ec:f4:6e:fa:30:
                    60:cc:e5:3d:36:aa:21:13:a1:cb:6e:cb:65:3c:ab:
                    60:42:b5:ab:35:1c:d2:5d:3f:d6:c0:cd:df:12:53:
                    c7:f9:40:52:a8:57:89:60:1a:c0:44:74:cf:b1:9a:
                    49:0d:64:5b:38:a8:79:da:0b:dc:24:bb:ad:23:22:
                    a6:20:44:f3:50:07:a2:63:0b:0e:79:1b:4f:38:ff:
                    04:82:14:70:af:72:af:64:47:fd:4a:d2:3a:9f:57:
                    68:0a:6b:31:fc:e5:d9:7d:42:c3:0c:4f:a0:4c:ac:
                    1c:b4:b9:04:97:21:50:a6:06:aa:9f:e0:33:67:70:
                    7f:52:4f:74:e6:64:ce:39:fe:de:fd:78:37:0b:f4:
                    28:c8:60:bc:d4:0f:24:87:b4:ed:23:60:d4:f6:10:
                    cc:53:fe:a7:77:ea:d9:6f:9c:26:a3:6e:16:f3:bd:
                    3b:40:5c:a7:0e:af:04:5d:4a:48:3e:7e:3f:47:5c:
                    7d:a7:20:7a:3b:f8:a7:a7:16:23:e6:03:0d:bb:2d:
                    98:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EA:83:49:FB:09:9E:4B:08:68:60:07:79:7D:C8:98:A7:72:64:11
            X509v3 Authority Key Identifier:
                keyid:26:01:DE:66:97:34:AE:E0:38:51:01:96:4D:2E:D4:C0:B8:A9:27:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2601DE669734AEE0385101964D2ED4C0B8A927D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/323830343a383631343a3a2f33322d3434203d3e20323732363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8614::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:0d:eb:4a:e9:c4:df:9a:86:f0:eb:76:85:f1:9e:c0:29:9e:
         28:ef:df:4d:9f:01:29:3b:ad:40:26:1b:fc:61:1f:53:cd:a2:
         33:b3:62:5e:b9:50:89:c8:f7:68:e5:5b:25:d6:5d:e7:27:46:
         19:e3:cb:99:7d:a6:3c:28:e4:00:67:e8:8b:f0:8c:0f:d5:c3:
         10:89:6c:95:97:0c:31:98:d6:8a:72:b5:83:6d:dd:f8:72:e4:
         a7:e1:d5:17:f8:f8:4d:d5:70:fd:6d:4e:10:44:bc:08:f2:0c:
         fd:1f:32:7c:33:f0:3a:b1:98:39:f0:28:e8:bb:c0:d6:7b:2b:
         ea:64:2a:46:cc:38:e7:cc:7c:c9:a7:f1:b4:19:98:d0:32:32:
         97:6a:ee:85:34:91:9d:a5:99:19:e6:30:2f:c7:c9:e1:7d:82:
         76:6f:cb:e0:9c:01:f3:0a:5a:b5:37:e5:0f:f5:fa:61:91:b3:
         26:e6:ab:03:22:6b:92:22:4d:21:df:42:46:ba:70:35:63:b7:
         6b:ff:d4:4a:b7:b4:7d:57:c1:82:00:ce:5f:93:77:24:a6:17:
         ab:e9:41:f6:41:63:49:fa:c0:e2:68:11:02:0c:dd:3c:d9:e0:
         94:dd:84:b4:9b:49:97:2c:86:34:a4:4b:26:74:4f:23:e7:bc:
         2b:f9:e3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:35:54 2025 by rpki-client