Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/323830343a363964343a3a2f33322d313238203d3e20323730323934.roa
File:                     323830343a363964343a3a2f33322d313238203d3e20323730323934.roa (raw, json)
Hash identifier:          WS5Te1IwLS+Y6MtkZQws3QYNT2v+ie5YPdd9CMaVNW4=
Subject key identifier:   5E:C8:54:96:6F:0D:32:36:03:99:75:8B:AB:B5:7B:2A:B7:A4:E7:33
Certificate issuer:       /CN=AEA213503913E7D94BB483BA7B3A98B14D40C67D
Certificate serial:       563AFDFE32896BA3EA7E9FAF4492E1C86D1F4C8F
Authority key identifier: AE:A2:13:50:39:13:E7:D9:4B:B4:83:BA:7B:3A:98:B1:4D:40:C6:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEA213503913E7D94BB483BA7B3A98B14D40C67D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/323830343a363964343a3a2f33322d313238203d3e20323730323934.roa
Signing time:             Mon 03 Mar 2025 16:29:43 +0000
ROA not before:           Mon 03 Mar 2025 16:24:43 +0000
ROA not after:            Mon 02 Mar 2026 16:29:43 +0000
asID:                     270294
IP address blocks:        2804:69d4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/AEA213503913E7D94BB483BA7B3A98B14D40C67D.crl
                          rsync://rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/AEA213503913E7D94BB483BA7B3A98B14D40C67D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEA213503913E7D94BB483BA7B3A98B14D40C67D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3a:fd:fe:32:89:6b:a3:ea:7e:9f:af:44:92:e1:c8:6d:1f:4c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEA213503913E7D94BB483BA7B3A98B14D40C67D
        Validity
            Not Before: Mar  3 16:24:43 2025 GMT
            Not After : Mar  2 16:29:43 2026 GMT
        Subject: CN=5EC854966F0D32360399758BABB57B2AB7A4E733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:22:6c:3a:43:40:39:56:65:34:9c:c0:fe:45:
                    91:8e:a4:d7:10:ba:3e:07:55:a8:2f:41:55:2b:59:
                    2b:df:8b:2b:52:a8:ba:bd:43:b9:01:ae:17:85:70:
                    09:f4:ce:50:2b:1f:df:4d:55:d7:bf:2f:5f:20:02:
                    fd:25:15:40:db:48:aa:b4:86:76:8b:f4:32:dc:55:
                    73:d9:f8:53:94:cc:81:18:f3:75:32:8b:ba:df:12:
                    29:36:b9:fd:c0:6c:96:99:d9:d3:80:35:0f:75:3e:
                    b3:db:6f:93:73:e2:f4:67:22:5c:e0:27:f6:e2:be:
                    a7:27:f9:27:e1:8d:2d:51:1d:90:e2:5a:e3:56:b5:
                    c1:8d:69:63:62:42:5a:f3:09:29:60:97:1e:d4:da:
                    74:7d:3c:41:68:05:84:1f:5d:3b:4f:c9:30:b6:0e:
                    69:bd:4f:e7:63:73:a4:75:05:f8:d3:79:35:b6:4d:
                    d0:87:b6:a9:c3:fe:d5:00:f2:10:17:f0:93:73:47:
                    13:40:2c:38:4a:1e:fb:8d:bb:f2:ff:43:e8:09:61:
                    99:c1:08:1a:fb:fb:6e:88:fb:c7:08:74:6d:73:c4:
                    c1:7a:bd:cc:ca:35:37:91:32:c1:74:cf:e9:5d:a4:
                    9b:f6:f6:eb:8a:3f:a0:6c:9c:9d:bf:01:28:a0:8d:
                    a2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C8:54:96:6F:0D:32:36:03:99:75:8B:AB:B5:7B:2A:B7:A4:E7:33
            X509v3 Authority Key Identifier:
                keyid:AE:A2:13:50:39:13:E7:D9:4B:B4:83:BA:7B:3A:98:B1:4D:40:C6:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/AEA213503913E7D94BB483BA7B3A98B14D40C67D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEA213503913E7D94BB483BA7B3A98B14D40C67D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/323830343a363964343a3a2f33322d313238203d3e20323730323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:69d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:a3:01:6b:c4:5a:6a:64:f8:51:52:9b:ef:97:07:27:ae:63:
         07:13:98:2f:42:b1:27:2a:0e:dc:3b:41:5c:c6:af:e5:d7:db:
         97:66:9a:8b:03:30:a2:dc:2e:0f:6f:c1:49:7c:ee:a0:e2:d4:
         2a:d4:d9:90:12:8f:c0:5d:1b:c7:21:7b:0d:9c:dc:2c:5f:54:
         b7:e0:b5:5d:bc:ed:5e:ec:d3:8e:98:0a:15:d7:d3:22:f2:4f:
         80:51:cb:d2:ed:57:e2:b7:f5:e0:ee:72:e0:92:5b:39:60:82:
         b0:bf:6e:6d:16:74:ce:e0:b1:e9:ec:9e:67:f1:3a:5e:c6:18:
         71:3b:2c:dd:df:ab:c8:6e:21:43:74:47:14:46:6f:8e:df:b8:
         00:7e:25:d2:64:58:58:18:41:0f:2e:60:86:4c:0a:60:aa:18:
         3b:30:bf:87:40:01:02:72:22:26:30:bc:d2:a7:f3:45:fa:d4:
         fe:51:3b:e1:1d:6d:24:f1:c6:73:58:61:27:0b:79:68:55:df:
         40:bf:8a:37:9a:95:e5:28:42:f3:15:d3:11:27:e6:64:d2:84:
         30:8b:c3:1a:da:3a:86:5e:c1:5e:23:53:b8:e4:f4:84:80:f6:
         15:6c:45:9c:d9:27:8a:58:fb:a9:d5:ed:a6:b4:5e:68:b4:4d:
         79:0a:0a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:02:39 2025 by rpki-client