Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/323830343a353466383a3a2f33322d3332203d3e20323638363831.roa
File:                     323830343a353466383a3a2f33322d3332203d3e20323638363831.roa (raw, json)
Hash identifier:          l5tMqCIL7uBusTfXV1I+XZ+H5PbxWfeLrf5CFIwer+Q=
Subject key identifier:   0F:91:D7:F9:FA:60:7A:DE:37:EE:49:49:42:BE:88:97:71:DF:5B:36
Certificate issuer:       /CN=C415922F5BDCB2CDCF5C2142D49F80F8789A0F49
Certificate serial:       75936BBFD0BC5637282FCC667DD83E3007E879B7
Authority key identifier: C4:15:92:2F:5B:DC:B2:CD:CF:5C:21:42:D4:9F:80:F8:78:9A:0F:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/323830343a353466383a3a2f33322d3332203d3e20323638363831.roa
Signing time:             Thu 06 Mar 2025 20:34:23 +0000
ROA not before:           Thu 06 Mar 2025 20:29:23 +0000
ROA not after:            Thu 05 Mar 2026 20:34:23 +0000
asID:                     268681
IP address blocks:        2804:54f8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.crl
                          rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 01:42:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:93:6b:bf:d0:bc:56:37:28:2f:cc:66:7d:d8:3e:30:07:e8:79:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C415922F5BDCB2CDCF5C2142D49F80F8789A0F49
        Validity
            Not Before: Mar  6 20:29:23 2025 GMT
            Not After : Mar  5 20:34:23 2026 GMT
        Subject: CN=0F91D7F9FA607ADE37EE494942BE889771DF5B36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fd:2c:15:79:49:80:8b:94:23:1d:db:6e:4c:
                    b0:c0:58:60:d8:f5:06:b9:25:11:e6:f8:8d:00:b9:
                    10:d1:03:d6:18:eb:7b:dd:3b:bd:7a:6c:38:37:06:
                    db:f4:05:04:54:76:2d:8b:90:2d:5c:d0:95:3f:8c:
                    0b:b9:fa:64:3e:23:cb:56:14:38:b0:bf:b0:95:b2:
                    06:53:f7:c5:4c:8c:cd:c7:ee:ce:6a:01:c3:75:65:
                    74:d8:af:cb:5a:5f:45:60:5d:3e:51:14:19:7c:75:
                    98:d3:78:22:a2:9e:34:1a:41:ba:da:f2:6e:5f:6b:
                    11:f2:34:a7:0b:f6:6e:e5:c0:65:85:99:63:07:64:
                    14:49:cb:3d:eb:47:fd:7b:76:ed:82:04:3c:7d:02:
                    82:66:73:a6:90:d6:19:a7:09:49:43:83:ca:f2:be:
                    d5:77:73:a4:48:4f:36:e5:ba:71:a4:cb:bd:20:98:
                    07:06:44:37:dc:57:2f:a4:ed:53:9d:2a:73:6a:03:
                    a8:4d:55:36:af:57:69:5e:13:fc:43:82:da:e0:fb:
                    18:1c:f5:39:32:ee:1a:a0:7d:15:8e:92:c8:ad:88:
                    68:52:22:68:0f:2a:80:5f:e9:d8:d8:b6:b8:27:d8:
                    03:e8:54:e4:d2:60:9b:8c:ce:a5:d7:a1:e6:2c:7f:
                    11:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:91:D7:F9:FA:60:7A:DE:37:EE:49:49:42:BE:88:97:71:DF:5B:36
            X509v3 Authority Key Identifier:
                keyid:C4:15:92:2F:5B:DC:B2:CD:CF:5C:21:42:D4:9F:80:F8:78:9A:0F:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/323830343a353466383a3a2f33322d3332203d3e20323638363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:b8:b3:f4:1a:fa:7e:4f:11:d3:48:9a:2f:9d:07:96:aa:b7:
         91:bb:26:c1:55:f5:47:99:10:b0:87:82:bc:72:77:ad:46:ee:
         a5:93:7b:2a:ce:ac:da:11:a6:ac:2c:9c:73:a3:81:ea:44:c2:
         6a:eb:ba:6c:ae:23:7c:36:1f:ea:d6:41:ae:74:21:9e:ac:40:
         69:fa:7c:cd:b9:43:29:12:70:8e:39:5e:7c:20:51:a1:7c:20:
         65:3e:d4:e5:10:0f:eb:3c:bb:d2:6a:fc:84:c4:00:ac:d1:1c:
         28:d6:ef:9f:43:59:b0:2c:06:77:7d:95:7b:79:2b:d0:2f:7a:
         73:bd:0d:e1:aa:60:76:3b:66:aa:bc:a6:41:4f:77:86:c9:24:
         a3:46:e5:f1:c8:f7:8f:73:22:da:9e:f3:95:0c:05:b5:0d:7e:
         6f:8b:c6:15:31:a6:dd:5a:9e:17:eb:b9:65:eb:e2:c2:9d:89:
         bd:51:43:68:61:62:86:26:62:fc:56:32:37:15:74:1e:b5:f5:
         9a:b5:fe:f5:34:af:f0:ce:46:73:39:da:ab:95:dc:4b:30:36:
         21:31:d9:48:4d:99:9d:73:55:02:a1:8e:40:94:8a:24:07:e4:
         57:8a:91:ca:da:51:f3:cc:0e:c8:c1:03:1c:e5:34:f0:06:9a:
         62:20:c3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:43 2025 by rpki-client