Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a333530303a3a2f34342d3434203d3e203631353931.roa
File:                     323830343a323331633a333530303a3a2f34342d3434203d3e203631353931.roa (raw, json)
Hash identifier:          Xx4rp1D/7XAv2i+AbKjY0aZUy1SavDjV9SzUUHGMqwQ=
Subject key identifier:   D4:FC:BD:8D:37:6B:E4:A3:14:BA:CE:71:45:0D:49:83:8D:72:EB:74
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       553E19AEC262A19ABEFCA711A9EE62B8FEDC00A1
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a333530303a3a2f34342d3434203d3e203631353931.roa
Signing time:             Sat 01 Feb 2025 12:43:34 +0000
ROA not before:           Sat 01 Feb 2025 12:38:34 +0000
ROA not after:            Sat 31 Jan 2026 12:43:34 +0000
asID:                     61591
IP address blocks:        2804:231c:3500::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 18:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:3e:19:ae:c2:62:a1:9a:be:fc:a7:11:a9:ee:62:b8:fe:dc:00:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Feb  1 12:38:34 2025 GMT
            Not After : Jan 31 12:43:34 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9d:02:7f:2f:59:77:51:74:ee:c8:6c:33:15:
                    df:ca:4c:9e:4f:c5:79:bc:f4:c6:1f:0d:fc:1f:e8:
                    f6:0e:b7:34:50:09:ee:56:4b:7e:76:41:04:ad:f7:
                    b7:22:ab:9a:d6:7c:0f:3d:ec:f3:fa:cd:3c:e7:ac:
                    91:92:2d:de:f5:ca:57:cf:6d:da:2d:35:64:89:09:
                    37:3f:5e:bb:2b:7f:7c:21:71:b6:7b:e4:80:e9:10:
                    38:89:12:ad:31:de:ed:2d:c5:4e:3d:71:be:14:25:
                    e2:42:aa:29:af:c1:bc:90:04:46:aa:eb:49:87:48:
                    4f:26:62:9a:af:83:c1:b9:fd:89:ee:1d:e2:03:b5:
                    d5:78:75:9d:a1:98:1f:4e:6f:2e:ee:c7:96:5c:1b:
                    28:48:bd:53:24:dc:f7:4d:43:67:68:f2:87:2c:49:
                    be:fe:d4:0d:04:3d:71:60:f9:e4:b7:1b:15:b6:97:
                    d2:b0:15:8f:c0:61:ba:92:24:9e:e6:ff:d7:35:3c:
                    3a:d6:89:60:cf:3e:e2:88:5a:67:f6:13:b8:00:2f:
                    4e:7d:f5:87:81:1b:1b:30:82:6d:10:a3:93:7b:80:
                    c6:4d:18:0f:93:c4:87:b6:66:98:d3:44:be:92:d5:
                    ec:99:97:ca:6a:09:ff:d0:b9:20:f2:10:50:e4:6c:
                    8b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FC:BD:8D:37:6B:E4:A3:14:BA:CE:71:45:0D:49:83:8D:72:EB:74
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a333530303a3a2f34342d3434203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:231c:3500::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:5c:97:a8:b3:7a:31:5a:ad:49:6a:8e:66:23:02:50:03:16:
         79:65:dc:9a:64:d5:77:b2:2e:21:35:8f:66:9e:e2:82:51:01:
         3e:7a:75:d0:0c:96:80:b4:8d:bf:06:44:4a:25:d0:39:e5:18:
         f8:b3:16:9a:50:fc:86:57:3f:5d:c9:c0:8c:aa:f0:59:d3:f2:
         46:70:36:f2:fa:64:7b:5d:68:c7:18:ce:fb:77:1c:59:6a:0e:
         8e:7a:1f:b5:bc:a7:a4:5b:9a:92:bd:8a:9c:4e:5c:7c:4e:b9:
         e9:5d:28:95:50:a2:6d:ee:ed:7b:0f:3a:e9:32:79:09:f4:f4:
         f2:00:4b:66:f3:80:ea:50:64:65:f3:d7:64:06:23:7a:69:e6:
         0f:9a:75:15:65:c2:6f:23:fc:b1:c3:5f:50:6c:5d:55:29:40:
         b2:5a:48:52:89:85:24:7c:b6:4f:8a:37:ab:f3:83:0e:39:7a:
         5b:df:8c:96:37:3f:06:80:f5:50:1c:2a:3c:b6:67:76:90:99:
         f1:d5:8b:7a:64:1a:f3:d6:10:1d:d5:42:fc:bb:3e:b5:13:fa:
         3a:8b:a9:dc:9b:d0:6f:bd:7a:a3:3d:79:25:a4:37:42:6c:5e:
         f2:08:05:c1:1c:16:9a:17:64:3f:c1:e1:e1:24:21:cb:e5:1c:
         94:b0:91:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:13:31 2025 by rpki-client