Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a363430313a3a2f34382d3438203d3e203631353931.roa
File:                     323830343a323331633a363430313a3a2f34382d3438203d3e203631353931.roa (raw, json)
Hash identifier:          gaC1FwpMmFuLU+ShXiKs6nSaa0Ufdvoie0D4Yqi3tpE=
Subject key identifier:   57:FD:3F:81:51:A4:89:DE:ED:65:D5:72:F3:DD:55:17:A3:9B:67:C0
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       129E09EF5DB9F19C6CCBA77319559CB350DC38C9
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a363430313a3a2f34382d3438203d3e203631353931.roa
Signing time:             Sat 01 Feb 2025 12:45:35 +0000
ROA not before:           Sat 01 Feb 2025 12:40:35 +0000
ROA not after:            Sat 31 Jan 2026 12:45:35 +0000
asID:                     61591
IP address blocks:        2804:231c:6401::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 18:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:9e:09:ef:5d:b9:f1:9c:6c:cb:a7:73:19:55:9c:b3:50:dc:38:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Feb  1 12:40:35 2025 GMT
            Not After : Jan 31 12:45:35 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5e:1c:91:6c:1a:76:89:5b:e7:9b:77:39:1f:
                    50:3b:c7:d5:b9:60:0d:6b:b9:e3:da:20:2c:0e:02:
                    25:28:3d:eb:40:f6:ed:2f:3b:ea:ac:e5:96:95:ff:
                    37:51:4b:de:95:b9:71:e0:9e:e5:db:b1:2e:2d:76:
                    61:c3:3f:7e:e9:6d:3b:a8:3d:9f:d0:78:97:8d:f5:
                    90:20:9e:39:2a:2c:97:80:4e:5c:ca:c2:0a:aa:73:
                    ce:41:0b:1d:43:f3:b2:74:a4:64:21:a1:1b:cc:71:
                    29:8b:5f:6f:87:a8:58:34:18:b4:49:46:91:ce:da:
                    44:e7:e6:28:9d:44:44:50:75:e4:54:44:39:e1:f4:
                    8f:17:ca:4e:58:41:89:c5:e8:cb:7b:90:29:2f:f7:
                    40:35:f0:19:f8:be:04:91:01:12:e5:9e:d6:1e:bc:
                    20:0e:ea:5c:0d:8a:51:82:93:52:d5:0f:96:5b:fd:
                    31:77:01:e4:8f:01:95:8b:ec:02:d6:37:ab:8a:1b:
                    30:22:81:cc:3f:8c:47:b0:be:84:41:e5:d4:33:08:
                    a5:31:ae:57:e2:da:d9:a7:0f:2d:c9:85:82:1d:c8:
                    79:bd:51:46:91:02:a8:32:cf:62:3d:11:d1:07:a7:
                    09:5c:e4:9d:01:7f:77:a7:51:05:b7:24:11:35:a0:
                    b1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FD:3F:81:51:A4:89:DE:ED:65:D5:72:F3:DD:55:17:A3:9B:67:C0
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a363430313a3a2f34382d3438203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:231c:6401::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:a2:4b:32:55:65:35:51:15:d4:9c:9f:d2:45:a8:c3:a3:fe:
         95:74:35:1f:82:a5:8d:2b:68:c6:9c:b0:5b:f8:26:b9:97:af:
         5a:bc:f5:6e:e3:b4:1a:1f:d4:a5:cd:bd:68:0b:13:87:cc:5d:
         c3:59:c9:60:39:f8:be:a1:94:bf:17:24:58:a0:e3:44:44:ce:
         1f:1a:14:ef:92:ac:1c:da:e1:48:f0:44:12:7c:8f:ac:66:b7:
         9d:48:77:6b:68:46:b7:50:07:7b:5e:93:69:52:1f:09:f3:df:
         e1:9b:59:26:99:18:27:b1:0f:ca:d1:ec:fa:b8:f2:14:26:a7:
         44:bf:93:e4:40:ad:31:6a:13:b3:33:9c:28:1e:1d:5a:72:b1:
         69:f5:08:03:d8:a5:e9:3f:00:3d:f0:ab:63:65:4a:bf:6d:07:
         08:99:6a:f8:15:2e:3f:08:5e:52:b9:cb:59:b6:fc:76:aa:9d:
         e1:d9:12:14:e6:32:04:99:a8:da:2a:e6:70:cb:5c:31:bd:1c:
         bd:87:5b:48:f0:3f:79:98:30:1f:bb:80:c8:ae:37:41:41:ad:
         5e:38:60:c6:60:e8:35:40:0b:35:09:6c:de:d4:92:39:be:38:
         b9:6b:1d:81:d9:de:ae:03:44:02:57:71:77:34:53:4d:3c:f1:
         c9:f1:ec:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:08:54 2025 by rpki-client