Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a643430313a3a2f34382d3438203d3e203631353931.roa
File:                     323830343a323331633a643430313a3a2f34382d3438203d3e203631353931.roa (raw, json)
Hash identifier:          9ptkecXI1oKYud5On6Dn441Jn5ZZl4VrXl3Z1uImDVo=
Subject key identifier:   D9:57:11:51:5A:13:35:74:5F:CA:76:CD:F6:56:8E:53:98:BF:BF:B3
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       528EC3564FEC3F6D18E3715091BDEA10897CC237
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a643430313a3a2f34382d3438203d3e203631353931.roa
Signing time:             Sat 01 Feb 2025 18:48:26 +0000
ROA not before:           Sat 01 Feb 2025 18:43:26 +0000
ROA not after:            Sat 31 Jan 2026 18:48:26 +0000
asID:                     61591
IP address blocks:        2804:231c:d401::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 18:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8e:c3:56:4f:ec:3f:6d:18:e3:71:50:91:bd:ea:10:89:7c:c2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Feb  1 18:43:26 2025 GMT
            Not After : Jan 31 18:48:26 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ae:5d:12:9c:32:7f:ba:2f:20:bc:3e:8a:64:
                    19:ae:f5:a5:6b:97:fc:21:4e:16:af:d8:6f:fb:28:
                    a1:c6:cd:de:60:94:75:6b:8d:55:4c:29:85:0b:8b:
                    c9:82:6f:19:a5:f0:d2:04:51:e9:83:36:29:ce:23:
                    14:e2:eb:8d:29:5e:c1:d4:17:38:18:23:25:75:03:
                    b8:24:2f:c2:41:6d:2a:e7:5b:de:3f:69:21:50:7e:
                    25:5d:00:fe:7a:c6:7e:9a:84:a0:df:8f:eb:87:29:
                    96:af:5c:1e:3c:a0:e5:9c:5b:a6:d4:c8:7e:33:d1:
                    19:c0:8e:fc:36:9c:4c:bb:6c:73:c3:87:0b:b7:ba:
                    37:d7:18:7b:0a:17:35:e2:d8:5f:59:77:d2:19:ee:
                    59:d8:4d:ef:c4:e8:f8:9e:cb:fa:ee:3f:cb:a2:78:
                    70:2e:08:e2:89:1f:47:32:b3:c6:3c:86:4d:87:10:
                    b2:cb:53:64:ff:d1:98:87:44:1c:0a:be:48:27:d3:
                    7e:09:54:b5:3a:e6:5c:df:fd:34:ec:ad:29:4c:15:
                    46:48:f6:99:36:6d:ef:bd:63:d5:95:b8:f3:00:79:
                    ba:0d:e4:38:00:e9:f3:3f:b7:47:58:38:0a:57:16:
                    49:24:85:9a:24:11:9c:c8:ed:60:bc:a7:b6:d1:65:
                    36:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:57:11:51:5A:13:35:74:5F:CA:76:CD:F6:56:8E:53:98:BF:BF:B3
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a643430313a3a2f34382d3438203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:231c:d401::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:e6:4a:4b:90:50:47:21:21:f3:ff:ad:ed:10:46:b0:ec:95:
         cc:d2:cd:ef:24:07:93:6a:50:23:a9:a7:c7:2a:c8:65:09:1b:
         e5:b7:7f:6a:96:0e:a6:4c:63:ec:42:b3:22:a3:90:60:bf:f9:
         63:23:2f:d2:2e:6e:76:c8:d3:10:09:85:a3:21:fe:ed:54:8c:
         84:eb:0f:1a:fd:f3:39:79:32:a1:0e:ca:3d:b3:d5:ec:5c:58:
         77:74:80:19:b2:bd:7c:a5:73:41:58:41:38:ef:d0:f2:c9:ec:
         d5:03:ff:b8:70:31:42:ac:af:41:6a:5d:03:c3:c2:d0:20:5b:
         70:cd:84:c6:d6:59:40:f8:87:aa:88:84:f8:7a:a9:7c:8e:cc:
         fe:c4:7f:13:d8:2b:30:6b:12:bd:15:3e:af:c6:62:92:8e:ea:
         ee:a5:fc:80:a4:4e:78:19:6c:9e:88:c8:ef:13:a4:f2:b4:b2:
         9c:9f:04:65:0d:64:92:b7:00:1c:d0:e8:37:8b:e2:8a:07:dc:
         f3:8f:4f:10:4c:9b:2b:aa:a5:55:01:e0:b1:f8:8d:63:ba:39:
         0e:16:75:74:53:06:7a:96:e0:59:61:a6:f5:21:17:18:c7:8c:
         73:25:ef:01:67:5a:27:b2:e8:ee:22:d8:c6:1a:ae:4e:c2:5a:
         d2:a5:c1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:08:55 2025 by rpki-client