Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/323830343a326465383a383030303a3a2f33332d3333203d3e20323635333131.roa
File:                     323830343a326465383a383030303a3a2f33332d3333203d3e20323635333131.roa (raw, json)
Hash identifier:          d+fFZPnPo+2cYkAcQbw0VS5cLp5sTN+hC7lW95j4Zys=
Subject key identifier:   36:12:3D:59:B9:BF:CA:E7:DF:DF:1F:AF:62:FD:6D:F9:70:BD:F0:52
Certificate issuer:       /CN=F24241E6982A012648294002B697451627DFF661
Certificate serial:       5DE9CBF7E699385C5F076FE105FCE3243800A87B
Authority key identifier: F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/323830343a326465383a383030303a3a2f33332d3333203d3e20323635333131.roa
Signing time:             Thu 06 Mar 2025 16:47:36 +0000
ROA not before:           Thu 06 Mar 2025 16:42:36 +0000
ROA not after:            Thu 05 Mar 2026 16:47:36 +0000
asID:                     265311
IP address blocks:        2804:2de8:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl
                          rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 14:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e9:cb:f7:e6:99:38:5c:5f:07:6f:e1:05:fc:e3:24:38:00:a8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F24241E6982A012648294002B697451627DFF661
        Validity
            Not Before: Mar  6 16:42:36 2025 GMT
            Not After : Mar  5 16:47:36 2026 GMT
        Subject: CN=36123D59B9BFCAE7DFDF1FAF62FD6DF970BDF052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:62:56:24:9a:a3:5d:b2:0c:63:73:52:99:2d:
                    c9:c4:96:63:88:1b:13:cc:a7:47:3f:ee:94:0b:d2:
                    2d:48:a7:ef:1d:56:6b:03:f2:aa:b7:80:3c:d5:96:
                    2d:dd:d4:cc:57:f5:58:dc:7a:65:36:4f:4d:93:99:
                    2a:02:04:d5:6a:4e:4e:72:f2:ab:49:90:9c:7c:3e:
                    23:6e:04:57:8d:99:fa:70:06:80:4f:1c:cf:fb:dd:
                    f8:9a:6e:be:15:32:1f:49:f6:79:72:04:05:63:56:
                    49:7b:fe:13:ae:08:22:02:63:0b:14:af:5e:75:f1:
                    a6:48:95:89:21:92:5d:68:85:f5:ad:1c:da:33:05:
                    a6:d1:57:91:59:48:4b:38:d8:b1:31:7d:ea:4e:e6:
                    15:1f:39:7a:51:b3:de:ef:14:3c:52:ba:87:08:7d:
                    33:be:72:52:3a:da:bf:d1:67:78:4c:7c:1c:50:63:
                    c8:5b:6c:63:51:45:b3:09:84:b7:cf:92:bd:2e:ba:
                    3e:ee:ac:64:0a:77:9b:b3:cd:02:26:79:94:0a:f7:
                    01:48:2f:98:4a:08:bc:41:8c:55:ce:db:d1:ad:92:
                    ce:83:00:86:12:4d:9d:f9:b4:de:13:9b:70:7d:87:
                    b7:0d:66:62:44:d4:6e:a9:01:e7:77:55:b9:47:2b:
                    ee:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:12:3D:59:B9:BF:CA:E7:DF:DF:1F:AF:62:FD:6D:F9:70:BD:F0:52
            X509v3 Authority Key Identifier:
                keyid:F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/323830343a326465383a383030303a3a2f33332d3333203d3e20323635333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2de8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         37:1b:3e:e9:41:0b:4e:6c:5e:b3:bd:97:7a:6e:2b:41:4e:f7:
         f9:31:43:a9:8a:2e:cd:c7:b8:00:11:3b:36:08:eb:90:c4:99:
         61:05:82:46:f9:a0:e6:d2:4f:4a:79:6c:66:c8:a8:71:18:67:
         13:66:75:4f:0d:63:09:b1:71:28:81:8d:98:4d:67:38:1f:96:
         48:ab:7f:f4:50:46:74:fc:6f:27:3f:c8:cd:b7:5c:4e:07:1c:
         f9:1e:c6:c5:5b:87:e6:04:ec:66:57:8e:53:f8:54:55:30:e1:
         7f:8a:29:e6:8d:5f:b0:2f:af:14:ed:79:09:22:ee:27:97:b0:
         05:cf:c8:ee:3f:d7:fc:b3:21:48:de:57:d2:5d:62:4d:f9:be:
         72:84:69:47:40:ce:de:86:11:bf:b0:db:c8:52:f1:48:2c:6c:
         55:3c:89:f2:28:c3:12:6a:63:bc:17:ce:1f:9d:2e:80:42:aa:
         48:97:59:73:35:26:6a:5f:1a:fc:54:b0:05:1f:0e:4f:c5:7c:
         dc:b8:e6:6f:89:94:21:55:6b:a4:27:54:5c:e1:24:ae:27:6d:
         7c:06:90:d1:e8:ec:70:45:94:4f:38:ef:f2:d5:29:e2:e9:71:
         8d:49:21:3f:88:bf:0c:18:c1:66:fa:ae:21:af:d4:dd:51:73:
         57:ff:18:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:55:17 2025 by rpki-client