Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/323830343a326465383a3a2f33332d3333203d3e20323635333131.roa
File:                     323830343a326465383a3a2f33332d3333203d3e20323635333131.roa (raw, json)
Hash identifier:          pSDPfqCTaJZ8I4HLub6IJUsutWDjFWlr186ZP9sh578=
Subject key identifier:   56:F0:E1:4F:5E:56:64:31:97:A5:A1:A4:0B:B9:2C:EB:61:BF:03:9F
Certificate issuer:       /CN=F24241E6982A012648294002B697451627DFF661
Certificate serial:       397EE59784D6AE477626D4780706E35E502F9CF1
Authority key identifier: F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/323830343a326465383a3a2f33332d3333203d3e20323635333131.roa
Signing time:             Thu 06 Mar 2025 16:47:35 +0000
ROA not before:           Thu 06 Mar 2025 16:42:35 +0000
ROA not after:            Thu 05 Mar 2026 16:47:35 +0000
asID:                     265311
IP address blocks:        2804:2de8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl
                          rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 14:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7e:e5:97:84:d6:ae:47:76:26:d4:78:07:06:e3:5e:50:2f:9c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F24241E6982A012648294002B697451627DFF661
        Validity
            Not Before: Mar  6 16:42:35 2025 GMT
            Not After : Mar  5 16:47:35 2026 GMT
        Subject: CN=56F0E14F5E56643197A5A1A40BB92CEB61BF039F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:17:63:fa:89:e1:7c:eb:f7:88:69:b6:2c:04:
                    11:d1:4c:bf:61:c2:d2:09:54:03:ce:4a:84:50:cf:
                    99:dd:f9:61:02:a9:ac:c5:bd:75:2f:b3:e4:ed:4a:
                    d3:03:1a:96:14:3d:a6:6f:80:e1:38:9a:2c:15:cd:
                    f2:cb:00:37:db:27:2c:fb:67:94:bb:e3:07:f1:0f:
                    85:24:fd:58:ed:18:67:a4:cb:19:ef:a8:21:fc:29:
                    38:1e:9c:10:a2:e3:30:e8:f5:34:1a:ff:ee:10:82:
                    e7:7e:ed:17:bf:7f:e4:52:90:15:e6:cc:e0:9d:ae:
                    b9:a2:03:65:83:0e:ff:1d:58:14:07:ab:c6:df:c6:
                    e6:2f:25:f6:0f:f4:cc:8b:10:5b:00:f2:26:70:13:
                    d3:0c:20:d4:51:41:1b:48:d3:d6:32:c2:ce:54:fe:
                    f3:5c:0a:82:c6:cd:94:f7:34:c3:40:e0:26:c5:49:
                    d3:da:82:2a:65:3e:87:fd:ac:33:d1:3b:38:33:43:
                    53:9b:1b:77:ab:99:d9:53:c8:6f:b9:d3:e3:ee:9e:
                    89:ca:08:7c:59:ed:b8:53:c7:d5:14:13:4b:39:cc:
                    2d:f7:f3:17:7e:31:82:5d:2e:50:ce:8f:fb:68:3f:
                    96:ad:fd:05:01:77:a7:ba:10:60:a6:a8:51:36:42:
                    1c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F0:E1:4F:5E:56:64:31:97:A5:A1:A4:0B:B9:2C:EB:61:BF:03:9F
            X509v3 Authority Key Identifier:
                keyid:F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/323830343a326465383a3a2f33332d3333203d3e20323635333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2de8::/33

    Signature Algorithm: sha256WithRSAEncryption
         5b:32:a3:6d:da:27:4a:d9:33:0b:31:53:a1:3d:2b:fa:69:30:
         a3:06:31:9a:78:b2:06:a9:04:6d:25:7e:98:96:42:b2:97:4a:
         d8:e2:6f:a6:ee:fc:5b:ba:83:68:63:83:6a:4d:8c:0b:48:1c:
         50:3d:30:0d:e6:1d:5b:4b:98:97:c9:5c:df:cf:20:2d:d3:63:
         52:02:9f:ba:5e:38:3a:f6:7d:9d:f1:b8:fa:29:18:36:c4:ae:
         60:9b:16:41:70:ad:da:23:2b:ba:48:45:b1:c5:19:a6:8d:c8:
         a1:6a:b3:e9:30:12:c4:c4:eb:e1:8c:3c:9b:65:b8:6a:8d:60:
         c4:44:f7:ab:18:a2:e7:1a:4c:c4:70:64:a6:fe:bd:62:37:5a:
         78:7e:5c:b4:e2:7f:2a:c0:ec:bb:56:50:34:8a:f7:1f:12:3b:
         9c:55:71:ac:e6:c1:7d:ce:4b:4d:c8:f6:1a:bd:dc:9f:7f:5a:
         df:d4:4a:f2:0f:43:95:66:f9:0f:b8:06:ea:0a:cd:1f:42:84:
         ae:a1:34:03:c9:ee:65:96:d6:b4:02:30:57:27:ba:41:ae:fe:
         34:6c:e1:0b:e2:73:32:2b:f6:c6:0a:84:8a:e9:ec:80:d1:c5:
         84:e0:68:aa:ec:e0:ec:7e:88:9e:18:0e:06:b9:08:ab:cf:35:
         06:62:e5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:23:56 2025 by rpki-client