Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/323830343a316362633a383030303a3a2f33342d3334203d3e203631363732.roa
File:                     323830343a316362633a383030303a3a2f33342d3334203d3e203631363732.roa (raw, json)
Hash identifier:          5Tswsw5LtxXzv2UihF+CQ4hV38Hp/I4/1HulIHFOM98=
Subject key identifier:   E3:65:66:BC:D2:D1:5F:6C:F4:39:D5:FA:23:89:2E:7D:2E:3C:ED:04
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       3790466A6492BE99040857F9B12EB6128609562D
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/323830343a316362633a383030303a3a2f33342d3334203d3e203631363732.roa
Signing time:             Thu 06 Mar 2025 18:53:29 +0000
ROA not before:           Thu 06 Mar 2025 18:48:29 +0000
ROA not after:            Thu 05 Mar 2026 18:53:29 +0000
asID:                     61672
IP address blocks:        2804:1cbc:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
                          rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 11:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:90:46:6a:64:92:be:99:04:08:57:f9:b1:2e:b6:12:86:09:56:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Mar  6 18:48:29 2025 GMT
            Not After : Mar  5 18:53:29 2026 GMT
        Subject: CN=E36566BCD2D15F6CF439D5FA23892E7D2E3CED04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f9:f0:34:76:ba:3c:38:de:d9:f1:a9:31:bc:
                    4e:ac:63:0e:b2:c1:56:dd:3f:6e:2f:5a:5b:b7:c8:
                    38:84:77:3c:5e:82:3a:39:1a:0a:e2:a9:ff:bf:d3:
                    88:b3:68:22:6a:8b:39:e0:72:83:44:ff:0a:88:f4:
                    a6:5f:3c:23:9e:78:48:b5:52:a7:d2:f1:e4:f0:d9:
                    41:de:c6:91:67:ba:78:a8:f6:b8:cd:74:e2:ce:fd:
                    b3:05:57:5e:b2:44:8c:74:ff:a7:5d:05:76:ff:46:
                    4d:81:f7:77:76:bb:90:85:ab:6c:a5:27:60:b2:7c:
                    f0:20:78:5f:ce:c9:9c:aa:4e:ee:c4:23:e1:e6:bd:
                    39:4b:b0:3b:e8:b5:0d:62:95:00:cb:ac:f0:13:7c:
                    ad:ca:f1:15:98:5c:93:3c:36:2c:06:00:9b:b9:65:
                    34:cf:a6:e5:a7:bf:7d:a1:58:a7:7c:ee:bd:4d:66:
                    83:52:39:68:72:72:56:15:6a:d4:50:e8:c8:19:d7:
                    f3:03:cb:97:6f:39:5d:8a:4c:20:79:59:e3:dd:c9:
                    0d:81:82:4c:63:1e:16:97:6b:3f:8a:07:d5:0c:f3:
                    09:bb:08:66:ae:4d:46:a6:aa:bb:0a:05:81:d3:9d:
                    36:d0:f0:ab:a8:e2:5f:70:ea:7f:6f:bb:89:3e:22:
                    82:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:65:66:BC:D2:D1:5F:6C:F4:39:D5:FA:23:89:2E:7D:2E:3C:ED:04
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/323830343a316362633a383030303a3a2f33342d3334203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cbc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         02:a4:b2:a2:d4:b7:6a:0e:7b:39:38:a2:b7:fd:c4:91:dd:03:
         c8:7d:3a:f9:ac:46:8f:c2:d5:09:17:93:90:8d:f2:cd:8f:4b:
         0a:17:ad:01:d5:5c:38:1c:03:20:6e:09:af:8b:7b:3f:4c:d4:
         c3:03:a8:fc:44:79:85:28:5c:62:96:35:2a:7b:43:db:b5:df:
         01:c5:83:61:66:a0:5e:f3:d1:e2:cc:fe:e9:40:0a:6f:49:70:
         76:d1:9e:6d:14:c9:8a:cd:fd:e9:00:ec:87:4d:37:96:3a:8c:
         b7:71:73:13:f5:28:0a:17:3a:96:fe:87:5a:4e:6c:14:1b:1c:
         d1:bc:c5:ea:07:b6:d8:49:90:59:99:67:07:d5:a2:ef:7c:1f:
         20:0c:13:e1:57:46:2a:af:95:51:93:eb:61:ea:e0:31:40:db:
         1b:6c:0c:e0:44:ad:9d:44:25:74:1e:86:2b:23:ce:e9:ae:37:
         ad:1a:aa:d8:49:10:dc:3e:84:39:1c:21:3e:86:7d:a7:f2:8b:
         fe:40:19:a8:37:21:f4:12:ed:be:ab:21:2e:d9:29:21:78:93:
         c3:9e:d5:34:e8:88:ce:57:54:67:08:ef:17:9a:30:fc:b4:28:
         7b:aa:1b:86:47:e2:80:3e:7f:41:54:a0:87:f0:cb:89:29:39:
         18:40:52:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:01:57 2025 by rpki-client