Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/323830343a376131303a3a2f33322d3438203d3e20323731333435.roa
File:                     323830343a376131303a3a2f33322d3438203d3e20323731333435.roa (raw, json)
Hash identifier:          WkmIJ2q0SlgTYrCtFnO9ZR3QlUjidNDo41OrRg/lJ1c=
Subject key identifier:   E9:4E:06:D6:08:0B:91:D4:21:9E:8D:EB:9E:71:6A:6F:C7:D8:07:8F
Certificate issuer:       /CN=14965CE2206A073FBCD58BA22CB5BF760827E0AF
Certificate serial:       1FAED6031E5173FA50CA5ABDBF123EA9C75A512D
Authority key identifier: 14:96:5C:E2:20:6A:07:3F:BC:D5:8B:A2:2C:B5:BF:76:08:27:E0:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14965CE2206A073FBCD58BA22CB5BF760827E0AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/323830343a376131303a3a2f33322d3438203d3e20323731333435.roa
Signing time:             Mon 17 Mar 2025 20:29:37 +0000
ROA not before:           Mon 17 Mar 2025 20:24:37 +0000
ROA not after:            Mon 16 Mar 2026 20:29:37 +0000
asID:                     271345
IP address blocks:        2804:7a10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/14965CE2206A073FBCD58BA22CB5BF760827E0AF.crl
                          rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/14965CE2206A073FBCD58BA22CB5BF760827E0AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14965CE2206A073FBCD58BA22CB5BF760827E0AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 11:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ae:d6:03:1e:51:73:fa:50:ca:5a:bd:bf:12:3e:a9:c7:5a:51:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14965CE2206A073FBCD58BA22CB5BF760827E0AF
        Validity
            Not Before: Mar 17 20:24:37 2025 GMT
            Not After : Mar 16 20:29:37 2026 GMT
        Subject: CN=E94E06D6080B91D4219E8DEB9E716A6FC7D8078F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:1c:fc:a3:cd:dc:bd:1a:a6:7a:8c:74:b9:64:
                    52:26:4c:69:99:64:7a:18:ae:35:9e:78:ef:e1:94:
                    47:1b:8d:e9:c8:22:eb:f1:90:72:6d:12:4b:c2:54:
                    b4:7b:28:56:2c:5a:ca:38:ed:c2:22:e9:b8:ed:0e:
                    5c:d8:86:f0:d3:62:95:8f:4a:1d:f7:ed:11:e1:e8:
                    2a:27:a2:9b:ae:d9:20:39:3e:c5:a1:d5:2a:a3:6f:
                    99:a8:fd:d0:d0:95:b1:4a:bf:90:77:db:fd:28:0e:
                    da:7a:32:35:ed:00:02:ae:84:84:ca:e3:43:a4:17:
                    f1:60:ba:c7:19:30:5b:2e:a7:84:9b:74:df:98:a3:
                    1b:b4:c7:8b:a6:29:f6:95:00:0e:f8:2e:b6:ba:a8:
                    e9:18:ef:48:e2:12:41:38:f6:7b:2c:8b:15:9b:02:
                    c9:0d:49:76:c1:7d:ff:2d:54:d9:af:7d:b5:88:bc:
                    ab:ff:db:32:ca:95:1c:89:91:1c:ab:af:1f:08:c1:
                    bd:89:ba:7e:cb:4a:06:94:ce:aa:ba:26:a3:f8:71:
                    fa:70:e8:17:11:8f:d5:34:9b:80:3a:78:01:4b:52:
                    27:88:72:a5:9d:43:2f:da:bd:a0:86:1f:aa:0a:05:
                    0b:49:5c:ca:31:ff:5e:2d:c6:be:65:5f:7c:00:40:
                    8e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4E:06:D6:08:0B:91:D4:21:9E:8D:EB:9E:71:6A:6F:C7:D8:07:8F
            X509v3 Authority Key Identifier:
                keyid:14:96:5C:E2:20:6A:07:3F:BC:D5:8B:A2:2C:B5:BF:76:08:27:E0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/14965CE2206A073FBCD58BA22CB5BF760827E0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14965CE2206A073FBCD58BA22CB5BF760827E0AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/323830343a376131303a3a2f33322d3438203d3e20323731333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:cc:26:12:b8:92:56:06:92:52:a6:06:48:d9:3f:72:fc:a3:
         64:51:17:4e:4f:a8:89:90:42:73:35:a6:ab:43:3f:99:c0:4c:
         78:7d:4b:1a:99:7d:3e:bc:b2:6a:7a:27:33:89:eb:d4:94:5c:
         85:4e:79:e5:e7:54:e6:ba:8a:43:78:62:cf:4d:05:bd:53:08:
         2f:41:35:63:f5:35:09:71:a2:9c:4a:68:92:b8:af:05:16:db:
         28:b9:a3:0b:f0:e8:50:08:33:6e:fc:4d:dc:6c:0c:64:6b:9a:
         4c:87:58:c4:b6:b2:fe:12:9e:26:3a:97:6b:d6:89:1d:6e:46:
         d9:96:71:7f:02:f5:85:de:48:53:1f:d1:1c:43:dc:5e:7c:17:
         3a:de:38:67:60:dc:c2:2e:6d:d0:9e:46:8e:e9:04:9c:12:c4:
         b2:75:87:73:35:f4:42:be:79:9e:7c:e6:a0:bb:0e:a3:9e:8b:
         9e:97:63:15:9b:21:3b:76:88:54:ea:92:ee:58:90:d3:e6:7d:
         4f:0f:60:16:51:ee:45:0c:aa:b5:99:75:ce:65:5c:86:5c:cd:
         1b:02:71:8f:be:06:55:9b:60:8f:13:04:e0:39:d6:85:28:d7:
         63:3f:41:2e:ee:66:69:fb:da:9f:39:35:2b:75:48:1d:b0:05:
         72:a0:9f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 18:52:25 2025 by rpki-client