Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a3a2f33332d3333203d3e20323634393936.roa
File:                     323830343a333132343a3a2f33332d3333203d3e20323634393936.roa (raw, json)
Hash identifier:          PgeBDgmKl+K9a6sv9imsPn3HQTWP1AYXwpjLaqJ+xTw=
Subject key identifier:   B0:F3:7D:09:66:91:CB:EB:FA:A6:99:1C:BD:AE:93:15:48:6C:D8:66
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       02A389EB125C7D5E186C89932553F6139B07C739
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a3a2f33332d3333203d3e20323634393936.roa
Signing time:             Thu 06 Mar 2025 08:50:10 +0000
ROA not before:           Thu 06 Mar 2025 08:45:10 +0000
ROA not after:            Thu 05 Mar 2026 08:50:10 +0000
asID:                     264996
IP address blocks:        2804:3124::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 18:08:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a3:89:eb:12:5c:7d:5e:18:6c:89:93:25:53:f6:13:9b:07:c7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Mar  6 08:45:10 2025 GMT
            Not After : Mar  5 08:50:10 2026 GMT
        Subject: CN=B0F37D096691CBEBFAA6991CBDAE9315486CD866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0a:05:75:f4:3f:20:76:31:74:7e:87:7d:98:
                    8e:15:d1:32:5e:71:c1:e4:14:1c:17:31:33:b5:fa:
                    83:7d:04:fa:b4:5d:5c:f1:64:90:73:d1:a9:26:e5:
                    de:eb:ac:50:e9:97:f0:06:cf:bb:1e:d7:ed:27:bb:
                    dc:6f:57:c3:fe:55:ca:d0:a7:e6:23:6a:b8:b8:0e:
                    ee:66:27:bb:97:af:ec:3b:14:82:7e:da:42:4b:56:
                    3f:98:2c:4e:ba:b5:1d:9b:71:38:1b:dd:13:7e:09:
                    2c:df:0a:f5:14:c7:8c:b0:7b:e7:08:3d:c1:43:da:
                    8e:60:6d:01:21:51:16:c3:f0:d5:eb:4f:60:e2:22:
                    3c:67:34:30:14:02:89:bf:25:5a:2d:c9:e2:08:5b:
                    12:d2:84:fc:7d:81:e0:8d:28:84:1d:95:91:50:94:
                    52:16:00:26:1d:a8:fc:14:d9:ff:59:31:0c:74:fa:
                    85:d5:4e:58:79:aa:7e:d1:07:72:7a:b7:87:73:32:
                    34:ed:d9:2f:79:9f:0a:d0:79:55:70:20:f6:cc:30:
                    af:a7:fa:a4:71:b3:ef:d0:06:0e:51:2b:29:59:10:
                    21:d3:50:4c:bb:a7:d1:57:89:04:a3:13:48:96:15:
                    09:1c:e5:f2:40:24:a2:cb:79:70:3b:ad:ed:5f:02:
                    e3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F3:7D:09:66:91:CB:EB:FA:A6:99:1C:BD:AE:93:15:48:6C:D8:66
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a3a2f33332d3333203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124::/33

    Signature Algorithm: sha256WithRSAEncryption
         2b:82:08:a9:0e:aa:e9:b5:fb:32:68:7b:72:85:9a:e2:2d:12:
         21:f1:d6:ce:28:99:d9:1b:3b:db:6f:fc:e4:80:cf:50:4c:f4:
         57:3a:d0:f8:3b:af:a0:76:4c:12:c3:90:58:2d:02:8a:75:9a:
         07:bc:7f:36:f9:a0:0d:09:f8:6c:9f:b8:45:91:37:a0:37:97:
         71:e9:c3:41:80:41:0f:91:eb:dd:14:fb:e4:7e:a5:47:35:63:
         76:95:2f:ca:12:1c:76:f8:46:39:f4:47:93:93:c2:d2:ba:5b:
         5d:9d:b6:8d:a9:6f:c5:00:94:16:dd:5e:b6:09:2c:b7:67:98:
         b8:8b:f6:3b:e3:24:cd:09:e1:a4:e2:b9:21:c0:ff:cf:9f:0b:
         89:45:0e:96:b8:1a:6a:ec:62:f6:c1:4a:fd:0a:13:86:61:de:
         72:fd:3a:b6:d9:4b:7a:60:d7:ad:95:67:6c:43:e4:f6:08:cb:
         15:3a:3f:bb:3c:d6:85:e4:b6:e4:0f:c1:3a:c2:a6:b1:30:b7:
         10:4c:2b:ea:6a:bf:22:e8:6a:c6:bf:6f:e2:fe:0a:90:d1:21:
         4f:aa:d7:2d:10:66:b1:71:4c:87:21:9e:6d:17:47:77:eb:b7:
         43:ac:2b:7b:a1:66:04:50:0d:91:88:db:2c:dc:67:16:e0:9a:
         3b:b9:c6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:29:46 2025 by rpki-client