Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/323830343a356134633a3a2f33322d3438203d3e20323638373633.roa
File:                     323830343a356134633a3a2f33322d3438203d3e20323638373633.roa (raw, json)
Hash identifier:          sIi1uR07sVrlu1AJSN9QZB45CvVQu/dgz6E/3biSusk=
Subject key identifier:   F6:A3:FE:AC:22:1F:06:DE:A6:DC:04:28:9D:F0:D9:2C:7A:AC:3F:6D
Certificate issuer:       /CN=759056D29FFF39251355512175D35C57E1A33318
Certificate serial:       3FE83548AF8B34B42517F9C2756AD2C0B931005A
Authority key identifier: 75:90:56:D2:9F:FF:39:25:13:55:51:21:75:D3:5C:57:E1:A3:33:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759056D29FFF39251355512175D35C57E1A33318.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/323830343a356134633a3a2f33322d3438203d3e20323638373633.roa
Signing time:             Tue 22 Apr 2025 16:07:57 +0000
ROA not before:           Tue 22 Apr 2025 16:02:57 +0000
ROA not after:            Tue 21 Apr 2026 16:07:57 +0000
asID:                     268763
IP address blocks:        2804:5a4c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/759056D29FFF39251355512175D35C57E1A33318.crl
                          rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/759056D29FFF39251355512175D35C57E1A33318.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759056D29FFF39251355512175D35C57E1A33318.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 18:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e8:35:48:af:8b:34:b4:25:17:f9:c2:75:6a:d2:c0:b9:31:00:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759056D29FFF39251355512175D35C57E1A33318
        Validity
            Not Before: Apr 22 16:02:57 2025 GMT
            Not After : Apr 21 16:07:57 2026 GMT
        Subject: CN=F6A3FEAC221F06DEA6DC04289DF0D92C7AAC3F6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:55:bc:e6:5d:e9:73:52:2e:3b:59:5f:bf:9a:
                    54:36:bf:3b:6f:e5:1b:28:da:1c:29:c2:2c:4a:65:
                    4b:11:d9:6d:af:61:ad:c8:72:4b:92:a2:ec:5e:72:
                    36:55:f6:aa:fc:6d:28:3c:31:f4:1d:2b:45:cc:bc:
                    f2:0c:04:d0:cb:b8:a4:cb:ce:76:11:8d:58:d0:86:
                    cf:ab:fb:5a:a8:5a:21:0c:a1:c5:67:78:b4:15:ff:
                    1f:c5:32:95:b5:7f:0b:a9:81:95:81:d7:80:23:f0:
                    72:7d:80:ef:d7:09:fa:de:d4:1b:a7:18:72:82:7b:
                    fe:9f:bc:31:d2:5b:05:7f:c0:fc:55:d7:26:98:cd:
                    39:9d:2f:83:ef:4e:b1:c9:f5:f9:2a:6d:24:2a:6c:
                    48:3c:2d:c5:a3:5e:64:53:f0:95:bc:d3:ca:d3:14:
                    fa:ac:80:b7:9a:27:eb:dd:9f:8e:15:10:bd:53:dc:
                    1c:4d:6a:ce:70:55:56:cd:14:1f:e3:d0:94:3d:b6:
                    31:c8:33:e1:ab:96:6f:d9:f2:b1:f4:83:b8:36:80:
                    c6:58:28:33:f5:aa:36:b2:70:b5:95:4d:55:1f:bd:
                    21:fc:5f:e1:69:7e:fe:4a:74:70:5a:c4:59:a7:de:
                    df:1f:c3:1b:80:ff:f5:b9:06:48:1f:17:75:fb:64:
                    a5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A3:FE:AC:22:1F:06:DE:A6:DC:04:28:9D:F0:D9:2C:7A:AC:3F:6D
            X509v3 Authority Key Identifier:
                keyid:75:90:56:D2:9F:FF:39:25:13:55:51:21:75:D3:5C:57:E1:A3:33:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/759056D29FFF39251355512175D35C57E1A33318.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759056D29FFF39251355512175D35C57E1A33318.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/323830343a356134633a3a2f33322d3438203d3e20323638373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:27:27:d2:b8:d5:8b:cb:62:68:52:b5:ab:cf:b4:82:ac:1b:
         9d:a7:e4:0a:44:a4:32:ce:bf:bc:c8:62:13:f4:b0:0b:e8:09:
         87:fd:ca:dd:ec:f9:37:f3:91:05:ec:28:57:c4:6a:d5:61:0a:
         bf:03:ae:51:5c:4d:6c:a0:05:01:81:65:d8:24:e0:aa:7a:0c:
         62:4c:3d:42:58:21:7a:ce:29:ce:57:2f:11:6c:a3:6d:e7:47:
         0d:d8:f2:3e:b1:f1:d1:ec:84:b3:47:c8:e8:a9:40:52:77:0b:
         50:91:08:d7:e6:9c:c4:a0:37:92:83:7d:b5:f7:88:cc:89:48:
         64:d6:ec:e4:3e:56:d1:53:4f:20:9b:af:d5:db:44:42:83:73:
         01:66:96:ef:0d:06:28:b4:ed:4b:ff:8b:f5:13:0d:0c:88:35:
         ad:15:e9:cb:1f:c1:76:74:97:12:28:54:3b:f7:a8:4e:7f:46:
         89:da:e4:5c:ae:91:c4:c2:d0:69:81:58:3e:4d:54:5a:8e:33:
         cb:3d:25:f8:54:36:81:83:d3:70:d6:c8:42:6c:da:9a:bf:07:
         5d:1a:1b:7b:ea:6f:48:e7:6b:58:8c:c4:ac:a4:6b:a4:48:76:
         de:ba:84:94:23:b3:5b:cd:d3:d0:11:9c:89:5b:bb:7a:8b:97:
         dc:e0:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:14:06 2025 by rpki-client