Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/323830343a323264383a376630303a3a2f34302d3430203d3e20323634313236.roa
File:                     323830343a323264383a376630303a3a2f34302d3430203d3e20323634313236.roa (raw, json)
Hash identifier:          CQP3HUS35Qz5oIEtwNHruBuoq7MQ+rM1a+MsTLoK+Cc=
Subject key identifier:   9A:67:59:BC:93:ED:6E:B8:A5:4F:3B:AA:B6:29:50:9D:20:5B:5A:C0
Certificate issuer:       /CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
Certificate serial:       44369D8047C9AC53481A114688625904E6B3DCEF
Authority key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/323830343a323264383a376630303a3a2f34302d3430203d3e20323634313236.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     264126
IP address blocks:        2804:22d8:7f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl
                          rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:36:9d:80:47:c9:ac:53:48:1a:11:46:88:62:59:04:e6:b3:dc:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=9A6759BC93ED6EB8A54F3BAAB629509D205B5AC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:92:c2:2a:b7:5f:26:58:7a:62:12:a2:10:e7:
                    ef:77:38:a3:a0:9b:c8:87:b1:d6:11:43:47:13:0a:
                    af:7f:c3:ee:36:6a:58:64:f6:4d:c9:fa:b8:62:4b:
                    24:d4:1f:ff:98:de:8a:16:08:0b:f6:31:66:fc:da:
                    4b:3b:90:70:7d:30:12:76:97:33:1d:ee:2c:78:f8:
                    d2:06:3b:59:45:59:85:94:ef:a0:77:c6:6a:81:35:
                    8e:f9:fc:07:3f:f8:b1:d7:79:b0:6a:6d:41:a1:e0:
                    9a:de:3d:7e:98:5e:6a:51:cc:e0:e9:fc:44:d9:e0:
                    5e:a9:a9:7f:b1:06:2a:87:5a:9a:24:63:ca:14:af:
                    45:f0:e6:9f:dc:f0:ae:8a:b6:db:c2:97:e7:c8:f6:
                    fe:2b:9e:9b:03:48:33:a0:c7:20:31:ca:d5:62:c0:
                    23:1c:cc:be:03:72:8f:94:d9:0c:23:aa:de:81:12:
                    89:ff:18:70:94:d5:a7:fc:f3:d5:4d:ec:5f:75:0e:
                    05:93:05:d5:cb:bd:6b:f9:54:8d:e9:45:01:87:53:
                    49:30:ec:4d:9c:ce:ad:67:df:80:96:89:12:ed:97:
                    0f:f8:03:de:29:05:95:59:1d:3b:a5:9f:84:66:47:
                    cb:0f:41:28:2f:2d:c6:bd:0c:9b:06:7c:8b:b9:0c:
                    30:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:67:59:BC:93:ED:6E:B8:A5:4F:3B:AA:B6:29:50:9D:20:5B:5A:C0
            X509v3 Authority Key Identifier:
                keyid:2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/323830343a323264383a376630303a3a2f34302d3430203d3e20323634313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22d8:7f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         9d:9e:6c:b2:7c:ef:a3:4b:92:b4:77:3e:2e:ce:e8:bc:c8:55:
         13:92:2a:2c:7e:c6:5a:c9:30:12:12:f8:24:0c:f2:19:4f:56:
         4b:0b:9e:11:14:b1:b1:99:bd:da:54:31:11:64:7d:16:79:41:
         06:6c:ec:10:41:e8:55:1d:42:37:af:73:40:0b:27:2a:6d:b5:
         09:4c:91:e1:9c:0b:03:a2:cc:f2:f7:ad:0e:15:a7:d2:b5:c8:
         0b:25:66:a7:80:ed:0d:d2:33:9c:36:25:4b:dd:df:b9:46:00:
         af:e9:ee:1e:38:65:f5:59:de:51:4f:cf:c7:b4:89:36:4d:63:
         17:a2:d9:6f:15:e2:54:94:a0:ba:e5:e6:87:80:25:62:b3:23:
         e6:87:df:47:2b:e1:c8:48:05:0f:23:ff:82:b2:95:ba:98:bc:
         1e:fa:23:a6:9f:ba:7e:45:32:c8:10:a3:e2:44:f4:02:d6:5d:
         b1:ef:56:5a:79:8e:77:71:20:da:d1:ac:e3:7c:b0:0a:cd:7a:
         a5:12:6d:9e:49:19:4c:30:01:67:8b:3d:b5:4d:d1:6c:a9:44:
         a1:d1:97:d2:7b:8c:3b:c8:e4:13:49:b6:b4:be:49:04:bc:df:
         61:7c:10:f7:95:dd:7a:13:10:05:da:bd:40:6c:50:80:98:53:
         4d:7f:7e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:59:34 2025 by rpki-client