Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/323830343a323264383a3a2f33322d3332203d3e20323634313236.roa
File:                     323830343a323264383a3a2f33322d3332203d3e20323634313236.roa (raw, json)
Hash identifier:          F71ivpk+1NqQHvneGVzXJLNf3heVeNAS9Mm/s1aK1xc=
Subject key identifier:   79:90:59:33:D3:AE:03:55:24:DF:9C:2B:C6:FD:A0:E8:72:4B:43:B2
Certificate issuer:       /CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
Certificate serial:       58254CD63EF8010DEC060BE3A30A7CBF014F541F
Authority key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/323830343a323264383a3a2f33322d3332203d3e20323634313236.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     264126
IP address blocks:        2804:22d8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl
                          rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:25:4c:d6:3e:f8:01:0d:ec:06:0b:e3:a3:0a:7c:bf:01:4f:54:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=79905933D3AE035524DF9C2BC6FDA0E8724B43B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e1:4b:f7:25:dd:0f:08:41:e6:93:01:27:65:
                    57:6d:65:34:a3:75:bb:99:a7:b0:6c:e0:68:f7:f2:
                    f8:cf:66:75:b6:bb:eb:3f:1f:f5:76:e3:94:7c:99:
                    b0:a5:92:c6:69:3f:db:52:66:ed:f9:64:1d:a0:bc:
                    1f:82:87:c3:c5:e8:44:18:33:70:88:95:85:23:61:
                    d2:34:bf:a5:1f:9b:e4:52:98:66:86:7e:22:45:ee:
                    37:90:d5:53:cc:d0:e4:75:6d:a9:c9:6f:22:ab:93:
                    b5:42:34:34:1f:cc:fb:e2:90:cf:05:1f:a7:7a:8d:
                    0e:a6:bc:98:d1:68:96:a6:51:f5:dc:18:1b:81:f9:
                    c2:bc:53:77:53:0a:8f:cb:5f:5c:f2:b2:09:c7:0d:
                    18:b7:92:c5:39:a8:f7:b9:d2:af:b4:e3:18:9c:ac:
                    26:cd:a1:74:02:61:e3:b4:bd:68:92:34:23:04:1d:
                    3a:60:50:58:e3:5b:4a:18:c1:87:40:05:2d:f0:09:
                    b7:d0:35:4b:03:34:86:b8:b8:e4:bf:62:3a:ed:7d:
                    45:73:ac:0e:76:a6:77:e8:d1:e1:77:c1:f9:02:58:
                    5c:3f:a3:0e:84:9c:cc:ff:7d:be:55:5b:29:87:f1:
                    2b:10:55:40:cf:67:72:d9:d2:8e:c4:aa:da:62:2e:
                    d8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:90:59:33:D3:AE:03:55:24:DF:9C:2B:C6:FD:A0:E8:72:4B:43:B2
            X509v3 Authority Key Identifier:
                keyid:2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/323830343a323264383a3a2f33322d3332203d3e20323634313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:af:68:14:5d:51:a2:5b:fa:38:30:38:dc:74:2f:69:51:14:
         f7:e0:17:52:92:00:aa:b2:b9:4c:23:8d:ec:d2:65:07:28:56:
         61:06:50:b0:90:40:77:ea:06:7f:ff:fd:70:57:8e:d1:6d:96:
         af:9f:ad:d7:d6:08:20:10:b9:a7:b7:12:0f:ff:5f:c4:31:28:
         2c:34:f9:f0:9e:5f:94:2d:9b:1c:42:2c:1b:25:65:59:21:45:
         a3:b9:b9:a1:91:30:92:84:30:eb:7f:50:74:a4:1d:07:f9:76:
         a9:da:b1:04:ad:43:d6:8b:a7:de:56:51:cc:08:63:ae:8d:b7:
         9e:76:ff:45:e6:92:26:f0:cf:ba:ff:f1:26:e4:0a:2d:73:8c:
         22:2b:7d:c8:0a:26:5e:3b:a1:4d:00:c7:d6:63:81:31:40:39:
         34:4c:34:28:43:a0:c2:de:fc:9e:a7:a7:8a:c6:6f:01:10:c3:
         65:b8:ce:51:f7:96:3c:76:5c:12:a5:80:da:82:ca:56:d7:1b:
         d5:9a:39:35:07:9b:ef:96:f0:4a:34:f0:df:de:fa:ea:c4:6c:
         9b:14:78:d3:38:b7:cd:a3:b1:6b:c9:71:12:a3:d4:bd:18:11:
         42:54:5f:9b:64:28:6a:c0:a4:7a:02:6f:7c:81:71:8d:9d:24:
         da:af:c7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:59:31 2025 by rpki-client