Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/323830343a356562383a3a2f33332d3333203d3e20323632383636.roa
File:                     323830343a356562383a3a2f33332d3333203d3e20323632383636.roa (raw, json)
Hash identifier:          ccY/dBR8AmhsW3bSwd4RGIsdZscTMnxWjigeQtQnI1A=
Subject key identifier:   8F:41:B5:CE:C1:B3:EF:FE:90:A5:2E:51:4A:87:41:CB:BF:D5:58:E8
Certificate issuer:       /CN=732B1140085142A7D7474788EEF465DEABBE5080
Certificate serial:       220DC144F1559DB261927EFCA11D156CA68B5C36
Authority key identifier: 73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/323830343a356562383a3a2f33332d3333203d3e20323632383636.roa
Signing time:             Thu 06 Mar 2025 01:21:39 +0000
ROA not before:           Thu 06 Mar 2025 01:16:39 +0000
ROA not after:            Thu 05 Mar 2026 01:21:39 +0000
asID:                     262866
IP address blocks:        2804:5eb8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl
                          rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 19:52:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:0d:c1:44:f1:55:9d:b2:61:92:7e:fc:a1:1d:15:6c:a6:8b:5c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732B1140085142A7D7474788EEF465DEABBE5080
        Validity
            Not Before: Mar  6 01:16:39 2025 GMT
            Not After : Mar  5 01:21:39 2026 GMT
        Subject: CN=8F41B5CEC1B3EFFE90A52E514A8741CBBFD558E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7a:b3:8e:6d:19:a0:c0:ac:34:5f:90:a2:e1:
                    9a:26:a0:af:b8:9f:08:ee:a6:fc:4e:e5:fa:43:55:
                    60:b2:4c:d4:50:57:c5:92:56:ab:1b:bd:2a:95:77:
                    ea:1a:18:b1:36:b7:06:82:34:27:6b:3a:a1:20:f8:
                    fb:6e:17:0f:39:78:c1:79:e6:71:08:f0:62:7b:89:
                    3e:2e:64:7a:e5:45:7f:8b:bd:ac:71:2c:08:6e:8b:
                    f5:d2:26:9e:fc:0e:06:70:3d:89:5f:d2:a6:d6:10:
                    23:09:b0:5c:6c:47:be:75:0e:49:11:bc:c7:21:f3:
                    75:56:4e:7a:5d:b7:07:b2:dd:aa:6a:41:a1:7f:db:
                    d1:7e:fa:32:0f:13:97:b0:cb:b9:5e:69:74:bb:a5:
                    2f:14:af:d0:d8:39:b5:44:6e:53:06:f4:cc:70:7a:
                    72:8d:d6:62:81:e2:9b:d5:e8:17:ef:b2:4f:b4:03:
                    fe:49:d5:18:0e:6e:2b:cd:7e:ca:06:61:b1:6b:c6:
                    eb:72:89:48:4f:2e:ee:2c:08:02:0b:b8:cf:26:36:
                    3f:56:36:f4:2d:5c:22:0a:ea:23:c0:c2:41:8b:35:
                    c5:7d:d3:92:97:3c:8b:08:c5:dc:d9:ad:b4:59:b8:
                    50:be:de:e8:67:3f:a3:a9:11:4a:75:27:2c:93:27:
                    79:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:41:B5:CE:C1:B3:EF:FE:90:A5:2E:51:4A:87:41:CB:BF:D5:58:E8
            X509v3 Authority Key Identifier:
                keyid:73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/323830343a356562383a3a2f33332d3333203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5eb8::/33

    Signature Algorithm: sha256WithRSAEncryption
         93:b9:24:d2:dd:9e:6f:2e:26:1b:d8:a5:77:87:6b:fa:13:1f:
         74:e5:51:3a:d9:c7:36:8d:fe:da:e3:69:d4:22:56:fa:6c:10:
         f7:16:c8:d3:1c:96:ec:7b:e1:d7:93:03:24:19:2f:96:c6:53:
         78:0e:b7:a9:e3:77:19:0b:d2:f2:45:7d:7f:1b:12:82:ad:5f:
         4b:c3:a4:f2:dd:90:97:29:da:69:50:11:96:a6:ed:27:1c:5e:
         a5:17:1d:98:20:a9:5c:8d:74:2b:19:97:fe:85:24:a5:57:50:
         3a:f4:22:e5:79:0f:5b:8e:48:c9:ec:ad:5a:2b:9d:58:68:be:
         bc:de:ce:27:7d:13:37:6c:0b:5d:d3:cd:dd:d7:c8:1b:80:30:
         c2:be:d9:c7:d9:49:b4:f7:b0:38:1d:33:ae:a4:50:d1:8f:0e:
         10:45:3c:39:9b:4e:11:46:cc:e1:b2:63:0d:60:8f:83:78:19:
         16:4f:40:fd:be:29:a9:40:5f:34:dc:7e:fd:b2:29:bf:c6:4c:
         ed:b0:fe:f9:9f:01:d4:0e:f8:4a:71:ae:db:9a:25:ef:f7:7b:
         8e:69:da:90:83:9b:0d:bc:66:20:86:e8:04:a7:fa:14:a6:7b:
         c4:f3:53:7d:5c:b1:fd:6f:81:2f:b5:88:64:0d:1c:c5:df:a5:
         31:1b:88:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:00:12 2025 by rpki-client