Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/323830343a353865303a3a2f33322d313238203d3e20323638313535.roa
File:                     323830343a353865303a3a2f33322d313238203d3e20323638313535.roa (raw, json)
Hash identifier:          3rn+DqXg6/wb20jVwMYcaH/vDfegviUIMLGDPuYvWsk=
Subject key identifier:   48:67:DE:D8:8E:D9:F2:BB:F7:40:B7:2B:A2:D2:1C:22:BA:CD:A2:2B
Certificate issuer:       /CN=4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65
Certificate serial:       07AE3B347BC190D101F58A1B9072000D5B3A9505
Authority key identifier: 4C:4D:6A:A5:7B:D3:A2:4F:77:06:C7:B6:5C:7C:8C:D5:9E:F5:CB:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/323830343a353865303a3a2f33322d313238203d3e20323638313535.roa
Signing time:             Fri 04 Apr 2025 21:53:16 +0000
ROA not before:           Fri 04 Apr 2025 21:48:16 +0000
ROA not after:            Fri 03 Apr 2026 21:53:16 +0000
asID:                     268155
IP address blocks:        2804:58e0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.crl
                          rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 18:33:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ae:3b:34:7b:c1:90:d1:01:f5:8a:1b:90:72:00:0d:5b:3a:95:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65
        Validity
            Not Before: Apr  4 21:48:16 2025 GMT
            Not After : Apr  3 21:53:16 2026 GMT
        Subject: CN=4867DED88ED9F2BBF740B72BA2D21C22BACDA22B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c7:ab:03:8a:2b:4f:46:92:3b:e1:1d:79:86:
                    93:86:17:63:f8:8b:2b:04:6e:43:46:62:f4:15:d6:
                    52:54:9d:99:22:10:72:1a:36:c6:8d:31:35:4b:de:
                    f5:5d:02:ea:e3:68:c5:ec:66:7e:bc:a0:bd:0d:f9:
                    61:24:26:c2:ce:52:94:cf:ec:05:15:9d:27:01:f2:
                    0a:ec:04:96:06:8c:0d:ba:75:1b:d0:e8:b3:15:8b:
                    c5:ae:4e:d0:e6:ca:2c:08:6c:03:d4:7e:d9:a7:11:
                    4e:23:a0:2e:88:21:f5:a5:15:c3:70:e7:f3:2f:58:
                    a9:62:5c:48:59:28:68:a7:1d:17:4e:b0:6c:25:d5:
                    e2:50:98:de:66:bc:1e:48:5b:0a:3e:b3:ec:88:34:
                    87:d0:2f:1c:72:39:70:70:a4:84:15:c7:aa:c2:af:
                    a7:10:75:ab:34:20:92:d8:ac:c0:1d:ec:9b:12:cb:
                    61:41:a5:65:1f:21:b4:15:7e:65:69:60:a8:23:c4:
                    2e:4b:dc:17:3d:31:80:e4:72:79:7b:30:8d:36:de:
                    1e:f4:37:1b:41:6b:b2:92:6e:ad:80:4b:a9:0e:79:
                    91:80:e2:b4:65:d8:b4:f4:99:1e:b8:52:be:d7:7f:
                    17:d6:df:49:cb:7b:63:7a:e1:4c:2c:27:27:a1:96:
                    cf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:67:DE:D8:8E:D9:F2:BB:F7:40:B7:2B:A2:D2:1C:22:BA:CD:A2:2B
            X509v3 Authority Key Identifier:
                keyid:4C:4D:6A:A5:7B:D3:A2:4F:77:06:C7:B6:5C:7C:8C:D5:9E:F5:CB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/323830343a353865303a3a2f33322d313238203d3e20323638313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:f8:4a:a7:8c:b0:36:b6:50:fe:99:f4:b3:9f:31:99:cf:8d:
         1f:d0:78:92:d4:92:96:dd:15:13:62:68:d6:a8:3a:40:68:ca:
         b1:44:6e:ae:85:37:2e:da:da:2e:1b:2f:b1:c4:1c:0e:38:ba:
         cd:19:4d:50:63:bb:1a:5f:c3:0a:69:fa:42:ae:9d:e2:1c:ba:
         ba:3c:06:af:bb:7a:84:f1:ce:94:7f:48:a6:b0:af:bf:72:c0:
         9c:6e:19:ba:89:09:bb:50:86:df:37:f7:16:50:59:63:3f:ab:
         90:48:73:81:b6:5f:f3:c9:2f:1c:68:98:a1:fe:09:9f:25:83:
         53:5b:b6:ec:be:4c:1b:18:d0:71:a1:d5:2a:d9:af:8c:23:8d:
         e9:77:fb:6d:48:c8:b2:26:f4:a6:5f:b0:56:e1:2b:64:ad:28:
         e5:a8:e7:1a:c9:03:5f:51:a7:ee:09:6b:5a:7a:a4:87:51:b6:
         9e:85:55:fc:bb:dc:30:d0:a3:52:07:ec:ac:53:35:7a:75:25:
         c9:09:c6:23:b3:b1:c1:6d:d7:57:d9:9e:ce:8f:74:d3:66:54:
         72:1a:aa:b8:3d:fe:4b:f4:a8:d6:e4:7b:4e:90:58:25:8e:04:
         e9:c8:2a:38:05:b7:71:7a:ce:0d:cf:08:16:6c:eb:88:8a:ea:
         3d:ec:0e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:02:23 2025 by rpki-client