Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/323830343a336233383a3a2f33322d3438203d3e20323636313336.roa
File:                     323830343a336233383a3a2f33322d3438203d3e20323636313336.roa (raw, json)
Hash identifier:          BsAdEqunEhJCfkGUPGa8OoXqKBbybo/Jki+SLpM68lM=
Subject key identifier:   8D:7F:30:B2:A5:90:8F:A3:E4:01:A9:6C:E2:48:AC:91:CE:DB:BB:18
Certificate issuer:       /CN=43A7C7C2B310D67DE688F19B159433597525FE31
Certificate serial:       257E8B4B05889197BD5CB833142AB85C469E63DB
Authority key identifier: 43:A7:C7:C2:B3:10:D6:7D:E6:88:F1:9B:15:94:33:59:75:25:FE:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/323830343a336233383a3a2f33322d3438203d3e20323636313336.roa
Signing time:             Thu 06 Mar 2025 19:00:01 +0000
ROA not before:           Thu 06 Mar 2025 18:55:01 +0000
ROA not after:            Fri 06 Mar 2026 19:00:01 +0000
asID:                     266136
IP address blocks:        2804:3b38::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.crl
                          rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7e:8b:4b:05:88:91:97:bd:5c:b8:33:14:2a:b8:5c:46:9e:63:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A7C7C2B310D67DE688F19B159433597525FE31
        Validity
            Not Before: Mar  6 18:55:01 2025 GMT
            Not After : Mar  6 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:50:61:b6:f7:fc:af:5f:a1:4f:25:34:fc:13:
                    a9:d1:01:b8:5d:c4:ae:73:57:ae:84:9b:f4:2a:ce:
                    ba:73:07:20:58:2a:e9:0e:fe:e4:13:32:7d:7e:2f:
                    62:27:97:17:a6:2a:4f:9a:39:49:ad:7e:ef:00:5d:
                    94:a7:ad:32:5f:28:a0:d3:8b:c2:6f:85:ba:5d:45:
                    81:8a:47:e2:c1:98:d5:b6:f1:5d:45:ce:e8:02:e1:
                    d5:ea:bb:ec:e0:bf:64:8f:95:2c:25:f8:8c:41:5d:
                    d9:0d:98:e7:bc:31:70:67:33:df:25:52:d7:2d:a8:
                    6e:a0:d8:6b:1c:49:f2:34:18:c3:94:9e:18:76:72:
                    9c:56:b6:9d:5a:7d:6f:6d:3e:40:6e:88:f4:46:dd:
                    10:f8:6d:ff:93:08:4d:3d:8b:b2:4e:31:24:9e:ce:
                    07:61:16:8e:8b:2f:b6:d2:bd:6a:64:9a:2c:65:eb:
                    72:e3:0d:26:0c:bc:47:ae:57:32:c6:47:7e:64:4c:
                    e1:7d:2a:4b:d1:9e:97:69:f6:fc:b0:1b:78:e1:47:
                    90:41:58:c4:3c:78:35:f0:63:fa:c1:da:c9:af:32:
                    e5:c5:70:ac:a4:70:a8:1c:f5:51:a9:59:fb:4f:1f:
                    51:49:5d:59:66:a7:8a:18:43:f3:7e:86:f3:ab:d0:
                    24:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7F:30:B2:A5:90:8F:A3:E4:01:A9:6C:E2:48:AC:91:CE:DB:BB:18
            X509v3 Authority Key Identifier:
                keyid:43:A7:C7:C2:B3:10:D6:7D:E6:88:F1:9B:15:94:33:59:75:25:FE:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/323830343a336233383a3a2f33322d3438203d3e20323636313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b38::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:43:cf:62:69:3c:2e:37:06:a3:d9:3f:71:ab:ef:99:34:f9:
         6e:4c:ab:28:c0:b7:71:3e:13:d3:8a:4b:60:d8:39:78:0f:9e:
         02:83:02:01:8a:b7:98:5f:c3:66:6e:ee:76:93:a6:1d:02:b6:
         ee:25:fc:d6:a2:4a:28:b6:42:7f:96:c5:89:5e:56:87:5d:d0:
         66:31:b6:03:d2:6f:74:0a:4a:e9:9e:45:f4:27:69:32:43:ea:
         3f:08:10:35:db:02:d4:83:29:e0:ab:d1:d2:a7:06:96:db:62:
         9d:14:42:e2:de:1f:52:b1:71:20:03:0a:4a:a0:64:8a:1a:50:
         c4:79:86:8e:7a:a6:ff:16:6e:99:2b:bc:35:88:51:eb:ee:0a:
         74:88:13:c8:52:eb:2c:1e:7a:bd:9d:43:f8:4b:85:c9:20:37:
         00:53:bc:05:c8:44:2f:33:94:90:07:43:4f:21:bf:9f:79:50:
         95:24:18:8a:67:9d:05:ba:d3:2e:04:25:04:1b:dd:c9:98:ed:
         b9:0e:4a:83:ec:15:c0:88:87:33:25:bb:f9:c5:0f:2f:cb:e1:
         86:f5:5a:2a:fa:ba:c5:90:f3:a3:e2:be:88:ac:ad:bf:71:fe:
         00:8f:bf:c8:fd:55:36:09:f6:89:a4:92:b5:2a:ed:ba:3a:49:
         67:4a:76:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:41:42 2025 by rpki-client