Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/323830343a343032383a3a2f33322d3332203d3e20323635393338.roa
File:                     323830343a343032383a3a2f33322d3332203d3e20323635393338.roa (raw, json)
Hash identifier:          6qZ8zmpuOaFhMXoayskpgmq+BGiXMMGpn7OSIsZ6ijU=
Subject key identifier:   69:3A:D7:73:86:29:47:F6:9E:F0:85:9E:75:2A:A6:00:98:69:DA:0C
Certificate issuer:       /CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
Certificate serial:       0147433EC078545C1141DC346C4CD0274FFAB3A0
Authority key identifier: 57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/323830343a343032383a3a2f33322d3332203d3e20323635393338.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     265938
IP address blocks:        2804:4028::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl
                          rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 22:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:47:43:3e:c0:78:54:5c:11:41:dc:34:6c:4c:d0:27:4f:fa:b3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=693AD773862947F69EF0859E752AA6009869DA0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f5:f6:6b:37:22:45:26:ac:02:75:3a:66:97:
                    12:70:a0:e4:ec:48:b6:29:b9:eb:56:3a:0a:77:90:
                    1b:dd:b7:fb:2d:47:78:36:99:b9:8a:c1:76:7d:8f:
                    e8:aa:4a:80:d5:f6:a9:db:48:2c:dc:a3:51:97:cb:
                    52:5c:2d:7f:77:e1:48:53:61:a2:53:13:46:13:36:
                    df:ed:14:62:6b:65:91:a8:de:4c:22:fa:e0:46:e5:
                    1a:04:75:d3:18:29:4a:01:e7:d3:d8:34:0b:9d:f5:
                    fc:7c:f8:be:fd:ec:c3:d7:e1:05:93:8f:e5:41:b1:
                    73:fc:9d:b6:3a:65:1a:f9:b6:64:72:17:c2:20:d5:
                    7a:99:6c:c3:87:a5:5b:7e:ff:38:9f:0e:48:1b:3d:
                    da:8a:49:c8:51:51:d2:57:c1:af:bb:6d:1d:ce:db:
                    0a:30:84:87:5b:e5:54:1d:15:27:5e:20:09:86:50:
                    bb:19:70:4d:c9:c4:a9:ce:72:a4:32:4c:89:e8:7a:
                    e4:bf:8e:a6:b5:d1:bd:7d:50:23:0d:29:35:ef:35:
                    f9:6a:4c:3b:3a:70:6e:61:32:3a:05:3e:32:91:1c:
                    02:ba:f1:94:c1:9b:f2:95:9f:7e:f3:97:41:a9:d4:
                    e5:d7:28:0b:d8:b9:42:40:d7:16:b0:33:0c:cc:c3:
                    12:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3A:D7:73:86:29:47:F6:9E:F0:85:9E:75:2A:A6:00:98:69:DA:0C
            X509v3 Authority Key Identifier:
                keyid:57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/323830343a343032383a3a2f33322d3332203d3e20323635393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4028::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:ce:07:b0:24:94:b3:39:96:15:61:3d:e2:c3:c0:10:91:aa:
         7f:4c:f9:ba:da:12:89:c4:a8:62:89:12:83:4d:b8:eb:e0:42:
         e0:13:22:ed:a0:20:66:c0:a8:0a:e3:41:d9:94:96:7f:ab:fb:
         dd:bd:49:85:6d:42:f8:5e:30:3e:85:19:67:91:fd:9f:da:b8:
         12:29:71:09:a0:ec:09:b7:9b:89:8d:b0:43:72:94:18:7b:59:
         dc:76:59:09:dd:d2:eb:79:52:91:cc:f1:67:ab:11:5f:43:0f:
         87:3d:e3:f3:69:26:1d:59:9b:7c:99:63:fb:80:df:ae:06:23:
         f8:50:c0:08:f2:80:c8:40:5b:24:88:92:73:f7:14:f1:03:c8:
         2c:97:78:3c:57:0a:6f:b1:86:d4:63:45:ce:ec:81:7e:4d:ce:
         f3:6c:33:67:68:d5:08:0c:4c:aa:18:d0:b7:59:20:14:95:37:
         51:76:9d:87:fd:ff:46:43:72:fe:b7:7b:f1:a5:99:a5:9e:53:
         54:9a:ce:d6:99:b1:1a:9e:35:fb:1b:01:3d:61:ea:88:67:e9:
         fc:1c:48:c9:fe:51:41:b8:70:96:f1:b0:be:5c:3b:f2:bf:17:
         3f:9e:d9:39:4b:6a:8a:7f:40:f5:47:6b:a4:0e:ad:f6:07:2d:
         ab:8e:31:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:32 2025 by rpki-client