Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/323830343a323865303a3a2f33322d3336203d3e20323632353530.roa
File:                     323830343a323865303a3a2f33322d3336203d3e20323632353530.roa (raw, json)
Hash identifier:          UcyqEdSuLsbn5YmeLlyQdotCIhx6xk/MRV2rcFw+BxQ=
Subject key identifier:   CE:26:80:66:84:31:4E:C4:6B:70:42:5F:75:5D:58:DB:FA:CA:6A:C3
Certificate issuer:       /CN=F3E5032069F08FCAFC13EA1C6AAA29F96BC47461
Certificate serial:       6F22CBBCDE37E09ACFBB4D1DF53A23174072A07B
Authority key identifier: F3:E5:03:20:69:F0:8F:CA:FC:13:EA:1C:6A:AA:29:F9:6B:C4:74:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E5032069F08FCAFC13EA1C6AAA29F96BC47461.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/323830343a323865303a3a2f33322d3336203d3e20323632353530.roa
Signing time:             Tue 01 Apr 2025 13:46:05 +0000
ROA not before:           Tue 01 Apr 2025 13:41:05 +0000
ROA not after:            Tue 31 Mar 2026 13:46:05 +0000
asID:                     262550
IP address blocks:        2804:28e0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/F3E5032069F08FCAFC13EA1C6AAA29F96BC47461.crl
                          rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/F3E5032069F08FCAFC13EA1C6AAA29F96BC47461.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E5032069F08FCAFC13EA1C6AAA29F96BC47461.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 15:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:22:cb:bc:de:37:e0:9a:cf:bb:4d:1d:f5:3a:23:17:40:72:a0:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E5032069F08FCAFC13EA1C6AAA29F96BC47461
        Validity
            Not Before: Apr  1 13:41:05 2025 GMT
            Not After : Mar 31 13:46:05 2026 GMT
        Subject: CN=CE26806684314EC46B70425F755D58DBFACA6AC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2f:f5:b8:07:7c:d6:63:ba:29:f0:e2:f9:d8:
                    e1:1f:75:fc:aa:29:76:cd:c0:e5:bd:de:bc:b2:7b:
                    ef:21:a6:56:81:cb:35:12:a6:d4:35:27:6c:46:da:
                    71:17:98:5e:a4:fe:d5:ae:d2:93:59:de:58:eb:ec:
                    d6:14:08:53:ed:9f:bb:00:46:bc:29:6d:46:0e:21:
                    07:b4:17:38:92:c2:07:fe:ca:76:16:e7:a6:7f:73:
                    30:dd:76:df:5e:8c:21:0b:9c:df:21:50:2c:99:7d:
                    fb:38:54:f0:31:8b:6f:9a:83:89:37:a6:2f:ba:a7:
                    14:fb:df:69:8d:b7:ff:8f:52:26:35:69:25:f8:2f:
                    3f:66:6a:e0:49:74:94:7d:63:54:71:ff:72:81:74:
                    11:bd:54:0f:d9:07:2a:dd:30:d7:e5:3e:38:e5:e6:
                    44:f7:d3:71:4b:9e:75:d7:ba:91:50:0e:ea:1a:20:
                    01:79:f0:3b:5c:bc:90:18:03:3a:63:01:8b:a7:71:
                    b4:b8:58:2e:14:48:3d:e8:3c:90:7c:98:4e:75:79:
                    77:ae:58:44:3c:0a:30:cc:d8:b0:4f:0b:7f:cd:1f:
                    cd:67:e5:3f:51:2d:5c:fb:af:17:a3:4f:f1:fb:c9:
                    e9:19:a9:9e:75:da:79:98:e1:32:3e:7f:11:a5:63:
                    76:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:26:80:66:84:31:4E:C4:6B:70:42:5F:75:5D:58:DB:FA:CA:6A:C3
            X509v3 Authority Key Identifier:
                keyid:F3:E5:03:20:69:F0:8F:CA:FC:13:EA:1C:6A:AA:29:F9:6B:C4:74:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/F3E5032069F08FCAFC13EA1C6AAA29F96BC47461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E5032069F08FCAFC13EA1C6AAA29F96BC47461.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/323830343a323865303a3a2f33322d3336203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:05:a9:38:b0:05:b6:d4:5e:fe:11:3b:f2:ed:85:ab:f5:24:
         8f:14:5c:ab:90:fe:cd:c7:65:59:bc:2a:13:52:38:5a:fa:6e:
         f7:4e:cd:a5:98:c5:44:91:59:52:00:a0:09:df:61:12:ea:bf:
         7f:59:38:21:90:b7:0f:54:86:ec:b9:3d:c6:65:ee:5b:89:60:
         a2:6f:00:bf:f8:83:c5:72:85:24:4d:f9:bb:b6:04:ac:57:1e:
         95:56:d4:63:5d:4d:a0:dd:01:5e:70:45:d9:aa:08:d1:36:f2:
         43:c3:0f:5b:b6:93:53:4b:61:05:1d:6e:ef:d2:b9:28:48:e1:
         5a:e4:65:97:55:e4:f8:ae:0d:e5:24:15:75:c5:bb:88:57:f0:
         66:2b:34:2c:c7:d3:43:fb:1c:e4:34:44:60:d1:be:60:70:43:
         35:75:f0:0d:8c:73:7a:08:ce:c4:59:94:be:7d:6c:43:b8:96:
         d3:71:fe:a1:75:e6:04:84:67:45:de:e7:7f:76:c6:4e:ef:f7:
         a2:76:b9:01:d0:e5:24:d9:ae:d2:94:04:5a:a0:ab:d9:c9:50:
         2e:79:0f:5a:b3:4c:c9:7b:15:71:5b:9e:d5:e8:4f:7d:d1:62:
         42:7b:6c:79:51:49:90:a0:65:a5:1f:2e:2f:85:50:23:24:84:
         14:e9:ee:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:59:36 2025 by rpki-client