Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2/323830343a376466303a3a2f33322d3438203d3e20323731353932.roa
File:                     323830343a376466303a3a2f33322d3438203d3e20323731353932.roa (raw, json)
Hash identifier:          nFAzKRkH6KSr40O3SBiFIaTqm02bSrQpi/nyXPLJoDY=
Subject key identifier:   87:0A:A8:D5:35:35:27:08:36:66:96:FB:BD:42:91:7A:51:CA:4A:BA
Certificate issuer:       /CN=0D87E481DDE13C2B08241FF1415855CEAAAD5A90
Certificate serial:       2D9D1B2F0C0084C2065C531DA8A13C7FB8AD5A46
Authority key identifier: 0D:87:E4:81:DD:E1:3C:2B:08:24:1F:F1:41:58:55:CE:AA:AD:5A:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D87E481DDE13C2B08241FF1415855CEAAAD5A90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2/323830343a376466303a3a2f33322d3438203d3e20323731353932.roa
Signing time:             Thu 06 Mar 2025 07:55:27 +0000
ROA not before:           Thu 06 Mar 2025 07:50:27 +0000
ROA not after:            Thu 05 Mar 2026 07:55:27 +0000
asID:                     271592
IP address blocks:        2804:7df0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2/0D87E481DDE13C2B08241FF1415855CEAAAD5A90.crl
                          rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2/0D87E481DDE13C2B08241FF1415855CEAAAD5A90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D87E481DDE13C2B08241FF1415855CEAAAD5A90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 06:36:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:9d:1b:2f:0c:00:84:c2:06:5c:53:1d:a8:a1:3c:7f:b8:ad:5a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D87E481DDE13C2B08241FF1415855CEAAAD5A90
        Validity
            Not Before: Mar  6 07:50:27 2025 GMT
            Not After : Mar  5 07:55:27 2026 GMT
        Subject: CN=870AA8D535352708366696FBBD42917A51CA4ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f9:aa:5a:47:e8:a1:17:2d:29:63:4d:da:d4:
                    d6:e3:9c:c5:12:16:46:dd:22:0d:6a:a7:ab:19:37:
                    61:f2:6e:4b:c2:9a:33:5a:0c:37:2b:03:09:4b:e7:
                    75:b3:82:6e:2d:fe:57:66:42:e0:6d:a9:56:29:8c:
                    6e:7e:b0:1f:cd:c4:5d:38:1c:49:f8:ad:31:4d:db:
                    87:ba:3d:af:6d:58:52:63:d2:24:e0:d6:cc:8f:ed:
                    aa:c1:74:df:9c:d2:79:f1:db:f8:50:92:5b:fe:f3:
                    a3:d4:b4:6a:5d:07:27:27:df:0c:8b:c9:b6:fd:3f:
                    c7:b0:8b:20:b9:d1:a3:43:6e:14:ee:61:1f:f1:30:
                    de:8d:20:49:c5:1d:f8:51:b5:b5:8c:51:6d:c0:68:
                    4b:98:51:1d:a1:f1:1e:d6:aa:44:16:c3:0d:a3:82:
                    cd:75:46:c8:95:83:f6:4f:f6:6a:1c:e1:9a:49:2a:
                    00:82:3c:c9:02:dc:f5:10:b3:d9:1f:8d:74:5f:b3:
                    75:65:e7:18:8c:4c:92:5b:63:95:ba:56:d4:fb:be:
                    55:1b:46:fa:77:4f:fb:47:a9:e0:3c:71:56:c6:fb:
                    39:9f:7f:ad:40:ab:35:31:e4:b4:07:0f:43:72:fc:
                    e1:14:41:81:cf:e6:34:8d:bf:1c:76:5f:41:2b:a1:
                    8d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0A:A8:D5:35:35:27:08:36:66:96:FB:BD:42:91:7A:51:CA:4A:BA
            X509v3 Authority Key Identifier:
                keyid:0D:87:E4:81:DD:E1:3C:2B:08:24:1F:F1:41:58:55:CE:AA:AD:5A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2/0D87E481DDE13C2B08241FF1415855CEAAAD5A90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D87E481DDE13C2B08241FF1415855CEAAAD5A90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2/323830343a376466303a3a2f33322d3438203d3e20323731353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7df0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:7c:81:0e:f0:a7:ec:cd:f5:64:fa:54:06:9f:cb:0c:51:0b:
         6e:52:f5:07:17:cf:b5:c2:b0:46:d7:86:6d:ae:13:7a:7c:72:
         5b:9e:08:bf:20:0c:c5:26:ec:6f:34:8c:1f:0f:a7:87:6c:1f:
         75:13:6b:f2:10:24:e6:4b:b4:92:d4:59:f3:50:18:d7:2f:44:
         e1:46:8d:7c:8b:fd:f3:4a:33:1a:81:74:35:94:ef:91:09:fc:
         01:4e:38:2f:9c:23:19:30:54:97:e1:95:67:2f:19:e6:00:9c:
         59:fd:94:f4:5c:62:75:1c:4a:89:6a:b6:a8:69:7f:6c:7c:48:
         e2:60:52:66:7f:bc:4f:0a:d5:52:cb:f3:00:d7:a1:4c:cf:7b:
         d1:67:90:d7:27:f7:50:de:b0:40:1b:98:3f:dc:27:ba:4f:c2:
         f1:54:68:20:46:4b:01:85:d3:be:a0:12:21:8c:c1:b2:d9:34:
         bb:b2:3e:cd:ab:23:15:d9:c6:a4:88:ed:42:49:4d:51:ab:d6:
         9d:65:0b:5b:20:8a:68:e5:bf:66:00:5e:60:f8:dd:e5:aa:49:
         73:18:c1:40:4a:83:f0:49:53:d2:71:c7:75:01:bb:69:38:05:
         d8:56:ad:b8:2e:74:c8:e0:3f:19:56:31:cc:27:b3:37:d7:90:
         04:45:06:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:03 2025 by rpki-client