Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/323830343a366262343a663030303a3a2f34312d3431203d3e20323730343138.roa
File:                     323830343a366262343a663030303a3a2f34312d3431203d3e20323730343138.roa (raw, json)
Hash identifier:          N2nTtvb8JXqHz8HSxYE4bRZRkUdpeFoYlVaINLv7iHM=
Subject key identifier:   19:24:F4:3A:CD:9A:53:CE:90:50:C1:69:BA:93:5B:7E:59:BB:07:D5
Certificate issuer:       /CN=CDEF1FD6690DCCED5205338EE0BC7D0E188DE842
Certificate serial:       72321A63DC0B1A4227874BD9BBA43CA4B4024944
Authority key identifier: CD:EF:1F:D6:69:0D:CC:ED:52:05:33:8E:E0:BC:7D:0E:18:8D:E8:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/323830343a366262343a663030303a3a2f34312d3431203d3e20323730343138.roa
Signing time:             Mon 20 Jan 2025 15:03:40 +0000
ROA not before:           Mon 20 Jan 2025 14:58:40 +0000
ROA not after:            Mon 19 Jan 2026 15:03:40 +0000
asID:                     270418
IP address blocks:        2804:6bb4:f000::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.crl
                          rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 20:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:32:1a:63:dc:0b:1a:42:27:87:4b:d9:bb:a4:3c:a4:b4:02:49:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDEF1FD6690DCCED5205338EE0BC7D0E188DE842
        Validity
            Not Before: Jan 20 14:58:40 2025 GMT
            Not After : Jan 19 15:03:40 2026 GMT
        Subject: CN=1924F43ACD9A53CE9050C169BA935B7E59BB07D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:75:c8:f8:95:3f:0a:4f:34:3c:fb:f5:2c:a3:
                    ce:ae:70:4d:5a:0e:3f:52:21:7e:ed:b7:c9:0b:e4:
                    a7:ee:e1:5e:ab:80:46:95:21:74:d1:7c:20:b8:49:
                    8a:ef:9b:88:52:66:1b:48:3b:18:b2:cf:14:2a:09:
                    96:60:80:29:7f:ea:5b:9b:ff:41:59:10:98:69:e2:
                    7a:bd:26:5d:93:68:8d:36:df:09:48:c8:44:f2:1c:
                    0f:27:8a:d5:1b:71:e4:02:66:1b:46:ee:c5:9b:d7:
                    85:e7:42:28:07:c1:70:b9:8f:d2:58:25:1a:06:4d:
                    85:28:c7:d0:7d:a0:78:6f:72:eb:32:a9:f3:e0:1f:
                    f4:42:d9:c4:d4:a2:72:25:5c:59:8f:f0:3a:59:e5:
                    f6:10:61:23:b0:75:f7:49:6b:cb:78:e4:a9:44:c8:
                    d4:c2:24:6b:bb:a2:0a:7b:34:8a:8d:36:bb:ec:31:
                    12:2d:65:77:f1:80:22:a8:23:5b:6f:ec:da:61:b6:
                    97:e3:43:2d:2e:b6:1c:b1:89:24:93:6b:98:12:27:
                    f3:38:14:00:6e:46:6b:4a:e9:3e:e2:44:a3:ac:3e:
                    41:3a:1b:0d:5b:b2:ec:cc:79:39:9f:9a:5c:80:97:
                    19:cf:3f:4d:77:4d:8c:a7:80:26:85:ce:4a:f8:d2:
                    92:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:24:F4:3A:CD:9A:53:CE:90:50:C1:69:BA:93:5B:7E:59:BB:07:D5
            X509v3 Authority Key Identifier:
                keyid:CD:EF:1F:D6:69:0D:CC:ED:52:05:33:8E:E0:BC:7D:0E:18:8D:E8:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/323830343a366262343a663030303a3a2f34312d3431203d3e20323730343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bb4:f000::/41

    Signature Algorithm: sha256WithRSAEncryption
         83:84:e3:2a:4c:c0:21:fc:32:a1:68:bb:df:45:98:88:44:24:
         5b:cb:fa:fa:f4:9d:0d:74:23:a9:5f:26:1d:85:10:dc:03:69:
         73:6e:c3:ed:df:bd:30:69:27:d1:54:71:62:33:0c:7c:d2:15:
         75:56:73:34:19:6f:6b:80:92:ad:00:7c:0b:d3:39:04:d2:95:
         e4:01:da:49:ef:75:d6:e1:db:f0:d5:e0:f3:7e:0d:41:9c:1d:
         11:33:da:70:6b:00:1f:91:ad:f6:7b:ed:a1:6e:e1:52:f5:11:
         03:54:55:a0:8f:92:f5:a7:19:6a:b5:a8:52:cf:37:2f:b3:1c:
         e5:a1:56:cf:28:7b:df:1b:99:eb:54:6d:9d:5c:51:4a:7f:26:
         53:ed:1d:40:af:f6:fc:0b:74:8b:2a:3e:eb:0f:10:7e:99:3e:
         2e:e3:57:88:7b:83:53:b5:7a:19:3e:3b:3a:ee:23:24:86:db:
         81:93:06:bb:43:00:7d:b8:9f:5d:0d:8d:dd:8f:96:46:1b:93:
         25:74:cc:a7:59:cd:a2:9d:6d:d1:5c:30:74:cc:9c:2b:f3:d1:
         1a:ae:18:97:45:f4:58:39:c8:fb:0b:e0:07:62:3f:ac:d7:e3:
         73:65:4a:25:64:dc:45:20:cc:32:f8:04:fa:f1:3f:df:49:a4:
         45:6c:99:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:12:02 2025 by rpki-client