Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/1/323830343a326466383a3a2f33322d3438203d3e20323635333135.roa
File:                     323830343a326466383a3a2f33322d3438203d3e20323635333135.roa (raw, json)
Hash identifier:          7YIlamDTHep4DCfL2UgfuGzwA/qac4qjhFB4bJ+3ZiE=
Subject key identifier:   45:0D:B7:5A:F0:45:6D:9A:25:69:34:8B:A0:87:C0:5C:49:96:41:29
Certificate issuer:       /CN=BB5E0437800F9F11433D11504358A8DC6375C371
Certificate serial:       2F7C09C77578A326F5FF40EEF866CF7EA36293D6
Authority key identifier: BB:5E:04:37:80:0F:9F:11:43:3D:11:50:43:58:A8:DC:63:75:C3:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB5E0437800F9F11433D11504358A8DC6375C371.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/1/323830343a326466383a3a2f33322d3438203d3e20323635333135.roa
Signing time:             Wed 05 Mar 2025 19:00:09 +0000
ROA not before:           Wed 05 Mar 2025 18:55:09 +0000
ROA not after:            Wed 04 Mar 2026 19:00:09 +0000
asID:                     265315
IP address blocks:        2804:2df8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/1/BB5E0437800F9F11433D11504358A8DC6375C371.crl
                          rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/1/BB5E0437800F9F11433D11504358A8DC6375C371.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB5E0437800F9F11433D11504358A8DC6375C371.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7c:09:c7:75:78:a3:26:f5:ff:40:ee:f8:66:cf:7e:a3:62:93:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB5E0437800F9F11433D11504358A8DC6375C371
        Validity
            Not Before: Mar  5 18:55:09 2025 GMT
            Not After : Mar  4 19:00:09 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:be:e9:61:9b:98:f7:6a:8d:75:90:2b:66:81:
                    f6:bf:36:2c:14:f0:e0:b5:cc:39:5c:00:32:ef:87:
                    0a:e1:e4:46:c1:fc:3d:ef:90:86:6a:75:73:80:ed:
                    b2:17:6e:90:51:be:d2:a6:13:a3:a2:94:28:fb:3f:
                    30:8f:18:42:0f:ea:f3:3b:ff:c1:5d:0e:00:d2:3e:
                    27:fb:e6:19:39:8b:5d:88:39:a6:24:7b:c7:1a:1b:
                    0e:eb:8f:7f:bf:b8:cf:41:02:45:57:3b:62:a6:92:
                    bc:e8:90:8e:3f:57:c0:af:77:77:34:6d:46:84:53:
                    d4:f7:a5:51:52:ba:37:c0:77:83:70:65:f7:e6:6f:
                    54:be:d3:c2:7a:06:dc:28:e2:cb:16:28:9d:33:3e:
                    56:06:42:e3:a5:0a:7c:38:35:46:4f:4b:08:cc:09:
                    f5:f8:93:ab:c9:8f:42:56:ef:0d:81:2c:4f:b4:69:
                    3b:55:8a:2c:c7:95:b6:65:a5:ed:15:db:74:a7:9f:
                    6f:bd:a7:df:34:b6:fd:85:11:94:ee:76:d9:6c:08:
                    0c:13:71:a0:dc:d7:ad:2a:ba:76:cd:00:bf:fa:a7:
                    6f:57:68:87:b6:c0:2a:bf:94:9f:66:b3:5f:13:32:
                    42:5c:b4:64:ae:47:80:d8:72:5b:de:a7:91:d2:71:
                    cd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0D:B7:5A:F0:45:6D:9A:25:69:34:8B:A0:87:C0:5C:49:96:41:29
            X509v3 Authority Key Identifier:
                keyid:BB:5E:04:37:80:0F:9F:11:43:3D:11:50:43:58:A8:DC:63:75:C3:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/1/BB5E0437800F9F11433D11504358A8DC6375C371.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB5E0437800F9F11433D11504358A8DC6375C371.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/1/323830343a326466383a3a2f33322d3438203d3e20323635333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2df8::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:fe:cd:0b:8c:28:f3:e9:2c:4d:ba:0c:70:ee:69:1b:48:ac:
         b0:ac:bf:54:e0:5e:98:2e:97:fc:74:f3:2b:9f:70:e8:c6:83:
         3f:c0:4f:a7:71:4e:04:68:0c:5d:f6:fa:f9:e0:a2:95:b4:ca:
         8b:31:45:4a:2d:cf:0e:bc:56:09:54:8e:81:65:69:2d:79:a1:
         f6:07:05:c8:be:67:57:81:d6:ed:cd:41:8c:be:73:6d:43:05:
         3f:f6:2c:a2:0d:95:92:46:1c:68:cb:ee:50:3f:79:80:3c:21:
         ab:75:da:fe:28:52:ae:3c:00:c2:be:e5:00:25:a4:a4:db:b7:
         26:57:ff:49:98:5f:46:d2:e3:8a:d0:a5:b8:e6:53:9a:f0:4c:
         fd:e1:b9:3b:ff:24:a4:44:20:62:68:d8:c4:48:27:20:a7:da:
         10:a5:ad:56:cd:a9:e0:2d:c3:58:5b:05:28:21:1c:c0:65:3d:
         7e:3d:a6:2b:c7:3c:04:c9:14:77:86:98:e5:d1:d2:f3:67:f0:
         bf:79:a6:b6:b0:bb:bc:9e:6b:1e:cc:29:1d:99:0b:05:d8:c6:
         06:a3:fa:88:13:83:34:d3:c8:30:1f:df:6a:fc:59:a0:0d:e3:
         2d:40:0e:cc:5b:37:df:07:18:a7:33:d4:91:f7:d1:39:a2:24:
         3a:49:bc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:18:53 2025 by rpki-client