Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/323830343a383333633a3a2f33322d3332203d3e20323732313835.roa
File:                     323830343a383333633a3a2f33322d3332203d3e20323732313835.roa (raw, json)
Hash identifier:          aGIl/LE/JlIFKLywuV74BW53ExFvQdI3FynFIHfHA0Q=
Subject key identifier:   33:37:FD:CB:07:28:07:50:60:B0:70:54:87:83:5C:DB:3B:23:6A:DA
Certificate issuer:       /CN=328938F6B87D58141D853FA04B61F2EC68371E43
Certificate serial:       2B9DDCA29D370A7491AB05D7A9B5E020AEECF872
Authority key identifier: 32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/323830343a383333633a3a2f33322d3332203d3e20323732313835.roa
Signing time:             Tue 01 Apr 2025 14:22:37 +0000
ROA not before:           Tue 01 Apr 2025 14:17:37 +0000
ROA not after:            Tue 31 Mar 2026 14:22:37 +0000
asID:                     272185
IP address blocks:        2804:833c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.crl
                          rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 14:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:9d:dc:a2:9d:37:0a:74:91:ab:05:d7:a9:b5:e0:20:ae:ec:f8:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328938F6B87D58141D853FA04B61F2EC68371E43
        Validity
            Not Before: Apr  1 14:17:37 2025 GMT
            Not After : Mar 31 14:22:37 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:7d:72:bd:32:aa:71:e3:a4:0f:a5:08:5a:83:
                    6c:5a:72:fa:d9:97:c7:23:db:15:3d:7a:5b:2a:1e:
                    08:b5:30:ed:26:30:ff:4c:b2:8f:87:90:f8:af:3a:
                    8f:2c:84:b9:aa:a7:3d:42:e1:92:5f:7d:2b:2e:b8:
                    d6:ad:69:3d:43:e7:a7:11:37:1a:38:d0:77:3e:c6:
                    e4:a7:e6:d0:36:6c:0a:d7:d1:2e:ef:be:56:85:7b:
                    ee:a6:7b:73:f2:04:bf:7d:c7:ea:34:48:5b:db:d3:
                    e7:3b:3a:b5:fa:8e:15:0e:12:3c:fa:26:08:a0:46:
                    4f:d3:4d:17:25:e8:45:7e:c9:ff:66:50:35:44:64:
                    da:e8:90:bc:10:4e:49:71:91:c0:6b:46:08:b5:29:
                    8e:71:d0:e6:18:f7:33:d4:11:2a:c0:09:17:39:f2:
                    a6:a0:dc:f4:11:0d:a2:42:60:e7:e5:5c:e4:98:6b:
                    8c:73:4b:85:bb:64:19:24:7d:15:90:61:7e:2e:c6:
                    21:ab:f0:8a:29:2b:57:f3:2c:3a:bb:61:dc:89:d0:
                    e0:98:15:d7:90:7b:45:f6:02:80:af:99:64:c2:b5:
                    2e:b8:31:99:ff:96:52:a6:cf:e5:84:e7:84:ce:c5:
                    94:79:72:4c:5e:13:1c:10:c1:2d:c7:da:45:02:ce:
                    60:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:37:FD:CB:07:28:07:50:60:B0:70:54:87:83:5C:DB:3B:23:6A:DA
            X509v3 Authority Key Identifier:
                keyid:32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/323830343a383333633a3a2f33322d3332203d3e20323732313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:833c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:7d:c7:e5:93:8b:bc:a2:a3:ff:93:e6:ea:b2:19:12:3f:50:
         7b:b4:3e:4b:7f:e9:34:c0:32:f1:6f:a1:c1:58:33:c5:b4:be:
         61:29:35:96:fc:81:de:33:03:b3:80:43:50:78:4c:a6:f5:e7:
         c4:fa:65:89:db:d4:35:ba:b6:77:3d:47:67:11:ed:62:10:7e:
         03:e8:2c:af:10:05:c3:7a:32:2e:df:a9:69:53:7a:a5:96:da:
         57:b8:f1:c4:87:9f:63:9d:35:bb:58:32:f0:08:eb:f9:1a:69:
         26:6f:38:66:d1:72:3e:04:96:81:9e:59:38:34:05:1d:1a:fb:
         af:1e:ef:56:be:5a:8b:a4:0f:f0:51:2a:53:cd:59:9e:31:3b:
         6e:bf:71:43:44:74:eb:a4:a8:0e:ce:ad:91:3a:68:3a:81:fa:
         dc:54:a7:6b:38:9d:3e:0c:34:08:8d:cd:a7:b7:97:f5:20:b2:
         45:d3:26:b7:64:e2:57:92:fb:ab:56:e2:3c:f7:9b:f3:50:41:
         b9:0a:1d:24:23:2a:93:7f:40:38:60:38:df:d7:59:09:ea:4f:
         f7:fe:61:38:08:08:76:4a:34:02:c3:7a:e9:d9:0c:7f:e7:43:
         a0:d3:2d:3d:59:76:50:6e:e6:da:26:2a:82:b7:a6:01:81:9b:
         e3:c7:c9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 18:57:35 2025 by rpki-client