Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a313030303a3a2f34302d3430203d3e20323636353434.roa
File:                     323830343a336461343a313030303a3a2f34302d3430203d3e20323636353434.roa (raw, json)
Hash identifier:          fNZ/9r46FClcYJgFPwN7V/mAYWUg10WZ4IB5KtcTfcI=
Subject key identifier:   40:86:55:3B:FB:1E:90:2A:3E:64:34:A3:35:E8:87:7E:08:67:78:8C
Certificate issuer:       /CN=2D1BC37D847D51FC76776A8E2A32C851B391DDEF
Certificate serial:       6F08E8B5AEBE9D75A8D1DC63E0C84749B004E6EA
Authority key identifier: 2D:1B:C3:7D:84:7D:51:FC:76:77:6A:8E:2A:32:C8:51:B3:91:DD:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a313030303a3a2f34302d3430203d3e20323636353434.roa
Signing time:             Fri 14 Feb 2025 17:48:28 +0000
ROA not before:           Fri 14 Feb 2025 17:43:28 +0000
ROA not after:            Fri 13 Feb 2026 17:48:28 +0000
asID:                     266544
IP address blocks:        2804:3da4:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.crl
                          rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 07:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:08:e8:b5:ae:be:9d:75:a8:d1:dc:63:e0:c8:47:49:b0:04:e6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D1BC37D847D51FC76776A8E2A32C851B391DDEF
        Validity
            Not Before: Feb 14 17:43:28 2025 GMT
            Not After : Feb 13 17:48:28 2026 GMT
        Subject: CN=4086553BFB1E902A3E6434A335E8877E0867788C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2c:fc:9c:e1:17:2c:d8:b9:b0:d2:03:57:99:
                    5f:72:b1:cd:00:de:4f:8c:72:4b:b5:4f:77:e7:32:
                    d5:96:cd:4a:8d:7d:7c:93:40:6b:3e:4c:6e:db:1c:
                    3a:ba:b0:94:fc:3d:53:03:99:f7:45:a7:bc:3a:0a:
                    5c:23:ca:8e:d9:81:e3:64:7e:2c:4b:00:a3:08:39:
                    f3:fa:73:28:3f:2d:71:d0:6b:8e:5d:de:bc:62:10:
                    d6:3c:a8:b1:62:2a:c9:fc:05:37:4c:1f:dc:34:1f:
                    f0:a0:6e:92:75:62:fd:4e:c2:65:38:d5:d7:28:23:
                    38:42:16:13:03:c4:17:17:cf:f2:a5:86:66:17:37:
                    38:63:26:ed:60:54:e6:34:20:74:5d:31:5d:76:3a:
                    39:64:5b:b3:c2:ca:7e:cb:08:a2:a8:ae:b1:d2:da:
                    55:29:56:2e:4f:52:dd:08:df:67:4e:8d:a1:1b:55:
                    36:1f:ef:f1:44:82:15:40:6c:51:4b:29:33:ac:6e:
                    bf:d1:4f:05:b9:35:95:36:7d:d4:16:9d:ed:24:e1:
                    cb:c4:9a:de:3f:a2:04:4f:e4:20:0c:59:08:f9:81:
                    5d:ed:74:95:84:ff:61:e0:b1:0d:ed:5e:87:ff:fb:
                    23:c2:41:d2:7f:a1:5f:ec:47:48:63:0c:0f:46:5b:
                    11:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:86:55:3B:FB:1E:90:2A:3E:64:34:A3:35:E8:87:7E:08:67:78:8C
            X509v3 Authority Key Identifier:
                keyid:2D:1B:C3:7D:84:7D:51:FC:76:77:6A:8E:2A:32:C8:51:B3:91:DD:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a313030303a3a2f34302d3430203d3e20323636353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3da4:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         41:58:88:48:25:4e:d1:b5:c8:6f:12:9e:3a:83:59:49:bb:1e:
         47:8a:57:b2:c9:07:b6:29:ea:2f:38:63:69:bc:71:ee:a9:06:
         2a:fd:bc:02:f1:f7:e3:c3:8a:ce:6c:3c:a6:70:f1:cb:8c:78:
         10:d8:a0:7c:f6:9e:bd:07:db:b9:03:9d:82:5b:25:67:27:eb:
         68:6f:50:5e:a3:dc:6f:10:ac:35:1d:b4:14:e7:38:68:4c:ef:
         c4:a1:7c:e1:a0:70:f5:54:73:bb:ce:f9:2b:ae:b4:33:5d:8f:
         d3:23:7f:da:a5:c7:93:7f:c6:52:17:3a:77:dd:b8:a2:9e:93:
         49:5e:df:32:e9:cd:ac:47:f4:41:21:f7:eb:cf:d1:91:e3:94:
         b0:c7:f1:bb:7c:14:9c:83:73:a0:3d:38:ad:82:83:da:88:b2:
         01:35:4b:e2:0d:8b:04:30:ed:79:2e:04:88:38:6c:a9:5d:0c:
         86:05:4a:59:77:86:61:59:1f:e9:7c:43:d9:c5:5c:f4:79:b9:
         a8:98:90:ce:71:d0:9a:46:78:d0:f7:aa:ac:a2:ec:02:62:b5:
         76:1b:75:c8:92:20:bf:89:43:b2:ee:3d:75:6b:0b:66:e4:09:
         21:7a:2f:d5:4b:31:4d:b9:9d:a7:5b:a9:f4:04:b7:52:b8:31:
         d5:b0:ae:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:37:25 2025 by rpki-client