Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/323830343a333863633a3a2f33322d3438203d3e20323636353032.roa
File:                     323830343a333863633a3a2f33322d3438203d3e20323636353032.roa (raw, json)
Hash identifier:          C6cWb5tmxGM0R2y1xyu0jRkkIO0m2htiUCIjUNYPIQs=
Subject key identifier:   40:70:5E:5A:31:1F:57:CB:E4:8E:BD:50:E8:2C:60:68:8B:EF:B8:F5
Certificate issuer:       /CN=3E4CE3FC0F15111E817F6CE526256AA7C3BF828A
Certificate serial:       1A32EF8AD92D4C8184A8E33ACF2CE4E3C209A0CE
Authority key identifier: 3E:4C:E3:FC:0F:15:11:1E:81:7F:6C:E5:26:25:6A:A7:C3:BF:82:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/323830343a333863633a3a2f33322d3438203d3e20323636353032.roa
Signing time:             Thu 06 Mar 2025 13:47:14 +0000
ROA not before:           Thu 06 Mar 2025 13:42:14 +0000
ROA not after:            Thu 05 Mar 2026 13:47:14 +0000
asID:                     266502
IP address blocks:        2804:38cc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.crl
                          rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 03:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:32:ef:8a:d9:2d:4c:81:84:a8:e3:3a:cf:2c:e4:e3:c2:09:a0:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E4CE3FC0F15111E817F6CE526256AA7C3BF828A
        Validity
            Not Before: Mar  6 13:42:14 2025 GMT
            Not After : Mar  5 13:47:14 2026 GMT
        Subject: CN=40705E5A311F57CBE48EBD50E82C60688BEFB8F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e6:81:33:24:1e:74:33:06:47:3c:08:68:3c:
                    79:62:de:a8:fd:f9:7c:65:da:8c:b4:b8:2d:90:29:
                    0a:a9:4e:5e:2d:f3:e2:2f:c2:07:51:da:36:26:84:
                    f3:42:59:5f:07:11:7a:83:04:3e:a5:71:62:df:7c:
                    a6:6c:28:42:dd:e5:26:bf:1e:86:4e:e0:17:32:ca:
                    bf:f3:14:f6:7c:79:b4:fd:14:0e:10:9d:20:18:e0:
                    d0:ef:84:15:7c:1f:80:7f:57:a9:db:40:0c:af:eb:
                    26:05:51:86:8a:5d:c4:03:04:eb:88:ce:0a:2a:56:
                    27:3a:9b:39:c5:d4:b2:f2:ef:5e:8b:ed:30:6a:8b:
                    87:92:a4:9b:2d:d9:3c:41:d4:37:34:0b:29:de:0d:
                    d7:bd:fc:b7:c7:d0:60:7b:3c:0b:57:42:dd:81:02:
                    d5:e8:f7:02:e9:5a:26:be:99:cc:ff:28:5f:29:50:
                    08:03:c1:79:a6:b1:5f:bc:10:cf:bd:99:24:f5:fc:
                    b9:05:35:c8:45:3c:23:7b:8e:16:b7:f4:07:50:96:
                    ee:84:f1:2d:c8:5e:63:6d:c6:c9:1f:97:9b:6c:2d:
                    c0:c6:67:4a:73:93:97:57:05:d6:a8:11:a6:2e:33:
                    48:be:30:04:b0:7d:52:25:d4:f6:aa:d7:c8:09:7e:
                    ba:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:70:5E:5A:31:1F:57:CB:E4:8E:BD:50:E8:2C:60:68:8B:EF:B8:F5
            X509v3 Authority Key Identifier:
                keyid:3E:4C:E3:FC:0F:15:11:1E:81:7F:6C:E5:26:25:6A:A7:C3:BF:82:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/323830343a333863633a3a2f33322d3438203d3e20323636353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:16:08:3f:3a:05:05:9e:fb:44:53:69:c0:7e:c7:ba:4c:b3:
         fa:d0:43:ae:33:66:4a:81:a2:b0:81:3e:0b:61:72:12:7a:05:
         f1:f4:52:79:a3:3e:b9:33:de:65:3e:f7:46:de:b1:fa:e1:b9:
         9a:23:c9:21:49:99:e1:10:5f:6a:05:2d:bf:fd:54:b4:82:ad:
         a7:ec:80:e0:2e:c1:10:22:bf:38:2b:69:95:5b:9f:57:28:34:
         ac:ba:ee:75:b1:f4:24:b7:bc:bd:a9:2a:1b:0a:28:b0:6f:67:
         fe:e0:1f:77:14:62:e4:17:e7:fe:54:58:bc:e4:a7:31:4d:06:
         41:f4:9f:51:bc:00:75:82:1d:55:0c:7f:d4:18:74:75:76:9a:
         e8:fa:21:2c:47:71:43:ce:23:bf:e2:97:f1:11:8a:fd:5b:9f:
         05:3e:4e:5c:f0:fa:66:b3:97:73:f9:66:44:72:87:52:61:ff:
         da:2b:d7:19:70:26:ce:a3:54:ee:d8:47:e7:eb:ef:4d:1c:4a:
         b2:d5:96:3f:b4:2f:25:ed:ec:bc:6e:20:46:d0:ca:49:da:d0:
         59:0f:5a:fb:86:18:24:d5:1b:82:c6:a9:48:8d:c0:69:12:ab:
         18:dd:9e:b2:a8:f7:35:d8:14:f6:12:68:da:1f:43:9f:04:a8:
         21:4e:c4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:24:20 2025 by rpki-client