Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/323830343a326131343a3a2f33322d313238203d3e20323634303535.roa
File:                     323830343a326131343a3a2f33322d313238203d3e20323634303535.roa (raw, json)
Hash identifier:          UbAj2R//em+WdlXVL+7WVTqf8RJSwSUSxcisE9XX/5c=
Subject key identifier:   AC:4C:5D:28:C1:68:42:BB:4A:BE:9F:DC:BC:83:86:E9:CA:D3:78:8B
Certificate issuer:       /CN=C4718E13E885F1DF2DA1B48E5359594EF87F0F64
Certificate serial:       6B5B60FDD75E3EDBC25540F6C26A62AFA8C4C7B3
Authority key identifier: C4:71:8E:13:E8:85:F1:DF:2D:A1:B4:8E:53:59:59:4E:F8:7F:0F:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4718E13E885F1DF2DA1B48E5359594EF87F0F64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/323830343a326131343a3a2f33322d313238203d3e20323634303535.roa
Signing time:             Wed 12 Feb 2025 00:51:53 +0000
ROA not before:           Wed 12 Feb 2025 00:46:53 +0000
ROA not after:            Wed 11 Feb 2026 00:51:53 +0000
asID:                     264055
IP address blocks:        2804:2a14::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/C4718E13E885F1DF2DA1B48E5359594EF87F0F64.crl
                          rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/C4718E13E885F1DF2DA1B48E5359594EF87F0F64.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4718E13E885F1DF2DA1B48E5359594EF87F0F64.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5b:60:fd:d7:5e:3e:db:c2:55:40:f6:c2:6a:62:af:a8:c4:c7:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4718E13E885F1DF2DA1B48E5359594EF87F0F64
        Validity
            Not Before: Feb 12 00:46:53 2025 GMT
            Not After : Feb 11 00:51:53 2026 GMT
        Subject: CN=AC4C5D28C16842BB4ABE9FDCBC8386E9CAD3788B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c2:3d:4a:05:55:41:a7:9f:46:fc:1d:64:ff:
                    d1:db:e5:14:13:29:ec:77:ac:98:00:ca:09:49:d0:
                    51:be:13:f0:1f:d6:f7:00:4a:32:96:6a:2e:e2:42:
                    42:d8:87:e2:52:32:7b:80:ad:53:37:63:11:09:03:
                    2d:62:b4:b2:9f:e0:a7:76:ea:ff:4f:f7:f2:ec:e5:
                    ad:43:81:5f:8d:1f:11:d1:01:34:d1:19:cf:f8:60:
                    08:c8:d1:b7:86:2e:e4:98:7b:7d:44:58:1c:cf:65:
                    8b:1e:6f:77:40:6e:72:6c:37:40:80:bc:58:c5:2a:
                    d6:f1:c6:65:08:f6:9e:6c:96:a9:7b:5d:0a:a0:cb:
                    cb:6b:75:54:02:bc:8f:48:92:5e:78:88:83:f7:18:
                    97:51:f3:19:12:31:3c:5f:23:76:8e:13:0c:4c:d1:
                    fd:64:d2:89:98:26:4b:6a:50:da:00:c8:db:46:b1:
                    c7:12:76:e6:e0:7d:f8:f2:93:49:e1:5c:ef:be:12:
                    5c:34:a8:da:a8:73:f6:9c:29:12:e7:fe:65:10:54:
                    9c:2e:56:85:5a:09:8d:48:e6:b9:ec:ef:13:6c:30:
                    45:b2:7d:3a:38:d7:2c:6f:34:2c:7a:46:8b:08:72:
                    30:f0:b3:eb:0f:cc:ed:d0:b5:6a:91:cd:96:25:c2:
                    ff:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4C:5D:28:C1:68:42:BB:4A:BE:9F:DC:BC:83:86:E9:CA:D3:78:8B
            X509v3 Authority Key Identifier:
                keyid:C4:71:8E:13:E8:85:F1:DF:2D:A1:B4:8E:53:59:59:4E:F8:7F:0F:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/C4718E13E885F1DF2DA1B48E5359594EF87F0F64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4718E13E885F1DF2DA1B48E5359594EF87F0F64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/323830343a326131343a3a2f33322d313238203d3e20323634303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a14::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:06:65:3d:6b:64:fe:1a:7a:29:34:de:d8:b5:89:73:4d:95:
         c0:49:c9:b8:cc:c4:91:88:e2:8e:2b:97:e0:99:b7:ab:c6:02:
         00:93:c7:a6:68:18:45:20:6c:d5:db:3f:18:a2:d0:ff:73:8e:
         d1:b3:86:f2:9a:8c:bb:9b:d2:fb:c0:87:7d:f6:e1:e9:97:44:
         ef:65:97:11:ec:82:5e:da:ca:aa:98:00:d0:4c:55:9e:62:8c:
         cd:36:5e:7f:67:f8:bf:1b:1e:87:20:dd:10:c4:11:98:1a:1c:
         8a:ed:25:2c:db:a9:85:19:0a:15:b9:fa:ca:82:44:bb:3f:e5:
         b2:e5:1a:ed:51:7e:7f:aa:c8:0e:cb:b8:52:e2:42:60:92:89:
         1b:34:30:05:cd:f8:f8:af:fa:1a:aa:66:99:1e:36:82:22:4a:
         18:33:47:58:df:7b:3f:78:b6:5c:e7:0b:1f:d3:62:19:35:95:
         8b:14:53:c9:6f:f6:f8:c8:7c:2d:4c:f2:ec:92:65:72:71:7f:
         8a:53:8b:8a:3f:95:13:f6:62:7f:3b:b3:bd:47:87:8f:ed:e3:
         7c:aa:ac:d3:78:29:de:90:6a:08:75:43:28:d3:3e:35:cc:96:
         21:98:db:03:7b:73:d5:78:ac:48:e4:a9:7e:ea:6d:59:db:31:
         a7:93:fc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:46:16 2025 by rpki-client