Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/323830343a386163633a3a2f33322d3438203d3e20323632393036.roa
File:                     323830343a386163633a3a2f33322d3438203d3e20323632393036.roa (raw, json)
Hash identifier:          aUrlL5Uxya1z73y/XinWPkpdc8Hs9/GaciW3C8iNZD0=
Subject key identifier:   0A:A2:DE:BD:FC:6D:2A:CB:53:23:1F:66:9A:C7:9E:AB:6C:DA:8F:86
Certificate issuer:       /CN=813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3
Certificate serial:       6AE9228E957606019B6C3BCCD7E28532DD7C9B61
Authority key identifier: 81:3D:EF:2E:5D:0C:2D:2A:3D:E1:A9:02:DF:00:38:64:9A:49:72:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/323830343a386163633a3a2f33322d3438203d3e20323632393036.roa
Signing time:             Wed 05 Mar 2025 22:45:30 +0000
ROA not before:           Wed 05 Mar 2025 22:40:30 +0000
ROA not after:            Wed 04 Mar 2026 22:45:30 +0000
asID:                     262906
IP address blocks:        2804:8acc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.crl
                          rsync://rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 03:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e9:22:8e:95:76:06:01:9b:6c:3b:cc:d7:e2:85:32:dd:7c:9b:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3
        Validity
            Not Before: Mar  5 22:40:30 2025 GMT
            Not After : Mar  4 22:45:30 2026 GMT
        Subject: CN=0AA2DEBDFC6D2ACB53231F669AC79EAB6CDA8F86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:58:b4:cd:62:40:7b:04:ba:0c:4a:4c:b6:71:
                    14:e9:03:a8:41:63:fc:03:02:c1:2c:be:4e:0e:bb:
                    5a:00:6f:9c:92:9c:b9:fe:1f:7c:85:9e:e1:89:c7:
                    3c:d4:be:a8:ae:20:57:72:9b:0d:ac:7b:57:af:73:
                    97:1a:d6:00:6d:05:d5:58:f1:0a:2f:20:38:24:98:
                    5a:36:6b:c3:53:7f:37:6d:09:ab:1e:7c:3c:43:bb:
                    5d:f0:63:12:c3:34:4e:38:71:f6:8c:cc:90:e3:3b:
                    90:28:de:01:61:0e:c0:dc:09:7b:f4:d6:26:7e:3f:
                    2e:90:46:59:18:db:87:c6:fe:cd:88:9f:c6:68:ab:
                    7d:06:3d:73:18:4a:97:d9:1d:5e:66:74:ee:82:d2:
                    83:0b:1f:92:38:87:af:e0:19:6a:4f:98:b2:c9:bf:
                    21:e6:c1:73:9f:b3:24:a1:7a:39:14:5f:55:fa:80:
                    84:47:31:e4:e4:e6:99:03:6d:42:2f:f0:a2:46:79:
                    f2:a4:1a:1b:ba:4e:5c:99:40:4e:f0:b1:79:0b:9f:
                    a7:28:3e:a5:67:70:0a:ff:84:ff:93:48:84:d9:a1:
                    29:95:c3:f4:d8:9f:64:88:d9:f1:3f:66:e7:8d:9b:
                    62:46:4e:16:cb:16:73:66:90:74:46:89:ca:ac:be:
                    df:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A2:DE:BD:FC:6D:2A:CB:53:23:1F:66:9A:C7:9E:AB:6C:DA:8F:86
            X509v3 Authority Key Identifier:
                keyid:81:3D:EF:2E:5D:0C:2D:2A:3D:E1:A9:02:DF:00:38:64:9A:49:72:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/323830343a386163633a3a2f33322d3438203d3e20323632393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8acc::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:dc:fb:93:60:07:2c:6a:78:fc:ad:c6:13:68:6f:9e:41:c9:
         0a:a7:cf:53:9d:7e:51:50:b7:5f:d1:c3:00:a6:2e:d3:19:42:
         c6:35:b9:ba:88:ed:3c:76:ae:61:16:09:84:ce:f3:19:a9:24:
         44:ea:ed:0b:ec:29:6c:50:fd:ad:bd:fa:21:8a:d3:12:8a:91:
         ad:57:a1:6b:c2:68:85:50:66:4f:25:b9:a4:f6:b3:2b:44:cb:
         5a:9e:ac:20:71:54:2a:0d:dc:be:1c:d7:16:a1:3c:64:f9:3d:
         a4:a9:a0:ab:99:3d:a8:f4:81:e7:da:6f:63:78:08:c5:f6:7e:
         b1:d1:63:86:7d:2c:68:d9:1d:fa:c1:1a:16:47:ab:0f:57:a4:
         34:92:62:1b:58:da:e3:16:33:a9:aa:da:9f:fe:59:bf:2c:18:
         a3:ff:60:df:00:c3:f9:31:9d:9f:a3:78:8d:9a:e5:f7:44:88:
         de:a6:d7:a9:74:66:e6:07:9f:9e:77:51:4b:60:0b:c8:42:da:
         b0:97:85:b4:6b:04:e0:8a:42:5a:30:e8:33:5e:bd:b7:12:b4:
         eb:24:76:32:5f:95:ce:85:03:46:eb:ca:eb:67:2d:6f:a5:ef:
         09:03:d3:98:2e:11:6a:9a:b3:dd:69:12:0b:82:50:6a:4d:aa:
         6f:5c:a1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:47:58 2025 by rpki-client