Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/323830343a373466303a3a2f33322d3438203d3e20323731303133.roa
File:                     323830343a373466303a3a2f33322d3438203d3e20323731303133.roa (raw, json)
Hash identifier:          hMFPPI8x0ZYN4CJCwq3IMtSDrKi/M1f+wsyRA+yTJcI=
Subject key identifier:   D3:B7:5D:72:90:89:37:EB:4D:8F:31:77:FB:B1:EC:E1:D9:50:73:AD
Certificate issuer:       /CN=688C4E450A1E9C4A430D25A4E2119AA4B53DD234
Certificate serial:       3E114CA1ABBBAE53D81C83FBC25E7FFC6910E003
Authority key identifier: 68:8C:4E:45:0A:1E:9C:4A:43:0D:25:A4:E2:11:9A:A4:B5:3D:D2:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688C4E450A1E9C4A430D25A4E2119AA4B53DD234.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/323830343a373466303a3a2f33322d3438203d3e20323731303133.roa
Signing time:             Thu 19 Dec 2024 12:49:32 +0000
ROA not before:           Thu 19 Dec 2024 12:44:32 +0000
ROA not after:            Thu 18 Dec 2025 12:49:32 +0000
asID:                     271013
IP address blocks:        2804:74f0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/688C4E450A1E9C4A430D25A4E2119AA4B53DD234.crl
                          rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/688C4E450A1E9C4A430D25A4E2119AA4B53DD234.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688C4E450A1E9C4A430D25A4E2119AA4B53DD234.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 19:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:11:4c:a1:ab:bb:ae:53:d8:1c:83:fb:c2:5e:7f:fc:69:10:e0:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688C4E450A1E9C4A430D25A4E2119AA4B53DD234
        Validity
            Not Before: Dec 19 12:44:32 2024 GMT
            Not After : Dec 18 12:49:32 2025 GMT
        Subject: CN=D3B75D72908937EB4D8F3177FBB1ECE1D95073AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0c:04:7c:7e:a6:bb:23:49:7c:e6:c1:5a:4c:
                    26:17:44:6d:7a:d8:88:8a:81:0d:f7:5c:9d:e8:16:
                    79:e2:4d:58:33:fe:1a:32:fc:43:83:da:a8:33:d4:
                    16:15:d8:61:86:6a:eb:d1:ea:c5:61:ad:90:8a:da:
                    5b:76:e3:ba:dc:5b:21:2e:3b:56:07:93:4d:f7:6e:
                    5f:73:35:b5:1c:eb:51:de:5e:f9:a8:5f:98:23:05:
                    78:a2:d3:da:18:40:ed:2c:a4:6b:0c:a6:61:dc:5f:
                    f6:cd:7e:22:3f:33:c6:01:79:df:54:5d:e7:9d:fb:
                    a8:fb:83:5c:ac:11:5f:47:dd:10:46:da:57:46:45:
                    10:46:4d:5b:3f:a8:8f:36:d2:2f:fa:14:af:80:26:
                    e9:5f:1f:c1:ee:7e:6a:44:0d:6e:d2:db:63:33:68:
                    4b:23:d6:59:09:bd:89:77:d4:a9:f3:58:2b:ba:55:
                    3a:05:36:6a:0f:53:7f:d7:cf:82:14:98:79:a0:0f:
                    31:34:80:7f:a3:df:08:b8:5b:31:88:91:e5:78:a0:
                    8b:49:a3:6a:31:86:b3:30:e1:f7:96:96:e5:b3:40:
                    f5:fd:6e:bc:1f:e9:96:52:ef:03:52:f7:08:0e:08:
                    a1:c9:33:97:eb:6b:c3:e3:d2:ae:79:13:b0:e3:9b:
                    94:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B7:5D:72:90:89:37:EB:4D:8F:31:77:FB:B1:EC:E1:D9:50:73:AD
            X509v3 Authority Key Identifier:
                keyid:68:8C:4E:45:0A:1E:9C:4A:43:0D:25:A4:E2:11:9A:A4:B5:3D:D2:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/688C4E450A1E9C4A430D25A4E2119AA4B53DD234.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688C4E450A1E9C4A430D25A4E2119AA4B53DD234.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/323830343a373466303a3a2f33322d3438203d3e20323731303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:70:ce:db:34:77:0c:f6:a7:61:ce:5f:d0:86:15:ef:65:81:
         23:32:5f:53:7b:eb:6a:47:71:0f:cb:a6:a7:c7:cb:2d:fb:68:
         72:af:3c:0f:17:78:83:88:dd:f0:c6:87:75:78:b3:42:38:36:
         45:13:2f:a1:19:ec:e6:57:d6:05:38:ee:7f:4e:87:c7:f5:8e:
         29:2b:00:92:cf:d9:3a:26:16:71:3d:48:38:5c:19:72:a1:00:
         7d:85:c7:a8:10:fc:af:c7:87:65:55:cf:83:d6:42:f6:1b:0d:
         6f:39:b1:fb:60:87:16:4f:5e:05:97:4d:65:f5:67:58:bd:f9:
         6f:ac:7e:bd:28:5b:13:7b:aa:0d:4e:dc:54:a7:ce:a2:f7:55:
         94:00:33:67:42:b8:fc:aa:d1:21:a8:ac:c5:66:c4:26:9f:f5:
         e0:5a:21:78:85:7d:8a:5b:aa:d3:f7:1b:22:91:6a:50:1e:82:
         9b:70:a6:dd:b0:06:32:53:ee:ed:bc:b2:c4:f6:63:6a:68:e8:
         9c:f9:0f:0a:7c:9e:32:c3:a5:ea:84:08:bd:ad:0f:8a:e6:3a:
         d8:5a:35:4a:a2:82:9f:b4:37:89:10:57:27:15:da:d2:e5:1e:
         4c:ac:64:0d:f3:36:54:03:06:b0:f4:f6:75:5e:3f:2a:da:b1:
         c8:78:53:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:44:24 2025 by rpki-client