Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a633030303a3a2f33352d3335203d3e20323637303237.roa
File:                     323830343a343730383a633030303a3a2f33352d3335203d3e20323637303237.roa (raw, json)
Hash identifier:          76FKPRjIqvaKEHxswL0wr/wlTscbPmYtMfjJ2noAezA=
Subject key identifier:   F4:4C:25:62:09:B6:42:39:E1:EF:CA:8C:23:90:53:B6:4C:8F:8F:01
Certificate issuer:       /CN=4C0E5583F85FD92E5B21D697990054A242CE2E03
Certificate serial:       06CCC92CA3ECF95BBDCA9803BB1EEC0A2D55CE3F
Authority key identifier: 4C:0E:55:83:F8:5F:D9:2E:5B:21:D6:97:99:00:54:A2:42:CE:2E:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0E5583F85FD92E5B21D697990054A242CE2E03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a633030303a3a2f33352d3335203d3e20323637303237.roa
Signing time:             Fri 31 Jan 2025 18:02:26 +0000
ROA not before:           Fri 31 Jan 2025 17:57:26 +0000
ROA not after:            Fri 30 Jan 2026 18:02:26 +0000
asID:                     267027
IP address blocks:        2804:4708:c000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/4C0E5583F85FD92E5B21D697990054A242CE2E03.crl
                          rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/4C0E5583F85FD92E5B21D697990054A242CE2E03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0E5583F85FD92E5B21D697990054A242CE2E03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 19:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:cc:c9:2c:a3:ec:f9:5b:bd:ca:98:03:bb:1e:ec:0a:2d:55:ce:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C0E5583F85FD92E5B21D697990054A242CE2E03
        Validity
            Not Before: Jan 31 17:57:26 2025 GMT
            Not After : Jan 30 18:02:26 2026 GMT
        Subject: CN=F44C256209B64239E1EFCA8C239053B64C8F8F01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0c:f8:8c:a8:5e:d9:38:9a:22:61:90:3f:7b:
                    0d:e4:f4:60:cd:4b:52:e7:fb:f9:24:d9:9a:6b:b7:
                    c3:7d:f3:d7:a5:8c:53:18:c1:49:15:20:fa:71:90:
                    d9:bc:a7:a0:47:18:c4:b0:a5:ac:5b:c5:98:7c:a3:
                    66:37:d5:19:04:0a:f8:73:b7:71:9f:29:71:17:91:
                    f5:87:2b:43:2b:e4:3e:a6:94:77:90:16:29:2f:38:
                    a8:14:6c:cc:82:d1:d5:fd:9c:8c:9e:d2:f3:ac:d5:
                    e9:e8:29:6d:1b:5a:61:77:de:23:c1:7e:53:9f:8d:
                    c4:3e:01:2c:85:de:88:83:d7:fc:aa:ab:24:5e:45:
                    35:a9:07:af:ce:ef:96:9a:80:15:94:4b:bd:b5:83:
                    2d:26:7b:98:60:84:6d:69:57:70:0d:b6:23:49:02:
                    fc:d0:5f:67:47:92:19:2e:2c:3d:24:29:04:39:49:
                    ca:07:df:2c:75:9b:ba:89:7e:21:0e:94:23:0d:09:
                    78:1c:53:67:54:fc:71:07:7f:33:87:d7:99:88:a4:
                    d5:e1:57:bf:d8:86:14:9f:8b:4c:d0:e7:3c:9f:f7:
                    9c:9e:ea:8e:8a:72:0b:e4:22:eb:0d:74:34:de:2f:
                    69:eb:e2:8d:0c:ee:55:0f:a6:f9:9c:b8:e7:36:16:
                    56:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4C:25:62:09:B6:42:39:E1:EF:CA:8C:23:90:53:B6:4C:8F:8F:01
            X509v3 Authority Key Identifier:
                keyid:4C:0E:55:83:F8:5F:D9:2E:5B:21:D6:97:99:00:54:A2:42:CE:2E:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/4C0E5583F85FD92E5B21D697990054A242CE2E03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0E5583F85FD92E5B21D697990054A242CE2E03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a633030303a3a2f33352d3335203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         44:88:ee:7e:93:99:0d:89:aa:0d:1d:ab:c8:af:3e:18:62:0d:
         de:9c:22:71:5b:83:84:0c:49:b0:a7:d3:36:46:9e:44:0f:2a:
         c7:43:53:b4:b8:14:2c:07:48:32:a9:5f:ae:8a:47:26:09:d9:
         d9:c4:27:6a:3a:c6:49:8e:20:90:71:a5:dd:a6:48:a9:6f:ee:
         27:13:3f:08:25:01:97:9a:00:17:28:3b:68:a1:67:47:27:e5:
         8e:37:0d:d8:f1:5c:1d:11:69:d8:7e:e2:32:4a:a2:e6:78:c5:
         2f:fa:ed:b2:60:66:8e:b1:45:e4:52:c3:86:c1:2a:49:21:18:
         3a:a9:74:32:3b:73:9b:3a:f6:f5:d7:4e:f1:be:b3:f9:d2:66:
         57:af:2a:4d:4f:0b:fc:14:7a:28:83:32:e7:6a:80:36:5e:45:
         f7:a5:68:38:e5:1b:da:be:7a:b4:ac:91:31:61:27:d2:d2:d4:
         ae:3a:1e:c7:41:64:9d:1d:6c:cc:cc:11:fb:f0:ff:b9:3c:37:
         25:dd:9d:9e:16:46:38:d5:96:ab:23:5b:c7:73:c8:66:54:5e:
         7f:8d:73:02:53:af:c1:85:23:70:ef:34:84:a7:4a:d8:79:bc:
         42:27:1d:d7:00:55:3a:23:0f:13:7f:59:f4:5c:82:9c:f8:d4:
         60:33:d1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:45 2025 by rpki-client