Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/323830343a343438303a3a2f33322d313238203d3e20323637363336.roa
File:                     323830343a343438303a3a2f33322d313238203d3e20323637363336.roa (raw, json)
Hash identifier:          JyIPoYZBWzRS1ZnuLDtFKe0xhwJH8FacErUMKnW1htc=
Subject key identifier:   2E:8C:A4:EC:36:C0:EC:64:53:C3:B0:DE:A0:76:38:0E:6B:C2:08:D2
Certificate issuer:       /CN=A1E289E62C24AE2ECF3211E63E2E81322ADD6E99
Certificate serial:       47D6196A3B8CF058C721FBF856AE9DCB28D33907
Authority key identifier: A1:E2:89:E6:2C:24:AE:2E:CF:32:11:E6:3E:2E:81:32:2A:DD:6E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E289E62C24AE2ECF3211E63E2E81322ADD6E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/323830343a343438303a3a2f33322d313238203d3e20323637363336.roa
Signing time:             Wed 05 Feb 2025 13:02:57 +0000
ROA not before:           Wed 05 Feb 2025 12:57:57 +0000
ROA not after:            Wed 04 Feb 2026 13:02:57 +0000
asID:                     267636
IP address blocks:        2804:4480::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/A1E289E62C24AE2ECF3211E63E2E81322ADD6E99.crl
                          rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/A1E289E62C24AE2ECF3211E63E2E81322ADD6E99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E289E62C24AE2ECF3211E63E2E81322ADD6E99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 09:29:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d6:19:6a:3b:8c:f0:58:c7:21:fb:f8:56:ae:9d:cb:28:d3:39:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E289E62C24AE2ECF3211E63E2E81322ADD6E99
        Validity
            Not Before: Feb  5 12:57:57 2025 GMT
            Not After : Feb  4 13:02:57 2026 GMT
        Subject: CN=2E8CA4EC36C0EC6453C3B0DEA076380E6BC208D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:90:f8:f2:8e:a5:7c:71:84:33:30:b3:16:60:
                    05:f8:ba:d7:65:94:a6:c3:aa:f2:4a:3b:e7:cb:07:
                    1f:47:f7:05:cf:c6:3f:d1:52:be:2a:62:63:68:37:
                    a6:e7:55:2c:c4:da:9b:d9:5f:cd:a8:2e:dd:ca:f3:
                    f8:62:c6:d8:8a:e9:a2:ed:8c:c3:ba:1e:6a:4e:60:
                    cd:b9:7f:f1:1e:72:9b:19:0c:87:49:d6:2c:f2:81:
                    4a:ab:97:8c:1f:c2:3f:fa:e5:9d:c1:05:b7:9a:ff:
                    52:48:33:b3:ce:40:db:0a:f0:11:49:f1:a2:96:cb:
                    e5:6e:5b:d8:e7:9b:3d:b8:ff:22:a4:f2:83:46:56:
                    b7:84:ed:81:b0:1b:3f:df:d1:9a:90:76:05:00:b6:
                    0f:a2:d1:4d:ae:45:11:6d:2c:0c:50:45:58:33:24:
                    99:61:e4:0a:0f:22:3c:3d:a2:78:d4:53:dd:88:ca:
                    54:e2:09:b0:c0:b1:48:34:28:dc:ea:1e:fc:0f:22:
                    6b:75:d6:79:f2:e7:63:f7:d0:1a:d4:32:f3:42:14:
                    78:1a:c0:88:49:a3:65:17:1e:b6:62:b3:b6:8e:b3:
                    c6:21:57:67:a4:01:cf:b1:bb:30:03:7c:97:3b:a2:
                    b4:6d:c7:ed:d3:15:af:b0:4c:e9:85:f6:85:fc:fe:
                    f7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8C:A4:EC:36:C0:EC:64:53:C3:B0:DE:A0:76:38:0E:6B:C2:08:D2
            X509v3 Authority Key Identifier:
                keyid:A1:E2:89:E6:2C:24:AE:2E:CF:32:11:E6:3E:2E:81:32:2A:DD:6E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/A1E289E62C24AE2ECF3211E63E2E81322ADD6E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E289E62C24AE2ECF3211E63E2E81322ADD6E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/323830343a343438303a3a2f33322d313238203d3e20323637363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4480::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:4b:36:c1:55:8f:04:ad:f4:8d:ee:40:cc:5a:da:c4:64:92:
         ad:06:95:89:33:cb:7c:cf:b3:77:15:8b:ec:4e:d9:ba:97:db:
         04:03:cf:7b:73:b0:2a:f7:8b:da:cd:f6:18:6e:26:0b:26:b3:
         9c:37:28:41:cc:4a:3b:f8:6a:da:ff:17:31:48:cc:1f:97:23:
         43:2a:80:ba:d8:13:c6:ff:2e:ff:31:cb:38:7d:45:8e:e2:b0:
         69:78:2f:12:f7:9d:64:7e:5d:fe:90:c6:12:31:ff:fb:b0:0f:
         92:a4:7c:f1:38:42:96:94:36:cc:ab:44:f5:d8:5e:35:2d:7e:
         ad:17:1a:7c:bc:0c:f9:c5:d7:be:8c:ca:ba:0e:ba:4d:7e:e6:
         58:85:c8:7d:1c:50:e7:5f:bf:52:86:9d:bc:b6:9f:8f:17:79:
         36:0a:55:ad:50:af:e0:c9:ce:3b:58:2c:c3:50:72:4d:dd:42:
         27:dd:df:38:15:1d:b1:57:fc:ae:e7:f6:3a:ca:1e:9c:3e:4e:
         45:19:da:24:a1:a0:a5:e0:be:1d:26:b7:04:fd:6d:23:b6:01:
         01:9b:6b:05:96:53:3c:bb:12:ae:bf:01:1e:97:9e:46:68:37:
         9e:ee:37:e4:71:53:5b:2c:71:48:ba:1a:74:70:56:f4:f4:ce:
         ff:96:88:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:18:38 2025 by rpki-client