Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/323830343a326633633a383030303a3a2f33332d3333203d3e20323634383739.roa
File:                     323830343a326633633a383030303a3a2f33332d3333203d3e20323634383739.roa (raw, json)
Hash identifier:          YS0gyG4QHBciG3UEXLmOy7DwJexDFc0srgUkSP0M4Sk=
Subject key identifier:   42:AF:3D:88:E7:D9:29:8F:2A:54:BC:96:59:0F:70:D6:58:84:27:39
Certificate issuer:       /CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
Certificate serial:       23D6C7CA517E69EE3B1B3F73FB1C52A912995411
Authority key identifier: D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/323830343a326633633a383030303a3a2f33332d3333203d3e20323634383739.roa
Signing time:             Thu 06 Mar 2025 11:56:47 +0000
ROA not before:           Thu 06 Mar 2025 11:51:47 +0000
ROA not after:            Thu 05 Mar 2026 11:56:47 +0000
asID:                     264879
IP address blocks:        2804:2f3c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl
                          rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 11:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d6:c7:ca:51:7e:69:ee:3b:1b:3f:73:fb:1c:52:a9:12:99:54:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
        Validity
            Not Before: Mar  6 11:51:47 2025 GMT
            Not After : Mar  5 11:56:47 2026 GMT
        Subject: CN=42AF3D88E7D9298F2A54BC96590F70D658842739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8c:83:35:e4:ca:27:cf:2d:f1:22:25:40:70:
                    15:be:f9:68:0c:80:84:3e:65:63:6c:9f:a2:13:ca:
                    72:81:90:bb:49:c9:56:bf:01:13:c3:80:33:a3:ce:
                    48:67:3a:64:de:de:69:e6:77:e1:99:79:02:e3:5a:
                    b1:55:21:44:ae:54:4b:a3:06:a7:1d:d4:35:c4:78:
                    5c:a2:d0:78:d6:ab:00:32:ef:18:74:a5:4e:be:d7:
                    54:39:40:9e:1e:c0:c3:41:23:20:ac:aa:63:f6:b0:
                    7d:b0:b5:76:d4:59:3f:86:98:44:d2:d5:6d:a0:56:
                    7f:83:9f:1a:46:43:12:60:80:8b:83:57:23:e4:94:
                    7a:47:b5:73:dd:59:1e:76:60:39:16:9c:04:e7:90:
                    93:7d:1e:16:31:a3:cb:16:a1:5e:bd:38:b7:d7:9e:
                    06:a0:cd:dc:22:14:69:98:2a:46:ce:04:90:2c:82:
                    19:dd:56:2e:9c:3e:ca:76:a5:ab:0a:32:1d:08:d2:
                    99:28:47:9d:3e:dc:01:36:61:3b:66:8b:fc:a8:fd:
                    45:6f:eb:13:ab:f3:3b:c0:2b:fe:9f:19:73:c1:cc:
                    a7:85:76:22:5a:97:84:2b:d1:97:12:51:aa:cc:5a:
                    1a:bf:28:2a:25:bf:91:0b:0a:6d:ff:b1:35:62:26:
                    5a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AF:3D:88:E7:D9:29:8F:2A:54:BC:96:59:0F:70:D6:58:84:27:39
            X509v3 Authority Key Identifier:
                keyid:D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/323830343a326633633a383030303a3a2f33332d3333203d3e20323634383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f3c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b7:e8:8d:93:52:78:b2:a8:b4:25:a8:01:77:d9:d1:57:17:ac:
         81:68:ee:d4:31:aa:d3:66:17:c3:ff:47:bb:b4:bc:b1:7f:a8:
         5e:c1:ce:6f:a7:1a:6f:8e:a1:c1:3c:7a:92:af:cb:75:8c:b1:
         79:90:90:e4:73:a1:5e:bb:49:16:06:3b:fa:04:0e:79:a7:2a:
         14:a9:1d:1f:6d:d3:c8:05:d9:6f:8b:f6:c4:e0:b6:58:b3:1f:
         1c:2c:45:88:2b:b4:d2:c8:ca:15:7f:d9:62:55:37:ec:41:8f:
         a6:cb:b3:f5:ff:00:b7:72:1c:2c:09:9b:4b:8d:49:b9:28:b6:
         d5:79:46:db:06:15:3f:c8:75:f3:e1:09:78:31:0b:22:91:e0:
         9f:48:b5:95:ff:97:c9:0d:57:09:17:6d:dc:c5:d2:c6:69:4a:
         d4:d2:b1:20:f1:7e:18:88:39:63:e1:1d:2f:1b:67:8b:29:1e:
         fd:33:0e:ec:1b:56:81:4d:42:a9:30:58:b8:0d:c0:ea:87:48:
         70:7c:de:f1:07:1d:51:7a:e7:49:40:35:ab:75:cf:f6:0b:37:
         f1:b6:aa:55:82:d2:56:2e:47:96:c6:18:29:67:ae:79:7a:3f:
         85:5f:80:9f:86:73:1e:27:fb:0e:f8:c2:ce:fe:9f:64:b0:2b:
         22:05:35:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:45:29 2025 by rpki-client