Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/323830343a333639303a3a2f33322d3438203d3e20323636333536.roa
File:                     323830343a333639303a3a2f33322d3438203d3e20323636333536.roa (raw, json)
Hash identifier:          CbUhK5v4kboyh5I7hnUIrCWNHv/eyyi27LJZvc+VMFI=
Subject key identifier:   E0:F1:75:1D:EE:A3:D8:57:34:68:3D:81:91:F2:F6:3B:9D:74:B3:F1
Certificate issuer:       /CN=BE24527D25EBA8FEB922396F011CC1B1F41282DF
Certificate serial:       661673ED4C2274EC31354EBC268E76FE37D6BB2F
Authority key identifier: BE:24:52:7D:25:EB:A8:FE:B9:22:39:6F:01:1C:C1:B1:F4:12:82:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/323830343a333639303a3a2f33322d3438203d3e20323636333536.roa
Signing time:             Wed 05 Mar 2025 19:13:39 +0000
ROA not before:           Wed 05 Mar 2025 19:08:39 +0000
ROA not after:            Wed 04 Mar 2026 19:13:39 +0000
asID:                     266356
IP address blocks:        2804:3690::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.crl
                          rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 16:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:16:73:ed:4c:22:74:ec:31:35:4e:bc:26:8e:76:fe:37:d6:bb:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE24527D25EBA8FEB922396F011CC1B1F41282DF
        Validity
            Not Before: Mar  5 19:08:39 2025 GMT
            Not After : Mar  4 19:13:39 2026 GMT
        Subject: CN=E0F1751DEEA3D85734683D8191F2F63B9D74B3F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4f:25:3c:e2:8f:6b:cd:aa:fc:3d:f6:d5:e7:
                    4f:40:f9:24:69:44:05:0c:24:45:25:b6:b5:e8:d8:
                    37:a0:d1:42:89:68:cc:5e:fc:e7:d8:03:36:4f:5f:
                    5d:18:e6:ef:a8:7c:32:ea:9b:31:c8:80:6a:b9:20:
                    b1:71:08:6e:ec:ca:a9:d7:78:89:a9:3d:aa:85:35:
                    d5:98:d6:55:5c:78:a1:01:c2:5f:bc:2d:10:5b:a1:
                    d5:29:e6:eb:53:f5:99:f9:e6:6a:c5:9a:ef:f0:7c:
                    ab:cf:0a:39:f3:29:2f:60:ac:78:53:1f:55:a9:a0:
                    b2:66:9a:59:83:af:90:31:41:32:a2:98:3d:95:a7:
                    e1:f7:88:43:f0:36:f6:23:a3:bc:72:c7:ac:22:5b:
                    84:9b:b9:8f:f6:4b:b3:7a:4c:23:bc:a0:f0:2c:77:
                    38:47:ed:9b:eb:32:f5:b9:b9:3c:cc:ea:44:fd:06:
                    ec:87:42:7b:e3:6c:3c:8e:14:5a:07:ca:d6:3c:08:
                    18:ed:41:54:dd:bd:61:ac:17:17:aa:8f:72:33:f8:
                    6c:64:9c:76:c6:0b:c6:db:5f:7e:08:dc:1f:c0:cb:
                    82:19:25:07:41:2d:b6:67:56:22:cd:1d:74:ee:a4:
                    70:1c:67:f2:a5:83:cf:75:92:c3:9f:67:ac:46:c2:
                    97:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F1:75:1D:EE:A3:D8:57:34:68:3D:81:91:F2:F6:3B:9D:74:B3:F1
            X509v3 Authority Key Identifier:
                keyid:BE:24:52:7D:25:EB:A8:FE:B9:22:39:6F:01:1C:C1:B1:F4:12:82:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/323830343a333639303a3a2f33322d3438203d3e20323636333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3690::/32

    Signature Algorithm: sha256WithRSAEncryption
         da:92:6a:8b:93:50:ac:e9:fe:72:ea:6d:c2:4b:b3:e1:a0:58:
         93:e5:23:51:58:d1:5b:87:fa:43:c8:4d:1c:c3:d6:35:56:e6:
         ca:a6:a9:61:d0:53:db:1d:29:49:1e:75:2e:81:7f:b5:59:0b:
         bc:ce:c4:84:c9:b1:05:29:79:5a:1a:be:e2:d2:09:1a:8e:4c:
         ba:75:7e:86:1d:69:40:16:57:28:27:87:f0:b8:2a:7e:11:f4:
         e7:46:6f:73:8a:bb:89:01:56:40:c8:3b:20:ba:4b:ee:67:f5:
         cc:48:6a:91:93:70:bc:06:fd:9b:53:2d:20:1b:00:24:7c:f7:
         6d:41:c2:19:cc:80:97:7c:8c:fa:b2:e6:8a:df:53:d6:42:d1:
         34:bf:47:07:de:29:f9:a3:b7:dc:4d:b1:94:15:a5:62:90:e7:
         15:3f:18:8d:e7:b5:ee:69:e9:1b:5c:c0:b1:53:7e:e6:08:43:
         22:66:cd:b5:c4:65:72:f6:97:77:dd:04:b9:ee:d8:fc:2d:6f:
         f6:6d:6f:eb:d0:e7:9e:22:ab:e2:7a:7a:a5:eb:2c:bd:22:2e:
         6c:87:10:ea:15:9d:6b:67:a1:32:0b:2f:22:90:3f:2b:8c:35:
         4d:1c:6c:d6:bd:50:ed:92:b8:8f:9c:89:d9:ab:d5:8e:3d:55:
         3c:17:b5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:16:57 2025 by rpki-client