Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/323830343a316333303a3a2f33322d3438203d3e203238323835.roa
File:                     323830343a316333303a3a2f33322d3438203d3e203238323835.roa (raw, json)
Hash identifier:          6/AQfSHtgwOB+axF5SjH66Kou/iy3s9o/RQO6MlbI3o=
Subject key identifier:   94:AF:1C:EF:BB:9C:88:0E:E9:14:BB:19:8C:ED:29:81:E7:36:C6:5A
Certificate issuer:       /CN=18304E37E7B30DCE85765ECFC90E798EBF358498
Certificate serial:       4A46AC24CE9ABFA6424BE87C7F157B59CEE3838E
Authority key identifier: 18:30:4E:37:E7:B3:0D:CE:85:76:5E:CF:C9:0E:79:8E:BF:35:84:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18304E37E7B30DCE85765ECFC90E798EBF358498.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/323830343a316333303a3a2f33322d3438203d3e203238323835.roa
Signing time:             Thu 06 Mar 2025 17:52:26 +0000
ROA not before:           Thu 06 Mar 2025 17:47:26 +0000
ROA not after:            Thu 05 Mar 2026 17:52:26 +0000
asID:                     28285
IP address blocks:        2804:1c30::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/18304E37E7B30DCE85765ECFC90E798EBF358498.crl
                          rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/18304E37E7B30DCE85765ECFC90E798EBF358498.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18304E37E7B30DCE85765ECFC90E798EBF358498.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:46:ac:24:ce:9a:bf:a6:42:4b:e8:7c:7f:15:7b:59:ce:e3:83:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18304E37E7B30DCE85765ECFC90E798EBF358498
        Validity
            Not Before: Mar  6 17:47:26 2025 GMT
            Not After : Mar  5 17:52:26 2026 GMT
        Subject: CN=94AF1CEFBB9C880EE914BB198CED2981E736C65A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:49:9d:b7:f5:94:8d:c1:41:d2:98:70:fa:f4:
                    c1:04:5c:bc:39:1c:96:32:ff:d5:ff:0a:a8:4e:28:
                    81:1a:1e:9e:6f:2d:85:1c:3a:7e:56:0f:9e:7b:30:
                    7b:b0:e7:0b:b4:75:da:ba:b8:ac:43:e0:ef:98:7d:
                    e8:9a:25:4b:d8:1f:8e:b8:91:2c:d7:b6:06:b0:dc:
                    0d:28:cb:7f:e7:07:5d:fe:f5:af:c2:a1:fb:93:b7:
                    69:79:96:96:60:17:2f:06:ed:da:cd:84:8e:97:f3:
                    e0:e1:09:9c:3d:dd:0a:93:94:a0:72:0c:be:99:6c:
                    0b:1b:b7:dd:77:32:3d:8d:4c:66:2f:2e:94:a3:aa:
                    66:32:94:50:59:ad:9a:bc:56:7a:83:e6:e2:38:de:
                    d3:ca:bc:66:73:f0:6c:6f:dc:cd:ca:7f:4a:3a:4b:
                    45:4c:3b:bf:6a:f4:20:16:90:b6:a1:ec:0c:b6:26:
                    5f:bb:21:c9:32:0b:3d:3a:e2:48:d0:a8:c5:8e:90:
                    3a:89:1e:3e:bb:fc:fe:ee:3a:76:c9:6d:dc:18:02:
                    74:bd:1c:d5:80:9d:7a:43:f6:bc:b7:72:ad:70:63:
                    73:3e:d0:f9:c6:2c:bb:93:c1:df:3f:1d:75:ab:97:
                    19:07:e9:cf:2c:65:52:cc:88:97:9a:84:fb:54:78:
                    f4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AF:1C:EF:BB:9C:88:0E:E9:14:BB:19:8C:ED:29:81:E7:36:C6:5A
            X509v3 Authority Key Identifier:
                keyid:18:30:4E:37:E7:B3:0D:CE:85:76:5E:CF:C9:0E:79:8E:BF:35:84:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/18304E37E7B30DCE85765ECFC90E798EBF358498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18304E37E7B30DCE85765ECFC90E798EBF358498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/323830343a316333303a3a2f33322d3438203d3e203238323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c30::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:bf:ea:f1:64:e6:0b:58:3a:6a:c0:60:33:dd:2a:ac:ee:92:
         c7:7d:1f:b0:c5:df:6c:e3:3c:75:fd:cc:87:e3:17:07:5f:fd:
         a1:ec:59:53:ba:b4:42:05:95:20:4a:6c:07:d5:5c:97:71:5d:
         a6:6c:13:b9:af:72:f7:cc:23:69:b8:5c:d1:44:29:c3:8f:d9:
         a6:a5:5f:fe:f3:9a:eb:7f:e0:6b:8a:ce:79:10:d4:c1:28:14:
         9c:e0:75:21:6c:cc:b4:ea:75:fe:43:d8:59:7c:34:c1:9e:b7:
         f2:ec:24:6b:68:7b:86:59:5a:4c:c3:a4:4d:28:81:53:f6:40:
         4f:a2:9d:af:c3:49:09:69:0a:60:79:57:12:d0:e4:78:15:e6:
         5e:1d:a4:bd:c8:27:bf:13:8e:d6:1c:b1:b8:13:36:b8:ec:f8:
         e4:d2:1b:8a:97:be:ea:42:6c:d7:1d:7e:57:4a:73:a4:48:e0:
         c8:0d:d6:c2:d4:b2:fa:a8:13:57:53:cf:3e:d3:5d:78:1e:69:
         79:84:36:4e:d0:75:f5:9b:2d:2d:9f:fc:3b:98:2f:b4:78:f0:
         a2:3b:8a:3b:25:9e:17:6f:10:82:15:05:a4:65:da:9f:23:f0:
         34:ab:0b:90:e5:8b:73:23:36:8d:3c:30:99:33:37:66:b6:73:
         4c:1f:e8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:16:09 2025 by rpki-client