Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/323830343a353239303a3a2f33322d3438203d3e20323638353236.roa
File:                     323830343a353239303a3a2f33322d3438203d3e20323638353236.roa (raw, json)
Hash identifier:          89H6sqhwLq+OwyjFapd3XLt468pjg8feq8CkL0sljBs=
Subject key identifier:   5D:F5:BB:EF:43:B9:B4:ED:F6:F6:84:44:8F:A4:F1:00:79:93:EB:23
Certificate issuer:       /CN=B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0
Certificate serial:       6E52DE54C95D2E559C5FEAF2841200297EC25EB3
Authority key identifier: B5:97:38:1F:2A:7F:DE:08:B3:63:98:AF:B0:FC:E7:E7:B6:BD:31:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/323830343a353239303a3a2f33322d3438203d3e20323638353236.roa
Signing time:             Thu 06 Mar 2025 20:55:46 +0000
ROA not before:           Thu 06 Mar 2025 20:50:46 +0000
ROA not after:            Thu 05 Mar 2026 20:55:46 +0000
asID:                     268526
IP address blocks:        2804:5290::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl
                          rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:52:de:54:c9:5d:2e:55:9c:5f:ea:f2:84:12:00:29:7e:c2:5e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0
        Validity
            Not Before: Mar  6 20:50:46 2025 GMT
            Not After : Mar  5 20:55:46 2026 GMT
        Subject: CN=5DF5BBEF43B9B4EDF6F684448FA4F1007993EB23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:10:d4:83:24:c4:6a:da:34:76:cc:b6:eb:4b:
                    72:d1:fa:d1:af:82:42:2f:9b:81:9b:f1:64:71:4d:
                    68:b3:54:e9:7b:60:e7:a0:63:73:ab:53:e0:9b:51:
                    33:06:15:64:8b:9d:f8:4e:26:7b:ba:58:8c:2d:0f:
                    25:db:d2:a0:fc:65:ca:55:f6:ed:e3:6a:70:95:01:
                    98:ec:63:c3:99:76:d3:ad:f6:1c:20:19:80:5f:f9:
                    83:5c:8e:7d:5e:00:f9:f7:23:ca:00:49:ee:2b:ab:
                    cc:d9:2b:98:12:0d:f5:96:2e:24:54:81:25:bb:17:
                    88:e1:23:aa:14:2b:a3:59:ad:6c:eb:0a:fc:c6:a5:
                    51:91:06:5f:6a:39:90:83:44:84:11:70:15:db:7a:
                    4c:3c:7a:39:0a:e5:39:c6:7e:6b:dd:12:e0:32:0f:
                    20:c2:2f:50:1a:4d:29:03:56:94:43:4c:ae:1f:75:
                    96:4f:f4:a3:63:a2:39:93:3d:f7:0f:a4:27:9b:16:
                    8f:fa:57:25:3f:00:40:ee:61:b6:f0:18:5e:40:a9:
                    27:8e:f3:d9:12:fd:cb:c2:1d:ba:ea:68:d9:19:ef:
                    ca:d8:9f:92:e4:75:25:6c:af:68:2d:72:3e:ce:c1:
                    81:f5:43:6a:71:94:5c:70:4a:37:27:25:f4:b0:a5:
                    5e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F5:BB:EF:43:B9:B4:ED:F6:F6:84:44:8F:A4:F1:00:79:93:EB:23
            X509v3 Authority Key Identifier:
                keyid:B5:97:38:1F:2A:7F:DE:08:B3:63:98:AF:B0:FC:E7:E7:B6:BD:31:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/323830343a353239303a3a2f33322d3438203d3e20323638353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5290::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:94:a2:be:d9:a5:7e:2b:bf:6d:7b:ca:71:00:ae:20:b2:38:
         c7:df:dd:a0:17:35:b7:68:e3:fe:fd:a4:85:b2:de:f2:2f:4b:
         a7:7f:e3:89:ee:cb:b7:27:b2:2c:75:4a:d8:55:6a:3e:f5:e0:
         94:f6:cc:6e:6a:3c:a4:a2:07:ee:3e:bb:00:cc:26:fb:24:8b:
         6a:f7:6f:9f:c7:32:6d:9d:c1:e1:a0:c3:ca:7d:bf:8d:9a:43:
         6f:cd:45:4f:ba:ec:94:81:fe:d5:46:82:75:5e:40:21:e2:2b:
         e7:6a:de:69:98:60:40:a4:05:46:a9:34:cd:5a:ff:09:1c:c4:
         8e:d8:ff:d0:d3:b8:48:3d:e4:54:48:76:08:a2:50:b2:17:63:
         16:72:fe:35:ca:19:19:39:7f:4d:51:e7:14:8d:1d:32:b9:0e:
         e9:96:0a:dd:04:1d:e6:4c:ff:d3:fb:ff:6b:cc:57:29:17:9a:
         2a:5e:a8:ca:49:cb:e5:8e:25:e4:6c:9e:50:8b:67:74:88:95:
         bc:19:49:6e:83:78:c7:77:df:bb:e6:19:05:bf:fa:8f:ea:f7:
         b2:df:f9:e6:eb:76:1a:87:f1:5a:ff:35:e1:b2:d3:5f:69:78:
         ba:f5:10:e2:93:0b:86:dd:67:97:f3:71:7c:c1:88:8c:0d:a6:
         26:ee:b3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:45:56 2025 by rpki-client