Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/323830343a333264633a3a2f33322d3438203d3e20323632333232.roa
File:                     323830343a333264633a3a2f33322d3438203d3e20323632333232.roa (raw, json)
Hash identifier:          95wtn2PtjN3o486AsXSu7sv3jIID5Q0ukqej/ydy1MY=
Subject key identifier:   C4:74:43:0C:86:DD:95:28:0F:10:E0:B9:9B:36:1B:8D:3A:41:46:72
Certificate issuer:       /CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
Certificate serial:       16B500907B0A7E120F0FC87C279C7413E70E5336
Authority key identifier: 2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/323830343a333264633a3a2f33322d3438203d3e20323632333232.roa
Signing time:             Thu 06 Mar 2025 20:46:03 +0000
ROA not before:           Thu 06 Mar 2025 20:41:03 +0000
ROA not after:            Thu 05 Mar 2026 20:46:03 +0000
asID:                     262322
IP address blocks:        2804:32dc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl
                          rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 19:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b5:00:90:7b:0a:7e:12:0f:0f:c8:7c:27:9c:74:13:e7:0e:53:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
        Validity
            Not Before: Mar  6 20:41:03 2025 GMT
            Not After : Mar  5 20:46:03 2026 GMT
        Subject: CN=C474430C86DD95280F10E0B99B361B8D3A414672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e5:a2:e2:10:ee:cf:82:e9:91:92:b5:17:b0:
                    7e:ae:e2:31:53:3c:4a:8f:1f:7e:f5:64:97:e8:91:
                    50:6a:1e:38:a9:a6:dd:1d:de:0c:e3:91:00:0e:22:
                    c5:f1:51:3f:3b:7b:84:f4:a9:62:82:e3:3c:75:0f:
                    33:83:d2:bf:b0:0f:23:98:37:ca:4c:d6:3a:67:f5:
                    ba:fb:e8:45:29:d3:70:b8:46:8b:b6:b8:33:02:94:
                    f2:c7:cc:7d:31:a7:5e:4a:1d:c1:16:eb:32:4f:3d:
                    5d:96:30:f7:27:cc:07:72:94:d9:49:05:85:45:2f:
                    c5:57:23:23:bf:02:0d:4b:9a:5c:0b:5d:2d:b8:1e:
                    bf:cb:ec:d1:1a:25:e7:36:dc:76:15:d6:1c:19:6e:
                    fd:58:6d:0b:dc:6a:d7:1d:3c:2c:ba:63:95:a9:d5:
                    5f:17:07:6d:1b:b6:38:8d:f9:4c:9c:cb:b9:ca:b2:
                    94:36:39:70:b4:84:13:50:c2:ee:af:35:d1:1f:1c:
                    c2:3c:0a:29:44:a1:b0:e6:16:f4:9e:36:2e:62:7c:
                    69:64:f5:6b:a0:49:1b:59:73:3f:99:b9:ad:34:af:
                    51:3d:6f:49:43:05:45:b5:a3:04:21:3b:f8:3f:bf:
                    30:64:78:1c:5c:42:57:54:36:ec:a8:7a:c2:a9:7a:
                    32:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:74:43:0C:86:DD:95:28:0F:10:E0:B9:9B:36:1B:8D:3A:41:46:72
            X509v3 Authority Key Identifier:
                keyid:2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/323830343a333264633a3a2f33322d3438203d3e20323632333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:24:36:fb:db:01:77:4d:cd:6b:60:36:aa:19:1e:12:2d:94:
         5c:c3:f7:69:90:96:cc:81:ee:17:89:cf:85:2d:fa:38:e0:8c:
         2a:07:c1:1a:d7:ff:ed:ec:2f:20:06:d5:b5:ae:e1:b1:b4:4f:
         89:93:e4:64:52:05:89:b9:f0:52:91:3d:57:86:c4:b9:68:69:
         c1:71:d4:2c:31:cd:99:14:8e:7a:67:f8:2e:53:22:5f:8e:ff:
         19:5c:03:b1:47:c3:44:d0:a3:ee:10:a7:c3:d5:6d:87:1c:e3:
         45:41:f1:a0:42:9e:0d:6c:6c:ff:04:cc:61:16:39:30:7d:69:
         e1:6d:91:d5:3e:10:0a:8e:97:df:c8:ca:5d:3d:57:e6:63:d0:
         e5:4b:53:2b:d8:dc:23:48:85:e9:07:b8:ad:2c:bd:f9:ea:41:
         b5:d3:61:6a:17:ae:91:af:c9:0f:30:91:ca:40:73:81:24:1c:
         2a:fb:33:d1:9f:2e:59:4c:02:1a:bd:73:75:32:a7:69:da:a8:
         54:0f:b8:66:d9:37:0b:79:36:68:9a:51:97:c2:91:d7:5f:33:
         03:13:17:f2:fd:01:c0:79:73:f6:7e:47:f1:62:f0:5b:8b:96:
         f7:bf:09:61:bc:aa:38:38:25:88:00:09:91:fc:f4:62:35:25:
         c5:b3:41:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:06 2025 by rpki-client