Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/0/323830343a336633633a3a2f33322d3438203d3e20323636363437.roa
File:                     323830343a336633633a3a2f33322d3438203d3e20323636363437.roa (raw, json)
Hash identifier:          YBcuiUPigDEbSJjFTw7XTTs0wA7q3qCsbu/JkVfee5Y=
Subject key identifier:   90:9B:CE:E6:3D:40:9E:A4:C7:5C:73:9E:95:85:3A:81:29:5C:BB:14
Certificate issuer:       /CN=5AAD1590FEF338004A2A6F41282BA152A6A024BC
Certificate serial:       65F17AD61212AA9B52DA47B00FFE8AE4D7EBEA88
Authority key identifier: 5A:AD:15:90:FE:F3:38:00:4A:2A:6F:41:28:2B:A1:52:A6:A0:24:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AAD1590FEF338004A2A6F41282BA152A6A024BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/0/323830343a336633633a3a2f33322d3438203d3e20323636363437.roa
Signing time:             Tue 04 Feb 2025 14:41:30 +0000
ROA not before:           Tue 04 Feb 2025 14:36:30 +0000
ROA not after:            Tue 03 Feb 2026 14:41:30 +0000
asID:                     266647
IP address blocks:        2804:3f3c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/0/5AAD1590FEF338004A2A6F41282BA152A6A024BC.crl
                          rsync://rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/0/5AAD1590FEF338004A2A6F41282BA152A6A024BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AAD1590FEF338004A2A6F41282BA152A6A024BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Feb 2025 21:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f1:7a:d6:12:12:aa:9b:52:da:47:b0:0f:fe:8a:e4:d7:eb:ea:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AAD1590FEF338004A2A6F41282BA152A6A024BC
        Validity
            Not Before: Feb  4 14:36:30 2025 GMT
            Not After : Feb  3 14:41:30 2026 GMT
        Subject: CN=909BCEE63D409EA4C75C739E95853A81295CBB14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:28:56:7a:33:f5:64:5b:6c:16:fe:53:db:6e:
                    af:9f:27:2c:ac:07:5b:cd:61:94:5a:f6:c8:fb:9a:
                    d1:40:a5:c3:f9:60:6a:87:85:93:8c:ed:f0:46:c2:
                    79:db:97:76:32:af:e1:c2:34:b9:a9:c9:dc:6b:25:
                    cd:8d:a1:82:f4:29:9c:9e:34:1f:74:83:f7:3d:94:
                    f3:49:b1:44:03:80:98:34:38:1b:f1:d5:c8:a9:3f:
                    57:09:d8:d3:c2:65:70:f1:8b:8a:a5:3c:c4:d9:90:
                    bc:b1:72:f9:e2:b6:78:81:da:12:b3:3e:e6:91:11:
                    b3:16:ad:ea:89:38:f8:7a:35:b4:40:56:d4:2a:b1:
                    20:db:90:d5:d1:6c:94:3e:36:c9:11:c3:60:93:d7:
                    3f:80:c7:1e:83:01:2b:89:d0:63:7f:1d:36:a6:ae:
                    d8:2a:7e:17:2e:09:0b:7c:29:69:54:b4:84:f6:dc:
                    7c:1b:1d:2a:7b:83:29:2a:23:5f:b7:10:fd:b4:c2:
                    5b:af:e3:a9:91:26:2e:35:45:f9:5f:52:de:ab:b6:
                    97:71:d7:b7:90:25:9c:51:9f:63:5b:73:dc:29:0d:
                    84:ba:e3:21:ea:c0:4c:87:55:fa:ec:28:5a:18:13:
                    cb:70:56:b2:bb:24:74:4f:b4:d0:d2:33:22:a4:bc:
                    ca:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9B:CE:E6:3D:40:9E:A4:C7:5C:73:9E:95:85:3A:81:29:5C:BB:14
            X509v3 Authority Key Identifier:
                keyid:5A:AD:15:90:FE:F3:38:00:4A:2A:6F:41:28:2B:A1:52:A6:A0:24:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/0/5AAD1590FEF338004A2A6F41282BA152A6A024BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AAD1590FEF338004A2A6F41282BA152A6A024BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/0/323830343a336633633a3a2f33322d3438203d3e20323636363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:e2:23:d2:a5:bf:77:0c:fa:12:1a:a0:bb:8c:5f:9d:49:a1:
         87:d0:3d:81:09:6b:6d:aa:e4:aa:33:72:a3:0d:2a:1d:da:a8:
         d4:a9:0a:26:a7:41:c0:e1:f0:82:be:79:e8:fa:0b:02:69:b6:
         d5:03:90:3b:ae:69:18:98:98:53:53:bd:75:b9:e8:81:ba:5b:
         6f:4e:89:e8:51:aa:c3:dd:af:58:08:7f:c8:2c:6a:a0:ac:4e:
         ea:01:d1:14:36:98:54:9d:c1:e1:b6:ad:c5:00:2b:7a:4f:43:
         c4:c4:4f:4d:d1:6f:40:ed:c7:7e:92:f6:a2:11:89:0b:75:e1:
         a6:54:66:f5:5c:51:69:e9:9e:2f:ac:c2:d2:d5:e2:89:02:ab:
         64:d9:55:e3:f5:0b:b6:43:50:9e:61:38:bd:ca:38:a2:11:39:
         62:21:64:f0:d8:9f:f9:00:71:59:ca:01:c4:f6:16:fc:0e:90:
         d5:f7:65:a5:96:94:ba:c4:a1:34:d1:1b:c5:76:62:59:db:99:
         61:65:0c:20:47:b6:27:47:e1:78:a6:7a:70:c6:1f:26:3a:ab:
         bf:19:75:55:25:0b:33:c6:ac:02:02:9d:e3:8f:bb:0b:66:8a:
         e7:34:b5:76:e2:43:90:20:f2:a4:32:2a:6b:a2:ce:ef:4d:d6:
         63:4d:c2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:08 2025 by rpki-client