Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a3130303a3a2f34302d3430203d3e203238323130.roa
File:                     323830343a3536633a3130303a3a2f34302d3430203d3e203238323130.roa (raw, json)
Hash identifier:          rehvaIC/3kBNhi6tcK5bAUW+OR97GQuVGoyO5ZGbc20=
Subject key identifier:   2E:D5:4C:99:A3:F8:50:2C:40:4F:40:B4:43:D1:FD:A5:55:9E:39:B6
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       3763CDF902AD4ABDD79FE521648DFD6EF73BD0D5
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a3130303a3a2f34302d3430203d3e203238323130.roa
Signing time:             Thu 06 Mar 2025 04:42:13 +0000
ROA not before:           Thu 06 Mar 2025 04:37:13 +0000
ROA not after:            Thu 05 Mar 2026 04:42:13 +0000
asID:                     28210
IP address blocks:        2804:56c:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 05:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:63:cd:f9:02:ad:4a:bd:d7:9f:e5:21:64:8d:fd:6e:f7:3b:d0:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Mar  6 04:37:13 2025 GMT
            Not After : Mar  5 04:42:13 2026 GMT
        Subject: CN=2ED54C99A3F8502C404F40B443D1FDA5559E39B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:99:a2:81:da:6a:56:f3:34:fd:9d:6c:d6:32:
                    4f:0b:6a:8f:e3:8e:2e:0b:83:b7:65:51:b6:4f:e3:
                    cf:fd:ef:50:5b:e4:0d:8c:bf:c7:e5:24:19:c1:57:
                    82:5a:15:7e:0f:ca:fc:7b:9b:d9:c1:49:19:e4:a8:
                    a2:4d:5b:ab:a2:e9:e8:48:39:cc:07:d6:5d:d3:4b:
                    9a:0f:70:2f:4a:0f:66:37:c6:a9:c7:e0:2b:56:b6:
                    f0:17:eb:60:7c:e4:92:26:17:37:5d:2c:84:5d:5e:
                    0e:ac:22:5d:c3:ab:fa:39:49:86:f7:94:8c:33:0b:
                    79:f6:a4:d6:06:d2:8e:fc:f8:5a:ca:ea:cf:3b:26:
                    a4:47:97:01:2c:e7:39:f0:4c:bc:96:52:6b:de:be:
                    82:5d:ee:dc:9f:66:49:ec:8d:f1:b2:26:ae:d9:17:
                    a6:23:b7:9f:41:92:6f:2b:a8:2a:13:bd:ed:cd:61:
                    ee:5f:c7:1e:7a:8f:a0:16:fe:78:0c:5f:69:8f:0e:
                    e5:a6:63:7d:18:e8:78:7b:5d:55:23:7d:2d:fe:da:
                    18:79:8d:6f:93:c5:e3:39:fe:8f:a1:01:d0:44:56:
                    39:5c:36:9d:5e:a7:74:a5:63:8d:7d:2a:93:60:21:
                    ad:a6:6b:be:a5:a0:da:1d:0f:25:36:96:a8:a4:e3:
                    55:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D5:4C:99:A3:F8:50:2C:40:4F:40:B4:43:D1:FD:A5:55:9E:39:B6
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a3130303a3a2f34302d3430203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56c:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         47:8c:f7:39:f6:98:c8:3e:b2:68:c8:88:4d:a7:a9:60:f9:ab:
         4a:42:fc:55:e7:f0:65:d3:46:b1:8d:28:80:cb:af:a0:15:4f:
         b6:2d:69:cc:09:90:8e:d9:a4:22:4b:79:0d:b8:e8:36:50:ea:
         fa:07:ec:e6:b1:7e:32:da:1d:e6:05:69:e0:32:00:40:89:21:
         f5:a2:9f:2e:4a:54:0f:7c:f4:79:58:1a:2b:55:16:e5:c3:35:
         22:a0:87:11:3d:fa:ca:32:7f:74:8d:01:34:18:1c:f1:60:4a:
         2f:4f:73:5e:81:fa:c9:0a:7c:fe:19:25:fd:20:37:b2:15:e8:
         b3:32:d2:09:9a:40:89:e1:97:1e:ff:f2:c7:cb:fb:17:77:ea:
         ac:86:0f:a0:01:0d:07:db:3d:38:16:6a:75:27:ca:09:dd:b9:
         b4:fb:8e:42:3a:8e:57:06:bf:b7:1e:6b:56:73:4e:ef:d5:7c:
         0b:b3:7b:49:14:fc:81:83:1f:be:89:0b:f9:9b:16:7b:ab:ca:
         6d:4f:65:72:d7:97:4d:e1:45:50:fc:30:86:5d:f8:fe:91:c5:
         1e:c3:33:a8:03:cf:0b:a3:fb:2c:9a:df:b0:3c:96:a4:f1:4a:
         07:72:2a:29:8d:6b:b2:36:ca:16:69:a9:1a:bc:e1:c9:26:33:
         b2:12:0b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:44:41 2025 by rpki-client