Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/323830343a346435633a3a2f33322d3334203d3e20323638313932.roa
File:                     323830343a346435633a3a2f33322d3334203d3e20323638313932.roa (raw, json)
Hash identifier:          iPVEGW3bOanlt6xEAKiKNF4xgEWPmr7FOhM8RsWlKBI=
Subject key identifier:   38:97:F6:A9:98:EB:EC:27:10:B1:A0:0B:D6:EA:DA:0B:49:6E:D0:E5
Certificate issuer:       /CN=A955D3EDFAB3E2590F766F0D4CF5D8B31C713836
Certificate serial:       69DB695672C90B9B94CE8A8B24C23DB5F3164662
Authority key identifier: A9:55:D3:ED:FA:B3:E2:59:0F:76:6F:0D:4C:F5:D8:B3:1C:71:38:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/323830343a346435633a3a2f33322d3334203d3e20323638313932.roa
Signing time:             Thu 20 Mar 2025 20:21:20 +0000
ROA not before:           Thu 20 Mar 2025 20:16:20 +0000
ROA not after:            Thu 19 Mar 2026 20:21:20 +0000
asID:                     268192
IP address blocks:        2804:4d5c::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.crl
                          rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 23:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:db:69:56:72:c9:0b:9b:94:ce:8a:8b:24:c2:3d:b5:f3:16:46:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A955D3EDFAB3E2590F766F0D4CF5D8B31C713836
        Validity
            Not Before: Mar 20 20:16:20 2025 GMT
            Not After : Mar 19 20:21:20 2026 GMT
        Subject: CN=3897F6A998EBEC2710B1A00BD6EADA0B496ED0E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d4:57:42:0e:e1:6f:a3:78:37:4b:07:ec:a8:
                    4e:11:bc:b5:9f:66:e7:b5:29:e1:f5:71:35:e7:45:
                    a2:06:ec:d0:6d:63:43:8d:0a:92:be:d4:1d:75:2f:
                    87:b9:20:23:d6:17:be:8a:cd:59:86:9a:c5:f8:0c:
                    77:37:3f:bb:fa:dc:b6:26:e7:d9:db:d3:d3:29:ea:
                    3f:a1:6c:d9:6c:96:b3:57:53:62:d5:51:48:b3:12:
                    fc:7d:b3:f9:59:09:e4:db:a9:1f:99:45:e0:f2:51:
                    b6:29:fa:a0:2b:78:4f:9b:3c:25:2a:d6:52:c7:10:
                    f8:69:64:24:4c:80:49:49:08:79:5c:99:e4:b9:13:
                    e0:15:74:8d:20:cc:d7:d4:9a:a1:cc:42:d5:4b:28:
                    f5:96:9d:1a:8c:a1:bb:ae:f0:b8:0a:be:e9:9d:3f:
                    41:6d:03:7c:a9:21:7e:ad:30:1f:fd:86:a1:09:6d:
                    0d:8b:52:45:79:42:6e:c2:c7:d2:f8:84:4e:ea:c5:
                    49:62:29:b3:f2:e4:ae:40:59:bf:d9:4c:a7:2f:ad:
                    f0:8c:93:32:cb:e4:38:1b:65:6c:b5:61:f6:df:52:
                    71:29:56:4f:a3:be:59:6b:91:0d:99:a7:b7:e5:67:
                    6e:de:bb:e1:29:d5:d0:3d:44:8d:23:77:d3:ae:d7:
                    eb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:97:F6:A9:98:EB:EC:27:10:B1:A0:0B:D6:EA:DA:0B:49:6E:D0:E5
            X509v3 Authority Key Identifier:
                keyid:A9:55:D3:ED:FA:B3:E2:59:0F:76:6F:0D:4C:F5:D8:B3:1C:71:38:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/323830343a346435633a3a2f33322d3334203d3e20323638313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:a0:41:c3:b1:08:bc:88:20:60:e4:df:1f:16:f4:a9:68:e4:
         b5:98:22:6a:c7:2a:df:0c:cb:f4:f4:70:51:dc:52:14:05:e0:
         ef:ec:ac:c7:9c:48:76:90:5a:b8:d0:26:1d:7b:9b:c3:e3:12:
         70:91:7d:c0:bb:e1:28:fe:1b:30:14:68:d2:34:96:50:d5:96:
         a3:53:24:82:bf:3b:75:4b:4f:a8:60:4e:8b:6a:e1:7e:49:a8:
         33:95:b6:2f:91:bb:86:e7:14:6f:1a:90:12:ff:38:f1:b9:df:
         d2:c9:5f:87:20:9e:c5:5b:18:02:0c:24:76:fa:68:ce:c5:d2:
         41:6d:6d:c8:57:94:55:91:a6:b9:4e:89:09:c2:81:16:46:79:
         92:7b:0a:33:b9:be:f3:e4:d6:99:72:8f:ba:b6:d6:b3:8a:ad:
         67:ce:ce:ae:8c:3e:8b:d3:ae:d3:ac:ca:42:38:36:cf:af:97:
         66:6e:c1:8d:73:2c:9a:c3:74:58:89:c2:b6:fa:b9:74:af:25:
         17:cb:30:60:dc:22:a2:8f:7e:04:d0:8e:43:5d:33:4f:5a:42:
         c3:55:ae:04:0e:92:09:ef:10:02:11:55:62:e4:06:70:0c:18:
         be:3a:74:04:5f:22:c3:bc:11:4d:6e:9d:22:87:72:94:0d:7b:
         85:7b:57:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:34:04 2025 by rpki-client