Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/323830343a336437343a3430303a3a2f34302d3430203d3e20323632363137.roa
File:                     323830343a336437343a3430303a3a2f34302d3430203d3e20323632363137.roa (raw, json)
Hash identifier:          Z+U1/27HN3bFc7P5vGKM0oa9dJShKqhEF4J1qS9Ziz4=
Subject key identifier:   31:24:BD:CB:65:A4:FB:1F:4C:48:38:72:49:DF:E4:67:0D:BA:55:D1
Certificate issuer:       /CN=392AEBF74273723B76684580562B17A77CDEF042
Certificate serial:       29C327F4CEED0930F229CB8EDBCAEF8998C4B757
Authority key identifier: 39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/323830343a336437343a3430303a3a2f34302d3430203d3e20323632363137.roa
Signing time:             Thu 06 Mar 2025 18:36:35 +0000
ROA not before:           Thu 06 Mar 2025 18:31:35 +0000
ROA not after:            Thu 05 Mar 2026 18:36:35 +0000
asID:                     262617
IP address blocks:        2804:3d74:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl
                          rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:16:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c3:27:f4:ce:ed:09:30:f2:29:cb:8e:db:ca:ef:89:98:c4:b7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392AEBF74273723B76684580562B17A77CDEF042
        Validity
            Not Before: Mar  6 18:31:35 2025 GMT
            Not After : Mar  5 18:36:35 2026 GMT
        Subject: CN=3124BDCB65A4FB1F4C48387249DFE4670DBA55D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ad:28:ef:46:49:3a:95:cd:ca:99:57:13:ba:
                    85:37:50:c5:be:b7:21:21:b6:f3:1c:23:97:c3:f7:
                    d5:6f:74:fd:04:d7:b1:93:28:5e:43:8e:31:c5:b4:
                    8f:25:d9:24:03:16:b5:78:9b:75:8e:fe:2b:41:39:
                    b0:36:3d:29:36:d8:5b:69:99:72:33:7c:5b:35:d2:
                    ef:b0:91:6c:44:04:36:db:8f:eb:9f:2c:64:2e:61:
                    e4:06:aa:03:6e:60:d4:f4:db:9a:e9:21:92:07:8f:
                    f8:21:9d:1b:ed:14:42:01:22:8b:30:fe:9a:9e:5d:
                    fa:18:0c:d6:8d:8c:d4:fb:8d:13:81:85:5b:cc:bf:
                    48:ba:33:52:d8:09:78:3c:53:a1:59:db:89:21:50:
                    8d:25:57:7d:da:f2:e0:d6:b5:73:0c:20:81:57:3a:
                    1e:09:7f:ae:87:dd:f7:83:3e:5f:b2:56:4d:0b:e0:
                    29:f4:cf:ac:26:a6:7f:ee:bc:a6:9f:bc:8c:9f:9a:
                    15:48:91:71:df:03:59:f4:40:37:e4:62:a6:58:e5:
                    72:ed:56:dd:f7:92:55:c6:eb:72:c3:cc:57:da:da:
                    dd:12:d7:2d:e4:9a:26:40:71:54:c1:4c:e6:2e:2d:
                    d1:20:46:e6:98:9c:a4:68:c9:bc:3b:cd:61:5b:21:
                    42:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:24:BD:CB:65:A4:FB:1F:4C:48:38:72:49:DF:E4:67:0D:BA:55:D1
            X509v3 Authority Key Identifier:
                keyid:39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/323830343a336437343a3430303a3a2f34302d3430203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d74:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         88:fd:54:c4:af:cf:4f:5e:93:f1:60:ea:63:17:e5:89:bb:e1:
         77:82:54:d6:aa:0c:ae:94:90:63:52:ad:35:d4:4f:16:73:4f:
         0b:34:70:17:33:9b:5b:ab:9d:6b:4f:38:a9:0f:31:9a:43:69:
         63:d1:4a:85:12:94:5c:3a:60:11:9f:2a:af:29:93:4f:5b:29:
         63:f7:71:52:9c:55:13:8a:c7:03:72:42:38:67:54:c9:21:c6:
         06:a7:f4:29:32:4e:c2:ef:55:81:f8:d7:97:94:57:e7:d4:e3:
         9a:06:e9:ae:fe:8c:41:f9:e2:21:71:19:5f:bb:86:18:c0:a2:
         c3:17:5a:ee:9a:ab:c3:ea:1f:5e:29:97:10:76:a9:83:6b:33:
         31:7a:c2:3e:27:28:7a:d9:96:8c:8e:e8:b7:6b:69:a6:48:46:
         f7:90:6a:15:b4:b7:82:7e:b7:66:4d:59:3b:24:45:a9:23:0a:
         15:99:ef:f9:ad:39:47:a4:8f:f4:e1:cb:20:bd:89:80:a1:9e:
         a6:6f:6c:73:e3:bb:26:09:f5:f8:5c:49:72:b5:cb:97:13:57:
         a0:38:6a:35:69:ec:52:96:d8:a4:4f:69:b8:06:af:ee:e7:3a:
         d1:42:8f:e9:e9:93:c0:c2:e0:4b:0c:f8:3b:ce:35:89:d4:c9:
         e9:09:c6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:07 2025 by rpki-client