Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a623030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a623030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          9UnWEviCy59crMHbirgIcPgLtgu4jF4ibM69TeuUzv4=
Subject key identifier:   EB:D9:83:2E:30:D6:A1:A3:89:63:99:0A:44:CE:79:BF:12:9C:44:71
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       1ECC1F6414014549955CB539F49D4E13E52D52A2
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a623030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Thu 06 Mar 2025 01:00:35 +0000
ROA not before:           Thu 06 Mar 2025 00:55:35 +0000
ROA not after:            Thu 05 Mar 2026 01:00:35 +0000
asID:                     61637
IP address blocks:        2804:1c18:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 17:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:cc:1f:64:14:01:45:49:95:5c:b5:39:f4:9d:4e:13:e5:2d:52:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Mar  6 00:55:35 2025 GMT
            Not After : Mar  5 01:00:35 2026 GMT
        Subject: CN=EBD9832E30D6A1A38963990A44CE79BF129C4471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:cc:86:d9:5a:de:5e:9e:88:09:83:ab:d6:
                    4b:94:ed:52:b0:79:6b:89:4d:60:38:be:d8:6f:7d:
                    f4:6a:51:b5:be:04:60:6b:6b:c1:ae:a5:56:63:4c:
                    c8:2c:de:19:14:a2:f4:4c:12:9e:85:87:b9:30:a3:
                    50:2d:d7:75:05:c0:03:72:8f:37:4f:ab:e2:bf:a0:
                    28:c9:9b:1c:c0:17:db:30:28:90:79:97:4d:73:a9:
                    95:9d:42:c7:af:a6:7f:c3:90:08:8b:98:de:57:95:
                    b8:70:84:c9:d2:eb:89:f9:96:c1:e7:9d:8d:a2:3c:
                    18:c6:da:07:23:c3:b9:6f:a0:37:df:df:6a:28:f6:
                    32:2f:f7:f1:34:c7:29:88:a9:4b:46:f9:c6:97:90:
                    b9:66:3e:01:23:62:7d:fb:36:e3:4a:ab:43:d4:99:
                    f5:24:62:be:5e:e6:d0:eb:cd:48:dd:9e:e9:39:4e:
                    76:6a:21:d8:73:7f:74:15:5a:7a:51:f2:88:d2:91:
                    9a:6b:d4:2f:df:e6:a1:fa:d5:38:87:15:62:7f:af:
                    f0:9b:f7:bc:09:40:16:3f:56:e8:fe:97:bd:89:74:
                    17:ad:5a:27:98:b5:94:25:50:5b:ef:fe:0a:9a:a4:
                    3d:64:b4:0e:cf:47:66:7e:7a:ad:8b:d9:d1:b0:7c:
                    7c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D9:83:2E:30:D6:A1:A3:89:63:99:0A:44:CE:79:BF:12:9C:44:71
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a623030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0f:99:2a:90:9f:be:bf:d8:0d:27:0e:dc:26:b9:2c:61:32:94:
         93:3a:ee:ac:1d:8c:aa:e8:8e:3c:21:b3:f0:38:6e:a9:25:c3:
         7f:4d:69:c7:79:f0:34:02:73:b8:1b:fa:f3:64:14:b6:84:19:
         4a:5e:41:41:56:6d:66:86:0c:9e:78:15:1a:ec:f7:ff:24:06:
         ef:f8:56:c9:76:ca:5b:ac:68:66:81:1e:03:b6:43:3c:f6:40:
         0e:3a:68:c6:5c:1c:12:b9:9f:d4:6c:b9:f9:87:dc:9f:d1:b2:
         44:97:73:be:1a:ce:cc:75:c6:5b:d2:2d:09:45:2e:72:1a:9c:
         43:78:23:f8:95:64:90:b5:2c:a0:71:2d:c6:02:c3:a7:0e:c0:
         d9:97:bf:99:fe:ff:86:b0:fb:74:05:40:f8:a0:ea:3e:42:94:
         77:41:17:92:21:57:d8:ac:f8:7a:8f:9e:ca:1c:41:dc:1f:25:
         97:c9:e9:e9:23:f9:72:fc:3a:d5:c9:f4:4c:e5:de:9b:5e:f4:
         15:31:f6:52:48:dd:7d:9b:b9:5c:e0:c6:18:89:39:74:06:f4:
         b7:00:ac:83:91:69:6e:61:52:7a:5a:88:83:c6:2b:4d:20:d3:
         33:72:87:d5:2e:2f:f5:90:e4:26:a2:3b:37:a8:42:8a:05:fc:
         7d:56:27:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:43:17 2025 by rpki-client