Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a633030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a633030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          iA8STUyKH9AZC2dnJmLezwbnP0zF6N9olHvN6qAEVbA=
Subject key identifier:   D3:22:8F:25:E1:6F:AE:83:79:11:96:28:F2:C4:B6:B2:BC:42:C9:1C
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       5E07629C8E02970BFFC40C3C7FC39CCA07DA2932
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a633030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Thu 06 Mar 2025 01:00:29 +0000
ROA not before:           Thu 06 Mar 2025 00:55:29 +0000
ROA not after:            Thu 05 Mar 2026 01:00:29 +0000
asID:                     61637
IP address blocks:        2804:1c18:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:07:62:9c:8e:02:97:0b:ff:c4:0c:3c:7f:c3:9c:ca:07:da:29:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Mar  6 00:55:29 2025 GMT
            Not After : Mar  5 01:00:29 2026 GMT
        Subject: CN=D3228F25E16FAE8379119628F2C4B6B2BC42C91C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:08:92:46:90:0d:4d:91:b8:d5:0b:0c:4a:75:
                    f5:d0:b2:7a:fc:87:c1:eb:3e:89:17:ea:c3:65:a2:
                    c5:fa:5d:bd:8c:5b:32:59:62:76:be:17:08:fd:32:
                    8b:f9:71:bb:25:79:76:6d:a6:09:d7:01:ec:ed:72:
                    54:51:09:a5:ad:c3:31:59:13:fa:98:25:7e:a1:ee:
                    6a:31:13:44:8c:17:87:76:6f:3d:28:7f:f1:2d:cc:
                    f9:71:00:ae:06:22:3a:91:ec:b8:0e:8a:30:84:70:
                    07:e3:42:ee:03:50:7d:2e:44:43:4d:2c:60:58:77:
                    56:f5:9a:a7:10:0e:44:cb:06:db:21:aa:f2:35:6e:
                    e2:34:4f:46:26:ba:3e:f8:b9:5e:3d:a4:5a:cb:47:
                    ef:17:35:8c:43:df:b4:59:68:55:1d:18:08:90:a6:
                    ac:ac:53:9d:c6:62:94:ba:69:ae:cc:73:82:d3:81:
                    3f:9a:73:52:cd:98:c0:e4:d9:33:f2:95:cb:57:fc:
                    18:cf:89:19:98:72:ec:da:23:d2:b1:19:60:86:ec:
                    81:0d:47:33:0b:5d:d9:61:84:9c:1b:f8:48:ff:47:
                    a9:af:7b:d3:09:76:dc:83:0a:56:db:cc:dd:58:2e:
                    e0:a7:bf:16:3a:b5:93:f9:35:78:73:72:f4:81:d1:
                    b6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:22:8F:25:E1:6F:AE:83:79:11:96:28:F2:C4:B6:B2:BC:42:C9:1C
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a633030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         34:28:99:fe:a5:a9:ce:42:3c:fc:0f:5d:61:6c:42:31:62:dd:
         1b:b3:74:d3:4f:b3:ad:93:da:9e:0d:48:8d:4d:a5:b8:97:36:
         33:1c:cb:03:07:b5:3f:a9:43:06:95:01:f8:cf:f2:43:97:1b:
         6c:a2:58:56:56:32:ca:81:ba:51:cd:37:ae:88:89:de:6e:6a:
         44:60:15:c8:a5:1f:df:a5:e8:4b:3d:6c:9b:d0:5c:90:0f:b5:
         34:08:21:fe:99:99:71:21:c5:5f:2c:9a:43:41:a6:77:27:65:
         9c:91:ea:54:ba:47:56:be:dd:91:48:61:ef:62:53:01:c6:3d:
         11:73:57:e0:63:65:e1:fe:7b:20:88:e8:45:39:b4:f6:7d:bc:
         96:39:f0:2d:0d:a3:91:59:89:85:f2:7d:88:64:28:43:2f:24:
         b7:3d:44:f7:30:67:9a:29:a0:c0:b2:92:ed:e3:30:a3:f5:fa:
         b1:fd:25:fb:54:ec:b1:93:d9:82:7f:69:49:59:3d:eb:b7:a8:
         ae:a7:7c:f2:01:06:c0:5a:e5:bb:12:ff:0c:cb:84:2f:d3:a7:
         b0:d9:fa:5f:08:23:86:d9:10:26:fa:df:3f:43:2a:36:62:80:
         72:2c:1b:94:3c:b8:3c:9b:b8:4f:0a:d8:14:2e:a7:14:3f:25:
         3c:5d:9b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:50 2025 by rpki-client