Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/323830343a3261633a3a2f33322d3634203d3e203238333030.roa
File:                     323830343a3261633a3a2f33322d3634203d3e203238333030.roa (raw, json)
Hash identifier:          3dZVPb0wsP/ATFBR0hxJCZo6jGbRcYAim6f8AtmU/I4=
Subject key identifier:   24:B4:CC:C0:90:B5:6D:88:1F:62:A0:0A:63:1A:D9:8E:8F:D7:2D:B8
Certificate issuer:       /CN=AD2A9EAA0D8113E73A6CFCE555B59055FBE53065
Certificate serial:       4BBDE30E31B606ADE29CE94075FC0063C1BBBB7E
Authority key identifier: AD:2A:9E:AA:0D:81:13:E7:3A:6C:FC:E5:55:B5:90:55:FB:E5:30:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2A9EAA0D8113E73A6CFCE555B59055FBE53065.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/323830343a3261633a3a2f33322d3634203d3e203238333030.roa
Signing time:             Wed 09 Apr 2025 23:58:42 +0000
ROA not before:           Wed 09 Apr 2025 23:53:42 +0000
ROA not after:            Wed 08 Apr 2026 23:58:42 +0000
asID:                     28300
IP address blocks:        2804:2ac::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/AD2A9EAA0D8113E73A6CFCE555B59055FBE53065.crl
                          rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/AD2A9EAA0D8113E73A6CFCE555B59055FBE53065.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2A9EAA0D8113E73A6CFCE555B59055FBE53065.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 04:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:bd:e3:0e:31:b6:06:ad:e2:9c:e9:40:75:fc:00:63:c1:bb:bb:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD2A9EAA0D8113E73A6CFCE555B59055FBE53065
        Validity
            Not Before: Apr  9 23:53:42 2025 GMT
            Not After : Apr  8 23:58:42 2026 GMT
        Subject: CN=24B4CCC090B56D881F62A00A631AD98E8FD72DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cd:84:96:f3:f6:7c:6d:12:96:4d:2c:46:2b:
                    54:3e:86:06:b2:70:77:c8:53:5f:87:71:47:0a:b5:
                    96:32:dc:f5:39:5c:1a:73:8c:2b:64:1e:2e:c9:52:
                    e0:85:a9:32:5a:24:4b:57:97:f8:36:21:11:2b:4b:
                    c8:fe:34:cb:39:11:74:d5:48:5e:00:f0:a4:e5:ca:
                    54:b1:3e:64:4b:51:db:37:52:8e:c1:75:66:fe:26:
                    55:49:c8:3c:69:23:f9:7c:ef:a7:f8:11:55:12:10:
                    be:6a:d2:ac:1b:19:f8:9c:04:0f:1d:22:da:b6:61:
                    dd:66:d8:86:3a:ae:b3:f6:c6:d1:8c:e5:15:f0:c6:
                    4a:ef:a3:c7:42:37:78:11:c8:55:87:06:16:28:d3:
                    74:70:90:50:eb:c9:60:0d:7f:f6:b4:e3:db:5f:81:
                    13:23:e2:17:f8:6a:8c:d0:33:b9:5c:ad:72:0d:fb:
                    85:2f:54:07:cf:bf:37:3b:79:a2:04:0e:48:09:9c:
                    c4:2a:e2:d3:ed:40:6a:0d:3d:71:22:95:a3:35:98:
                    ba:66:e4:c2:b1:7a:3d:b6:33:ef:a3:58:9e:e7:f6:
                    ee:34:18:ed:cc:02:61:05:83:19:e2:0a:cb:bd:28:
                    41:06:90:e4:f4:c3:8c:fd:74:a6:cd:99:31:5a:22:
                    a6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B4:CC:C0:90:B5:6D:88:1F:62:A0:0A:63:1A:D9:8E:8F:D7:2D:B8
            X509v3 Authority Key Identifier:
                keyid:AD:2A:9E:AA:0D:81:13:E7:3A:6C:FC:E5:55:B5:90:55:FB:E5:30:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/AD2A9EAA0D8113E73A6CFCE555B59055FBE53065.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2A9EAA0D8113E73A6CFCE555B59055FBE53065.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/323830343a3261633a3a2f33322d3634203d3e203238333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:fb:6b:22:9b:3e:86:a8:b1:08:08:cf:e7:63:c4:53:31:b2:
         b6:93:ce:0f:ab:1f:e3:8e:fe:a4:87:38:d1:2d:7e:c1:1a:3f:
         19:93:d6:78:54:3f:0b:28:cf:64:c5:bd:61:54:2e:37:ae:31:
         9f:bc:11:06:25:92:0b:f0:4e:b1:49:c4:cf:6d:49:9b:20:6e:
         e8:72:48:89:74:2d:65:30:f8:1f:bc:c0:4d:6a:ce:b1:d1:3c:
         53:ce:25:f6:3b:ea:f5:e8:35:2a:b1:75:1e:da:2a:91:76:80:
         86:c1:a3:48:3c:37:54:e9:dd:6f:00:2a:23:22:e1:a3:09:2f:
         9c:7d:2c:a9:b7:3a:b1:92:20:3f:ad:12:0d:f5:93:34:ce:7b:
         ff:03:97:41:3a:3e:35:7b:e6:dd:0c:8c:4c:ff:e9:ee:e9:0c:
         57:a2:66:a2:d1:e4:f3:b5:b9:17:62:38:e2:0d:b5:ae:44:e5:
         4c:f6:60:ec:50:f9:1d:08:f3:4d:49:0a:a0:7b:9b:ba:d4:a6:
         50:56:7f:b7:f1:77:b4:0c:f8:48:5a:7c:b7:d3:4f:13:04:9c:
         6d:2e:ba:0d:8f:3d:7e:bd:11:d7:8b:bb:c8:3c:21:f1:02:7d:
         37:48:6b:d7:a7:02:1c:45:b5:f4:61:8c:fa:2d:b4:9f:c8:8f:
         69:18:23:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:16:05 2025 by rpki-client