Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/323830343a3736383a346230303a3a2f34312d3431203d3e203532393737.roa
File:                     323830343a3736383a346230303a3a2f34312d3431203d3e203532393737.roa (raw, json)
Hash identifier:          NAhyJljBRytXMQoGyqi4/wTd29jgzBn1XQ5jRzvBFCo=
Subject key identifier:   AA:22:05:5A:E8:C3:1D:8D:2A:CC:B3:2F:F7:05:95:D7:58:71:64:9F
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       66DF779E251120C3B2DF7B2E558ECE211DB7E61A
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/323830343a3736383a346230303a3a2f34312d3431203d3e203532393737.roa
Signing time:             Wed 05 Mar 2025 19:00:06 +0000
ROA not before:           Wed 05 Mar 2025 18:55:06 +0000
ROA not after:            Wed 04 Mar 2026 19:00:06 +0000
asID:                     52977
IP address blocks:        2804:768:4b00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 06:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:df:77:9e:25:11:20:c3:b2:df:7b:2e:55:8e:ce:21:1d:b7:e6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Mar  5 18:55:06 2025 GMT
            Not After : Mar  4 19:00:06 2026 GMT
        Subject: CN=AA22055AE8C31D8D2ACCB32FF70595D75871649F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2f:83:ee:b4:43:b5:a7:99:d9:72:d5:f2:94:
                    07:86:a7:bb:af:02:5a:7e:0a:a3:6d:05:f9:2b:20:
                    a0:ec:67:15:05:93:85:c4:95:2f:d3:09:1d:2b:18:
                    30:14:48:ef:88:cc:87:46:95:52:f3:83:45:94:88:
                    d7:d8:f3:a8:9b:85:be:d4:1a:6c:49:43:5b:eb:86:
                    28:21:e2:1d:6c:ef:76:aa:22:ed:b1:0b:07:96:0f:
                    c6:f0:e0:3e:74:64:15:16:0e:94:f5:2a:6b:a1:26:
                    fb:b4:9c:27:80:84:65:99:e8:1a:2b:2e:30:b7:fe:
                    c3:25:e3:fe:0d:bc:b4:84:81:e3:86:56:1d:d9:2a:
                    ae:1f:c5:44:24:0f:fe:dd:54:0a:41:e5:dc:bf:d5:
                    aa:c0:52:29:29:c1:c5:b8:2d:60:4d:38:34:8a:98:
                    92:5c:39:ed:93:8b:a6:06:30:6c:fc:94:42:2f:de:
                    59:83:3b:75:0d:fc:7b:b8:ab:1f:ea:44:5b:77:da:
                    73:bc:a8:19:d0:c1:f1:ed:0e:1b:37:5a:ca:2d:5b:
                    01:08:2c:51:c3:0c:98:e7:cb:45:b9:c3:d4:36:9f:
                    e1:c5:ec:7c:2f:f1:d6:88:dd:4c:6c:2b:e7:9d:82:
                    4b:cc:a3:05:9c:12:b3:20:d7:07:b5:f3:95:b5:37:
                    d3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:22:05:5A:E8:C3:1D:8D:2A:CC:B3:2F:F7:05:95:D7:58:71:64:9F
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/323830343a3736383a346230303a3a2f34312d3431203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:768:4b00::/41

    Signature Algorithm: sha256WithRSAEncryption
         1e:d3:b8:85:53:0f:cb:2a:83:1f:08:6d:78:eb:6b:0c:54:e1:
         e2:00:f1:86:4c:b4:0f:57:ee:02:0f:c2:53:f1:e8:73:f0:24:
         5d:04:14:a4:7a:4e:0f:45:6f:71:9b:c5:93:58:62:00:1e:e9:
         b5:94:af:66:d1:61:a4:d1:ff:1f:10:46:9f:4b:02:98:86:91:
         6a:9d:91:71:bb:01:8a:3d:81:18:61:b5:1b:24:01:47:11:57:
         9a:9a:b7:92:95:11:81:5c:59:4e:ee:15:0f:6e:18:68:15:f1:
         3f:f9:ea:99:82:77:90:73:8b:9c:e9:37:4b:2c:bf:14:de:4b:
         d9:d9:ed:b7:79:8f:5f:ee:28:07:7d:74:ec:0a:8c:9a:17:76:
         bb:05:c5:f1:6f:a8:e6:0d:33:6d:94:7f:e0:72:7f:66:17:db:
         ef:af:66:45:22:0c:1c:be:7c:e3:17:a1:21:36:9f:00:4f:5e:
         ac:ea:ac:cc:a5:58:f2:56:41:b8:9a:2b:87:3f:c3:81:f4:93:
         64:35:28:2b:11:7a:cf:5b:2d:01:20:52:1d:62:83:c5:c0:9d:
         0f:6d:88:fa:4d:e9:72:7c:e9:70:25:b3:b4:f2:b9:39:d8:65:
         e2:eb:95:60:73:ee:e0:1e:ff:73:3b:fa:0c:3b:92:cb:18:ba:
         fc:eb:72:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:10:15 2025 by rpki-client