Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/323830343a3736383a3a2f34382d3438203d3e203532393737.roa
File:                     323830343a3736383a3a2f34382d3438203d3e203532393737.roa (raw, json)
Hash identifier:          CEU/Ogl7NK9JgZNyM1CBlblAwfZ0TZuRrFvr4Z1Ie8w=
Subject key identifier:   6D:AF:60:8E:AA:2E:EE:F2:BB:B1:12:93:B7:1C:C2:59:D5:43:A3:A6
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       55659E0DEFD46FEDA305C50EF230253DD065D8A1
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/323830343a3736383a3a2f34382d3438203d3e203532393737.roa
Signing time:             Wed 05 Mar 2025 19:00:06 +0000
ROA not before:           Wed 05 Mar 2025 18:55:06 +0000
ROA not after:            Wed 04 Mar 2026 19:00:06 +0000
asID:                     52977
IP address blocks:        2804:768::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 06:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:65:9e:0d:ef:d4:6f:ed:a3:05:c5:0e:f2:30:25:3d:d0:65:d8:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Mar  5 18:55:06 2025 GMT
            Not After : Mar  4 19:00:06 2026 GMT
        Subject: CN=6DAF608EAA2EEEF2BBB11293B71CC259D543A3A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b1:2b:ea:81:06:d0:fb:3f:50:1f:a5:9e:fc:
                    6f:d4:64:1d:6a:a2:a9:6d:bc:5e:25:55:b0:68:f0:
                    69:85:d1:38:f6:31:25:70:cc:ad:a0:f7:26:e7:e9:
                    9d:91:6d:8e:a0:57:5b:b6:7d:71:28:62:00:c8:39:
                    0e:90:19:97:c8:c5:54:78:ee:0e:70:0b:9a:68:d2:
                    ac:f4:7c:15:fd:8a:99:7d:5c:49:2b:88:2b:18:87:
                    33:7b:16:6b:5e:f3:7e:4c:bf:6e:78:d0:0d:30:ba:
                    ee:c9:38:2d:60:bb:79:09:2e:4f:ef:87:7e:60:d7:
                    35:09:24:34:38:dc:68:4e:be:f4:c3:fa:57:99:c2:
                    50:25:f7:d3:d1:1c:63:ee:5f:1d:c0:c2:ba:9a:82:
                    b6:07:03:35:5e:48:b9:e4:32:9d:ee:d4:d7:ab:09:
                    14:7d:a8:ae:f0:c0:16:49:db:26:dd:d8:21:54:b9:
                    bc:3b:20:bf:db:2a:80:c5:8a:32:ce:7a:a2:40:fa:
                    31:f0:ae:ad:61:40:24:73:75:02:9f:38:43:cb:cd:
                    84:db:e1:d7:98:4b:72:55:f5:eb:98:82:69:0b:e9:
                    75:8d:28:b0:c5:01:cd:57:be:89:0b:19:52:4c:20:
                    4e:0f:9f:d2:5a:17:6b:b7:47:e1:bc:e5:4b:4c:74:
                    aa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AF:60:8E:AA:2E:EE:F2:BB:B1:12:93:B7:1C:C2:59:D5:43:A3:A6
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/323830343a3736383a3a2f34382d3438203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:768::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:13:87:5c:b0:90:91:15:85:6e:2e:8c:59:e3:a6:ba:70:0f:
         e4:3c:f7:e3:67:05:f0:93:36:cb:01:9d:d4:b7:44:b6:0b:48:
         51:5a:a2:4a:7a:8f:53:9e:cb:2a:33:2a:12:73:29:74:73:8b:
         cf:3d:40:0e:c5:f9:4d:1f:32:3d:ad:ba:11:c5:77:88:a3:1a:
         88:f1:ee:a3:10:32:d1:6c:60:f6:29:33:da:01:26:b7:bc:19:
         cb:c0:b1:6d:bc:2b:18:c0:08:ac:ca:64:81:11:52:89:51:8c:
         87:7e:1c:a3:53:c7:ba:ed:ed:ff:03:91:1b:3e:1a:37:b9:60:
         7c:96:ee:1b:cc:1b:17:c5:4c:c7:27:f9:2b:c3:8b:97:33:e1:
         2d:ef:d5:ff:b6:7d:96:88:5d:21:72:49:fe:5c:6a:6b:ca:66:
         d9:b8:e4:46:d8:13:49:34:54:be:44:a3:63:b5:63:42:80:5b:
         f7:88:a2:29:5a:98:18:f8:3c:1e:5e:f8:ed:e6:02:8a:9c:10:
         81:56:86:4c:8f:67:81:1d:7b:bb:ac:bb:7b:11:fa:53:ec:a3:
         41:78:9c:f8:56:7c:a2:86:ab:64:3d:10:5a:e2:2a:53:25:91:
         08:ba:82:7e:f5:8a:86:5d:ff:3d:81:86:98:d1:52:17:c6:2f:
         ea:f1:59:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:59:09 2025 by rpki-client