Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a313030303a3a2f33362d3336203d3e20323638303638.roa
File:                     323830343a353737633a313030303a3a2f33362d3336203d3e20323638303638.roa (raw, json)
Hash identifier:          gdX68l6ZW3RH6CXWSJwGQrWKYdgN0LyivIYKSmPFcnM=
Subject key identifier:   12:8F:95:A7:A4:0D:78:47:4B:34:6B:1D:19:C8:A7:1A:41:46:E2:CE
Certificate issuer:       /CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
Certificate serial:       27A28E5BFCEF1D69B105B51151E34B8EDE475C6E
Authority key identifier: 21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a313030303a3a2f33362d3336203d3e20323638303638.roa
Signing time:             Thu 06 Mar 2025 06:00:20 +0000
ROA not before:           Thu 06 Mar 2025 05:55:20 +0000
ROA not after:            Thu 05 Mar 2026 06:00:20 +0000
asID:                     268068
IP address blocks:        2804:577c:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl
                          rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 18:29:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a2:8e:5b:fc:ef:1d:69:b1:05:b5:11:51:e3:4b:8e:de:47:5c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
        Validity
            Not Before: Mar  6 05:55:20 2025 GMT
            Not After : Mar  5 06:00:20 2026 GMT
        Subject: CN=128F95A7A40D78474B346B1D19C8A71A4146E2CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b2:c1:4b:70:09:b4:41:54:61:7e:20:3b:0e:
                    82:41:c8:62:44:60:70:ea:b9:9f:e1:e0:af:30:d7:
                    59:77:b3:ae:53:bb:36:4f:7e:ab:22:35:df:08:a3:
                    aa:e9:c6:15:0e:dd:32:29:f8:51:b6:a8:0a:e9:7d:
                    78:ee:2e:49:e3:0a:f8:88:ef:ee:01:98:04:c1:c1:
                    93:d0:c6:fa:6d:7a:32:90:a0:86:06:d4:fc:48:92:
                    a1:3c:37:d7:b9:b3:af:8a:dd:4a:8f:9f:e3:18:68:
                    9a:77:e0:4f:4f:d1:56:7e:c3:fb:b9:cf:14:73:1a:
                    fd:02:98:b6:3b:7e:be:e6:3b:0e:e4:23:12:ec:65:
                    b4:3b:1a:c1:3c:b3:e0:36:0d:ff:f1:8d:09:91:95:
                    e2:06:31:fd:67:97:f6:4f:7c:fa:78:74:5d:d0:e0:
                    ed:e8:51:43:5b:67:02:6a:fe:55:f9:e4:fa:9e:0f:
                    db:c6:21:7f:e0:3e:6a:c6:5f:95:b5:dc:73:14:b3:
                    c4:67:be:db:94:66:3e:72:74:41:24:f8:41:98:0c:
                    af:12:83:57:2e:ca:bd:01:0d:b4:44:e7:12:65:af:
                    59:58:11:f2:e0:4a:06:a0:f6:1e:a4:52:d7:b8:f8:
                    2f:7d:55:25:5d:ec:ad:58:d6:35:9a:32:66:e6:5b:
                    11:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8F:95:A7:A4:0D:78:47:4B:34:6B:1D:19:C8:A7:1A:41:46:E2:CE
            X509v3 Authority Key Identifier:
                keyid:21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a313030303a3a2f33362d3336203d3e20323638303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:577c:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b9:01:5d:74:c4:e7:38:94:22:87:8e:ea:39:39:5a:33:f6:1c:
         70:83:21:e0:3e:42:d2:e8:10:b6:05:2b:0d:87:19:ff:61:2f:
         21:dd:be:1d:87:a6:34:99:4d:9b:64:b7:fe:43:e6:74:97:53:
         d2:3f:da:8b:ef:84:2b:3b:ba:11:6d:a7:27:af:e3:b0:f0:8a:
         53:b4:97:cd:90:2d:12:89:0b:4a:b7:2d:57:b3:87:b6:98:97:
         80:20:9d:a9:58:46:b0:95:2f:cf:e2:81:d2:8c:8b:a3:a8:92:
         bb:c9:e6:06:a7:4e:04:a5:b2:bd:d9:2f:17:50:fe:83:10:52:
         1e:16:d1:44:c2:6f:05:90:86:9b:13:87:a1:4f:1e:58:2b:70:
         94:bf:fd:91:7f:a3:42:37:8c:5e:97:bd:fb:a6:53:34:92:33:
         bb:a1:32:90:0f:c5:9d:24:dd:8d:0b:ef:25:7a:ea:90:56:28:
         83:33:54:f3:94:16:1d:87:c5:81:e4:4b:05:c6:8b:5d:a0:3b:
         83:15:15:70:c9:d8:37:3f:56:45:af:a1:96:c3:07:8f:03:f0:
         42:98:01:57:52:a0:9e:d3:85:61:40:cf:80:fa:86:33:0c:cb:
         45:01:27:1b:54:7e:74:54:65:11:89:14:97:6a:5d:bd:1b:3d:
         7a:97:0d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:15:04 2025 by rpki-client