Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/323830343a376363633a633030303a3a2f33342d3334203d3e20323731353139.roa
File:                     323830343a376363633a633030303a3a2f33342d3334203d3e20323731353139.roa (raw, json)
Hash identifier:          zlZIZjynokp4eeLrHU0nFnutkTExOf333NyHcj/s5YQ=
Subject key identifier:   25:99:CC:70:3D:4A:E7:F9:FD:49:64:25:94:74:5E:8B:1E:FA:AC:97
Certificate issuer:       /CN=2EF887F8235B5F7A13DECACAEC8C940A740BF480
Certificate serial:       61819CB0E3BC8264592F24300920A4CD6962512B
Authority key identifier: 2E:F8:87:F8:23:5B:5F:7A:13:DE:CA:CA:EC:8C:94:0A:74:0B:F4:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/323830343a376363633a633030303a3a2f33342d3334203d3e20323731353139.roa
Signing time:             Fri 07 Feb 2025 19:22:06 +0000
ROA not before:           Fri 07 Feb 2025 19:17:06 +0000
ROA not after:            Fri 06 Feb 2026 19:22:06 +0000
asID:                     271519
IP address blocks:        2804:7ccc:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.crl
                          rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 18:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:81:9c:b0:e3:bc:82:64:59:2f:24:30:09:20:a4:cd:69:62:51:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EF887F8235B5F7A13DECACAEC8C940A740BF480
        Validity
            Not Before: Feb  7 19:17:06 2025 GMT
            Not After : Feb  6 19:22:06 2026 GMT
        Subject: CN=2599CC703D4AE7F9FD49642594745E8B1EFAAC97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8b:dd:04:90:db:e4:f5:26:2c:91:85:d6:55:
                    f7:84:a6:a4:16:d3:e0:5e:97:46:9c:c0:96:a7:c4:
                    f6:f6:7e:10:83:e1:44:8e:0b:6d:90:86:48:28:6e:
                    20:ec:9e:6c:79:e5:12:65:ca:fd:95:fa:bf:73:72:
                    77:97:11:0b:10:f9:7e:ca:ef:bd:c3:bd:8a:4d:a8:
                    59:81:e0:d1:a1:2c:b8:90:ec:61:0c:09:56:65:70:
                    b4:f8:32:f7:5a:75:a7:e9:80:95:d4:e1:ae:bf:5f:
                    83:0d:4c:38:89:a4:cd:0e:2c:c7:64:7e:74:90:ad:
                    94:89:3e:68:a2:7a:2b:37:ad:bd:f0:e5:5f:e6:33:
                    20:0a:bd:60:03:51:00:0b:c5:df:72:95:c1:d6:5a:
                    f4:39:fe:37:70:26:de:0c:af:8f:25:b7:fc:96:26:
                    e7:3b:89:43:ea:aa:c1:81:99:ba:53:7a:e7:05:35:
                    e6:b3:e7:56:26:24:7a:ce:12:94:90:64:13:3a:4b:
                    23:69:e5:56:b6:2d:2a:d1:d1:6b:82:8f:36:89:ef:
                    42:83:0b:b1:43:95:c5:a1:3c:3b:96:4e:7d:50:19:
                    95:ad:ca:f0:7f:85:c6:d5:d8:fd:6d:75:0d:27:d7:
                    12:3e:56:7d:a1:e3:03:b5:9c:82:65:40:3b:ff:9f:
                    da:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:99:CC:70:3D:4A:E7:F9:FD:49:64:25:94:74:5E:8B:1E:FA:AC:97
            X509v3 Authority Key Identifier:
                keyid:2E:F8:87:F8:23:5B:5F:7A:13:DE:CA:CA:EC:8C:94:0A:74:0B:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/323830343a376363633a633030303a3a2f33342d3334203d3e20323731353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ccc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1d:1b:2b:82:50:fc:04:bb:eb:14:ae:d9:c8:98:bf:2f:d5:90:
         34:90:42:c1:56:f0:c2:cf:dd:c4:f9:7e:cc:da:c0:c3:4f:30:
         e2:6a:30:82:8d:1c:89:83:e4:82:f3:2f:a6:06:d7:8f:98:db:
         89:e0:97:4e:e8:b0:e3:0d:53:72:bf:0f:f5:a7:f0:6f:9b:38:
         e7:31:c7:f5:d4:b3:d0:d2:78:2d:08:cb:70:41:bd:ec:b2:d7:
         8f:e1:2c:6b:a6:a3:59:35:38:8e:aa:b9:f9:c8:7d:a7:24:dc:
         2e:e4:74:41:5a:0c:62:bc:f1:21:c5:3a:a6:02:15:65:3d:ec:
         56:90:eb:39:6a:ba:5b:48:0b:36:ed:1c:20:df:3f:05:15:e5:
         af:69:48:0b:2d:8e:7a:56:fc:c0:af:ab:4c:43:a2:f4:95:a2:
         f4:94:53:17:54:79:95:71:af:11:68:4e:9b:26:5d:f4:b1:93:
         8c:9b:b6:5f:95:00:d0:9f:ba:cb:6c:b0:d8:6a:5a:5b:20:0f:
         ce:0c:1b:a0:86:5e:47:46:fe:58:0f:59:92:4a:5e:99:25:68:
         33:f0:c4:a7:c3:7b:39:02:92:fd:94:e6:6a:44:78:a2:99:54:
         13:77:b0:17:08:60:18:cf:e3:f7:1a:4e:be:c1:d4:3b:50:b0:
         9c:c3:b5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:48 2025 by rpki-client