Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/323830343a326665303a3a2f33322d3438203d3e20323634393138.roa
File:                     323830343a326665303a3a2f33322d3438203d3e20323634393138.roa (raw, json)
Hash identifier:          QWG+MZhipO9bcbMipf+Ubhpzc0ha3D6MXWD65sRBCN8=
Subject key identifier:   9B:D2:84:C7:82:D6:D1:A5:77:A1:1A:EA:A2:F1:E9:EF:50:BB:AD:C9
Certificate issuer:       /CN=1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62
Certificate serial:       2CEB88C6B3D33C8E3EEECD32306CEBDA382F5944
Authority key identifier: 1A:8E:FF:A5:2E:4D:B3:93:A7:7E:CA:17:BC:B4:C8:A5:1C:41:3E:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/323830343a326665303a3a2f33322d3438203d3e20323634393138.roa
Signing time:             Thu 03 Apr 2025 23:11:26 +0000
ROA not before:           Thu 03 Apr 2025 23:06:26 +0000
ROA not after:            Thu 02 Apr 2026 23:11:26 +0000
asID:                     264918
IP address blocks:        2804:2fe0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.crl
                          rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 09:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:eb:88:c6:b3:d3:3c:8e:3e:ee:cd:32:30:6c:eb:da:38:2f:59:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62
        Validity
            Not Before: Apr  3 23:06:26 2025 GMT
            Not After : Apr  2 23:11:26 2026 GMT
        Subject: CN=9BD284C782D6D1A577A11AEAA2F1E9EF50BBADC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:84:a2:df:a2:46:c4:cc:67:08:38:ae:0a:
                    5f:45:d1:54:b8:bf:9a:9c:36:18:f3:14:d7:43:b6:
                    1a:ea:2d:16:e1:bc:f1:98:54:0d:51:34:00:1a:b3:
                    1a:bd:bd:fc:43:93:39:eb:fe:2f:f3:cd:4d:76:c6:
                    d1:11:e5:6a:4e:ec:18:80:4e:11:11:16:2f:cd:fa:
                    17:f1:32:c3:4d:49:a3:90:6b:d1:09:7d:7a:86:d1:
                    de:38:0a:35:68:54:a5:87:54:6f:86:48:ab:81:4f:
                    0e:8b:32:ab:c7:de:7f:02:2e:bc:b1:48:73:bd:de:
                    30:27:40:6e:a2:13:5e:6b:53:7b:ad:63:23:25:e5:
                    69:1d:14:97:c9:76:e8:45:68:ba:6c:6f:2a:de:9d:
                    02:ab:6a:46:97:a1:dd:48:76:e4:f8:b6:a1:62:a2:
                    8e:b1:b5:02:57:19:47:47:7c:3b:eb:d9:fb:29:15:
                    31:d6:51:a5:0e:5b:51:dd:a4:79:f9:74:bc:1d:bc:
                    96:03:0a:13:e8:5e:0d:ff:a8:0c:dd:15:e2:ac:17:
                    a5:2e:af:c5:5c:6a:50:04:9b:3c:70:eb:a4:60:42:
                    8f:53:4d:6e:d3:88:8b:2c:ae:42:18:fc:24:86:c3:
                    64:89:3d:ca:19:ba:5e:2c:cb:11:e6:85:57:71:2d:
                    53:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D2:84:C7:82:D6:D1:A5:77:A1:1A:EA:A2:F1:E9:EF:50:BB:AD:C9
            X509v3 Authority Key Identifier:
                keyid:1A:8E:FF:A5:2E:4D:B3:93:A7:7E:CA:17:BC:B4:C8:A5:1C:41:3E:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/323830343a326665303a3a2f33322d3438203d3e20323634393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:70:ab:f2:d2:dd:e4:56:61:a5:14:1f:12:cb:96:3e:fa:f8:
         1e:40:3d:53:ce:d3:ca:5b:8d:f5:7d:a5:9e:9a:69:c9:ef:32:
         b8:eb:c6:7d:a9:3f:06:6c:1c:c8:5c:20:87:98:c2:81:f5:74:
         f1:b3:29:93:b1:69:f8:d7:6f:50:8a:9b:59:9c:43:c6:c9:eb:
         85:82:9b:a8:88:5b:12:18:6b:a5:ab:14:5c:c5:3b:bc:0b:a2:
         bd:3a:19:d2:64:02:3c:01:84:6d:ec:7d:ee:11:82:4b:6c:ef:
         ac:f1:eb:ee:25:04:96:b7:2e:94:e7:33:e9:2d:29:58:79:be:
         e5:ba:d6:9b:55:42:92:2b:1c:fb:bb:86:14:61:1c:f4:d4:15:
         29:6a:8a:1c:b0:07:55:10:e4:5b:15:10:a6:71:cd:8c:63:0e:
         9b:81:f7:53:55:2b:87:59:d3:39:d4:ef:b4:2c:0b:39:c5:41:
         ac:57:a3:5f:bf:99:99:84:83:3b:30:eb:c2:cd:55:ae:bb:5b:
         c5:f7:6c:e6:7b:6c:b0:43:08:00:26:67:41:26:2c:43:ca:e0:
         3f:d7:0b:fc:6c:51:d8:5d:dc:d6:88:ba:74:82:23:64:76:ee:
         9c:0c:d9:f6:04:62:ed:80:95:fd:3c:40:78:a4:6b:ec:71:3c:
         05:34:33:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:23:36 2025 by rpki-client