Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AcM4J3E3vGyd8cxGNVdyazgfAMqUek44WDbdoG1Dkvqs/0/323830343a313835303a3a2f33322d3438203d3e203631393239.roa
File:                     323830343a313835303a3a2f33322d3438203d3e203631393239.roa (raw, json)
Hash identifier:          Szt9ZV9sRPtQOQKbjdxPwb0YCI6xuqfixIhwwLaGIb4=
Subject key identifier:   C0:91:39:53:48:52:4F:7B:EE:92:F7:6A:C0:C5:23:20:77:49:A9:15
Certificate issuer:       /CN=A39AB07F573D04E5845A8A1E723EAE291A21091A
Certificate serial:       63229B016320E47B55EA070D73831929EA530B8E
Authority key identifier: A3:9A:B0:7F:57:3D:04:E5:84:5A:8A:1E:72:3E:AE:29:1A:21:09:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A39AB07F573D04E5845A8A1E723EAE291A21091A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcM4J3E3vGyd8cxGNVdyazgfAMqUek44WDbdoG1Dkvqs/0/323830343a313835303a3a2f33322d3438203d3e203631393239.roa
Signing time:             Thu 16 Jan 2025 21:29:18 +0000
ROA not before:           Thu 16 Jan 2025 21:24:18 +0000
ROA not after:            Thu 15 Jan 2026 21:29:18 +0000
asID:                     61929
IP address blocks:        2804:1850::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AcM4J3E3vGyd8cxGNVdyazgfAMqUek44WDbdoG1Dkvqs/0/A39AB07F573D04E5845A8A1E723EAE291A21091A.crl
                          rsync://rpki-repo.registro.br/repo/AcM4J3E3vGyd8cxGNVdyazgfAMqUek44WDbdoG1Dkvqs/0/A39AB07F573D04E5845A8A1E723EAE291A21091A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A39AB07F573D04E5845A8A1E723EAE291A21091A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:22:9b:01:63:20:e4:7b:55:ea:07:0d:73:83:19:29:ea:53:0b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A39AB07F573D04E5845A8A1E723EAE291A21091A
        Validity
            Not Before: Jan 16 21:24:18 2025 GMT
            Not After : Jan 15 21:29:18 2026 GMT
        Subject: CN=C091395348524F7BEE92F76AC0C523207749A915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:68:5b:e9:6e:f0:f9:e0:c1:77:9e:55:2b:ea:
                    48:21:35:1f:7b:28:d1:0c:f0:d9:1e:fd:af:9c:5f:
                    95:05:2c:75:24:7c:d0:dd:a6:50:b6:5d:d2:ad:58:
                    71:98:e8:9d:69:5f:98:a9:a2:9e:95:7c:15:28:a7:
                    c9:5c:c9:f5:3a:32:aa:ee:e0:8b:de:30:d3:0c:be:
                    98:97:ca:fa:e6:24:5a:48:e5:a9:59:47:a7:fe:20:
                    dc:f7:0e:a6:68:a9:fd:10:85:c3:d4:9d:59:8e:82:
                    89:b7:27:25:99:da:8b:57:22:d1:e8:51:85:8e:c8:
                    6e:c1:80:15:24:57:60:92:66:0c:55:55:53:81:f9:
                    4a:e1:88:92:1e:3c:90:e2:7b:d3:51:af:21:31:c8:
                    43:7c:2a:9e:23:43:bc:e4:3a:bc:36:cb:14:1e:c1:
                    0f:fe:47:75:71:bd:22:88:e7:96:65:bc:75:c7:6d:
                    af:a9:ff:3b:3f:cf:16:96:5f:3b:b9:e1:ab:93:f6:
                    3a:3a:67:0f:5d:66:3b:fb:eb:bf:cb:13:ce:bf:5c:
                    d8:c1:e4:6b:1a:2e:c4:d2:a0:49:a5:76:c0:9a:a6:
                    f2:09:df:df:41:d4:38:6a:00:62:87:c8:e3:b6:87:
                    f2:5a:3a:ae:6e:04:1a:2e:79:6e:4e:c6:4c:29:4e:
                    41:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:91:39:53:48:52:4F:7B:EE:92:F7:6A:C0:C5:23:20:77:49:A9:15
            X509v3 Authority Key Identifier:
                keyid:A3:9A:B0:7F:57:3D:04:E5:84:5A:8A:1E:72:3E:AE:29:1A:21:09:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcM4J3E3vGyd8cxGNVdyazgfAMqUek44WDbdoG1Dkvqs/0/A39AB07F573D04E5845A8A1E723EAE291A21091A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A39AB07F573D04E5845A8A1E723EAE291A21091A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcM4J3E3vGyd8cxGNVdyazgfAMqUek44WDbdoG1Dkvqs/0/323830343a313835303a3a2f33322d3438203d3e203631393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1850::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:93:b2:b4:26:36:de:a1:b5:9f:4c:ef:57:f4:83:40:08:b5:
         bd:ab:3a:48:a2:ac:cc:03:b5:17:33:cc:ba:dd:ed:13:e5:cf:
         45:af:1f:70:bd:54:fa:ed:f6:b2:9b:c0:82:f0:22:50:27:19:
         c9:16:80:d2:fa:6d:99:ce:36:0b:de:62:9e:3e:21:59:0e:9f:
         d7:c0:95:ce:dd:3c:c2:c3:40:2f:4a:b6:53:60:f5:4c:1c:72:
         3d:b7:a1:92:4e:79:6b:74:92:34:dd:cc:60:37:c2:3e:04:d6:
         22:71:b4:95:bc:5f:b1:ed:37:28:41:d6:ff:f2:8b:0d:35:80:
         b8:f6:74:49:8a:c0:c5:60:22:66:b2:9e:78:33:2b:0d:78:0e:
         c3:75:ee:f6:f4:f4:1f:70:d9:ea:2d:1c:c4:57:bd:0f:37:d9:
         58:82:e2:36:af:2d:2e:5e:5d:18:06:82:ad:1d:98:39:6b:e4:
         eb:f0:c4:a1:c9:57:31:4a:c5:9a:78:c0:56:64:9b:8c:e9:45:
         28:6c:fe:6d:79:5b:89:40:9a:f5:40:9c:33:3e:43:39:82:af:
         55:21:6e:b0:35:99:72:38:b9:75:f9:66:67:78:cc:a2:0a:2a:
         a6:11:8e:c5:b9:85:56:92:9d:59:67:da:67:0a:94:01:49:7d:
         24:11:a2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:32 2025 by rpki-client