Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/323830343a366137343a383030303a3a2f33332d3438203d3e20323730333337.roa
File:                     323830343a366137343a383030303a3a2f33332d3438203d3e20323730333337.roa (raw, json)
Hash identifier:          viAh6jLG/UlZxTY9KFPOaPkk3ngNTDF87dikBzYxT04=
Subject key identifier:   AE:13:82:8F:35:8E:06:B1:8E:AC:5B:4D:B7:A0:21:2E:28:62:10:69
Certificate issuer:       /CN=102E8D201FEFBD18DA17FA1622858BB27784D51F
Certificate serial:       2B966FFE3FF036ADB8490A07F7414F9515E079FD
Authority key identifier: 10:2E:8D:20:1F:EF:BD:18:DA:17:FA:16:22:85:8B:B2:77:84:D5:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/102E8D201FEFBD18DA17FA1622858BB27784D51F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/323830343a366137343a383030303a3a2f33332d3438203d3e20323730333337.roa
Signing time:             Thu 06 Mar 2025 14:52:21 +0000
ROA not before:           Thu 06 Mar 2025 14:47:21 +0000
ROA not after:            Thu 05 Mar 2026 14:52:21 +0000
asID:                     270337
IP address blocks:        2804:6a74:8000::/33 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/102E8D201FEFBD18DA17FA1622858BB27784D51F.crl
                          rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/102E8D201FEFBD18DA17FA1622858BB27784D51F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/102E8D201FEFBD18DA17FA1622858BB27784D51F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 02:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:96:6f:fe:3f:f0:36:ad:b8:49:0a:07:f7:41:4f:95:15:e0:79:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102E8D201FEFBD18DA17FA1622858BB27784D51F
        Validity
            Not Before: Mar  6 14:47:21 2025 GMT
            Not After : Mar  5 14:52:21 2026 GMT
        Subject: CN=AE13828F358E06B18EAC5B4DB7A0212E28621069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:76:3e:5f:dd:ce:db:80:0d:97:89:e1:30:a5:
                    2e:a2:8c:c0:14:c6:7b:14:b7:98:e7:d6:bd:1c:63:
                    e5:57:30:12:28:5f:c4:90:51:79:27:df:93:90:57:
                    c4:95:3b:18:6a:4b:17:88:3a:17:fb:df:0d:cf:5b:
                    b9:d8:a8:8e:8f:07:2a:93:62:bd:65:32:80:6e:e2:
                    f3:1b:ba:d0:c5:99:4b:8e:bd:a1:98:7e:d3:0c:14:
                    5d:1a:1d:65:64:34:83:04:e9:d7:4d:0d:66:52:b8:
                    ff:0c:65:b8:07:d6:f8:ca:bc:48:49:8d:b9:7b:2a:
                    16:b1:05:b0:6b:4a:df:7e:ec:da:06:eb:8a:ee:5d:
                    03:20:d2:79:54:0f:b7:d7:c9:08:38:bd:d9:48:a4:
                    96:ff:e3:ae:e2:43:44:8b:c7:21:af:d1:96:16:87:
                    b0:1a:32:f9:93:18:5a:34:24:c7:9a:59:cf:9a:0c:
                    57:a1:a5:89:f3:90:00:2a:c3:8f:7d:68:76:6b:b2:
                    56:46:d2:ba:6f:da:29:2f:93:03:b6:f8:c2:b3:c5:
                    aa:87:6a:79:3c:2c:90:fe:5b:1b:72:0d:2e:1b:99:
                    12:7e:ff:03:d2:1a:76:88:2d:ba:11:13:58:b3:75:
                    26:49:d2:3b:35:74:38:2f:22:1f:bc:13:29:5f:36:
                    f4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:13:82:8F:35:8E:06:B1:8E:AC:5B:4D:B7:A0:21:2E:28:62:10:69
            X509v3 Authority Key Identifier:
                keyid:10:2E:8D:20:1F:EF:BD:18:DA:17:FA:16:22:85:8B:B2:77:84:D5:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/102E8D201FEFBD18DA17FA1622858BB27784D51F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/102E8D201FEFBD18DA17FA1622858BB27784D51F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/323830343a366137343a383030303a3a2f33332d3438203d3e20323730333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a74:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b7:2e:17:cf:79:93:df:ff:11:7c:3f:63:58:bb:ed:2d:8d:b9:
         3e:27:64:74:d7:38:56:23:df:31:2e:b9:da:2b:10:15:d4:03:
         b0:fc:3d:02:71:36:58:3b:a8:f3:94:ac:ec:aa:21:5e:42:ab:
         21:10:c1:8b:c9:24:d4:9b:8c:03:9e:d4:80:c6:de:71:ad:27:
         7a:3d:e3:8f:dc:78:dc:77:54:c9:ee:71:d4:93:27:ea:6a:43:
         48:84:75:b1:50:ce:f2:ab:2c:52:94:cf:b2:35:e1:e9:6a:4c:
         29:77:3e:53:0b:e7:be:87:8b:af:3b:78:71:02:ee:c2:61:85:
         47:95:f0:1e:9d:33:2c:27:4b:da:2f:dc:4c:3a:f2:f0:a4:5c:
         bc:81:18:0e:60:31:65:30:a0:d5:47:f0:f8:36:b4:1c:cc:4a:
         b3:fc:ae:f0:a5:ee:cc:68:bb:f8:81:c0:48:fa:12:2b:4b:78:
         b8:e5:26:b0:91:66:5b:bc:bc:34:2b:5b:cc:fd:bb:42:7c:87:
         12:54:4a:44:5c:cb:99:79:cc:51:b5:5c:85:72:26:36:47:da:
         c9:a8:6c:8a:db:4d:94:e8:5e:e8:4d:48:3d:c7:5c:8e:f7:74:
         fb:e4:3f:51:59:99:89:ea:13:5f:6f:c0:65:a2:3c:77:55:50:
         85:51:a0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:34:19 2025 by rpki-client