Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a343963383a3a2f33322d3438203d3e20323637323033.roa
File:                     323830343a343963383a3a2f33322d3438203d3e20323637323033.roa (raw, json)
Hash identifier:          riXIazEIQCsxE9pMjwhHC4L4l3YKQkBwQUbyAqzzd/U=
Subject key identifier:   AA:A4:E2:BA:B8:1A:FA:C1:F4:F3:B9:B2:4F:F8:CB:51:6A:3E:44:35
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       5EF649C70C34AA2C3ABF9848DA1F9AD0CC8F3423
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a343963383a3a2f33322d3438203d3e20323637323033.roa
Signing time:             Mon 10 Feb 2025 14:32:26 +0000
ROA not before:           Mon 10 Feb 2025 14:27:26 +0000
ROA not after:            Mon 09 Feb 2026 14:32:26 +0000
asID:                     267203
IP address blocks:        2804:49c8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 19:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f6:49:c7:0c:34:aa:2c:3a:bf:98:48:da:1f:9a:d0:cc:8f:34:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Feb 10 14:27:26 2025 GMT
            Not After : Feb  9 14:32:26 2026 GMT
        Subject: CN=AAA4E2BAB81AFAC1F4F3B9B24FF8CB516A3E4435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8b:5a:0e:2d:06:c5:fe:55:9e:5c:ad:b6:a7:
                    a2:7b:62:e0:f9:3b:41:17:67:85:0a:78:19:36:04:
                    40:d2:44:99:5c:95:f5:5f:f3:ee:64:cd:c6:7c:28:
                    86:b7:fe:55:90:db:3b:9c:0e:79:29:fc:2a:4c:48:
                    73:83:fa:c9:c0:77:c9:9e:00:6e:c6:7f:e8:bc:a8:
                    0f:85:d0:b5:39:e4:52:dc:4f:da:80:3b:c2:1e:a0:
                    dd:3a:79:14:3d:ad:bf:55:e7:db:76:95:a5:97:ed:
                    80:d5:fd:ec:75:6d:15:ab:3f:52:bd:24:9d:62:1d:
                    2e:87:79:c7:ba:02:95:c2:c8:98:65:39:2d:64:c9:
                    5f:fc:41:f5:d9:b8:13:5e:0d:23:5f:5d:a4:5e:aa:
                    bf:62:66:ec:5a:6e:93:99:4d:da:ae:bc:e1:eb:cd:
                    38:94:6b:ab:81:6f:59:29:68:2c:97:dc:4b:fe:72:
                    df:16:39:be:8f:df:6a:17:3e:90:a4:bb:35:3e:52:
                    02:03:4b:a0:fd:c6:9b:7e:99:42:95:47:59:a1:f0:
                    65:2e:25:d6:ea:ee:57:77:cc:e8:d1:4b:56:ec:98:
                    e9:a7:74:c5:77:f9:6d:48:2d:cb:7b:34:ba:4e:39:
                    0e:af:c4:7d:ad:c3:0d:52:3b:81:2c:05:ec:ca:f2:
                    25:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A4:E2:BA:B8:1A:FA:C1:F4:F3:B9:B2:4F:F8:CB:51:6A:3E:44:35
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a343963383a3a2f33322d3438203d3e20323637323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:49c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:c8:2a:cb:31:d6:d6:ba:c5:b7:21:ce:b6:1f:2c:dd:b9:5b:
         82:98:00:a8:24:eb:48:55:97:1a:6c:b0:e3:90:02:7b:8d:36:
         f5:5b:3b:22:b1:da:9b:62:87:1d:a0:1d:07:94:ba:3a:fb:84:
         71:1d:38:a9:d8:ea:10:ec:47:6e:ca:68:74:5d:2b:aa:22:d6:
         19:14:35:39:53:4a:bd:eb:59:f8:c3:c7:a0:fe:ff:82:24:6e:
         80:ee:b2:4b:d6:ea:2d:10:0d:f1:25:f2:b4:92:42:1a:b7:73:
         6c:a1:3b:76:7a:e4:10:73:1b:a0:40:19:00:23:08:03:a1:7c:
         6b:2d:b9:7b:1f:4c:46:e1:28:83:a5:c6:bf:90:2f:b6:a9:c5:
         31:b0:24:64:dc:39:db:f1:00:24:d4:37:db:f9:9a:e1:bb:b5:
         ec:6e:67:72:8e:8a:8e:3d:84:0f:12:69:c6:59:e4:6c:6d:17:
         25:5e:74:be:07:c3:df:eb:88:10:ee:7e:a1:37:dc:55:fb:a6:
         53:dc:d4:0b:72:e3:9f:b3:44:3b:d4:10:09:8e:71:cd:65:57:
         61:dd:6f:b1:a0:8f:22:75:52:fa:f8:0d:c4:86:a9:9b:b6:03:
         37:30:3e:55:86:dc:14:78:62:72:af:82:a7:73:14:47:07:a7:
         24:c8:7a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 11:22:10 2025 by rpki-client