Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a6534633a363166303a3a2f34342d3434203d3e203533313733.roa
File:                     323830343a6534633a363166303a3a2f34342d3434203d3e203533313733.roa (raw, json)
Hash identifier:          WnwvTqia0iIZTBIXmWRpspLGjpCVYproiKCSSitn0B8=
Subject key identifier:   8D:8A:2F:8D:8E:B2:E9:31:7A:A8:9A:53:D8:F5:BC:70:35:A2:69:20
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       3E00F9B16522EED171E47D04B8EC226028060BE4
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a6534633a363166303a3a2f34342d3434203d3e203533313733.roa
Signing time:             Thu 06 Mar 2025 02:41:54 +0000
ROA not before:           Thu 06 Mar 2025 02:36:54 +0000
ROA not after:            Thu 05 Mar 2026 02:41:54 +0000
asID:                     53173
IP address blocks:        2804:e4c:61f0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 23:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:00:f9:b1:65:22:ee:d1:71:e4:7d:04:b8:ec:22:60:28:06:0b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:54 2025 GMT
            Not After : Mar  5 02:41:54 2026 GMT
        Subject: CN=8D8A2F8D8EB2E9317AA89A53D8F5BC7035A26920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:df:05:f2:92:c6:c2:9d:02:a8:c2:04:01:dc:
                    9d:99:4d:2e:a9:bf:c4:13:f2:8f:e7:11:73:e4:09:
                    39:07:64:80:71:e8:58:67:58:97:8e:41:ec:37:0b:
                    a3:84:65:3a:1c:00:fc:cc:05:c9:33:e7:57:d7:08:
                    2e:00:b5:c2:86:c7:a6:89:13:fd:27:15:42:6b:cb:
                    c1:91:ac:40:26:e6:7b:67:a0:62:2b:3d:2a:4c:23:
                    92:56:e8:47:4d:fe:b5:50:18:82:10:48:58:e1:ae:
                    8d:c5:22:3e:97:ef:b9:4d:6c:04:09:b7:15:eb:cd:
                    1e:ec:22:90:75:a9:22:6b:95:f3:e8:70:a5:fc:f0:
                    b1:df:a7:6b:ba:29:0d:ee:e7:18:f1:ef:62:c8:3f:
                    34:8e:fb:7a:d7:f0:32:f4:d9:3d:9e:33:c1:8a:4a:
                    d9:51:22:6c:59:b6:d5:43:69:00:3d:f1:4c:79:7e:
                    08:ca:f1:54:50:42:64:88:a2:02:92:47:66:74:a9:
                    54:8f:dd:c7:c5:ce:f6:b6:59:33:6c:16:4f:a4:8f:
                    26:14:cb:e2:66:9e:35:fb:77:53:73:70:bc:59:99:
                    fb:01:d6:3b:29:b8:4a:04:3c:a5:79:40:3a:3b:f8:
                    fc:66:1e:e4:8e:a9:d7:a7:2a:5c:c7:38:18:07:68:
                    19:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8A:2F:8D:8E:B2:E9:31:7A:A8:9A:53:D8:F5:BC:70:35:A2:69:20
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a6534633a363166303a3a2f34342d3434203d3e203533313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e4c:61f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         31:5c:4a:60:31:ad:6d:a6:f5:82:4c:ff:64:7e:a5:2c:31:78:
         91:61:9a:b7:30:1f:93:08:f1:ac:d6:e6:95:d5:5d:17:1f:af:
         f2:86:53:16:f9:dd:0d:88:c6:14:00:01:cc:a4:eb:d1:3f:0d:
         25:5e:e5:e4:69:f2:4a:77:ea:1e:e7:cd:47:7a:b3:b2:ca:83:
         39:e6:3f:f7:45:4c:50:00:f2:c1:8f:3f:e0:54:5a:9f:d6:fd:
         e0:c6:41:ce:e4:0f:2a:6e:3d:73:6c:61:44:b5:4e:79:dc:a5:
         08:f3:ea:97:94:a9:90:7b:7d:96:20:62:7a:db:e4:7f:fd:bd:
         c0:3b:fc:3a:1f:43:ba:34:70:37:86:a4:d1:89:d5:e9:a8:35:
         d8:f0:32:53:bb:78:09:b3:63:cd:2f:e3:e5:3f:51:29:ca:66:
         21:7f:0e:8b:fd:92:3e:50:7e:18:29:42:3c:82:f2:9b:cd:5b:
         dc:1f:5b:bb:6b:af:7d:95:e7:65:c5:a1:ac:e6:92:11:f0:a4:
         5f:80:6d:33:8e:8c:7d:65:b6:e4:8d:40:67:2e:23:d5:01:d8:
         ec:10:1a:bf:a3:1f:40:b2:ef:70:11:df:a1:d8:2e:fb:79:16:
         ae:06:96:b2:20:59:98:7b:db:c0:e7:14:a6:4f:2d:8b:38:34:
         c8:09:8f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:00:56 2025 by rpki-client