Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a6534633a3a2f34382d3438203d3e203533313733.roa
File:                     323830343a6534633a3a2f34382d3438203d3e203533313733.roa (raw, json)
Hash identifier:          txSCsx0NHdUZ57CnjNi7E5POcUUukN90D5LlwYqD3wI=
Subject key identifier:   F3:EC:07:A0:22:96:BD:27:9F:E9:4C:5C:65:49:A5:FF:06:0E:7C:83
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       182844F5EC8215FBBA568986C5AC86995991E335
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a6534633a3a2f34382d3438203d3e203533313733.roa
Signing time:             Thu 06 Mar 2025 02:42:05 +0000
ROA not before:           Thu 06 Mar 2025 02:37:05 +0000
ROA not after:            Thu 05 Mar 2026 02:42:05 +0000
asID:                     53173
IP address blocks:        2804:e4c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 09:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:28:44:f5:ec:82:15:fb:ba:56:89:86:c5:ac:86:99:59:91:e3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:37:05 2025 GMT
            Not After : Mar  5 02:42:05 2026 GMT
        Subject: CN=F3EC07A02296BD279FE94C5C6549A5FF060E7C83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d9:c0:97:c6:d5:64:66:75:c1:7b:bb:60:13:
                    76:e0:29:25:57:e3:0f:0d:39:06:a4:83:47:57:c9:
                    5c:b7:02:f5:b2:55:67:50:91:75:13:84:df:21:4a:
                    01:82:c5:e9:13:8d:54:80:12:9f:4e:10:38:33:d0:
                    ab:be:c8:eb:a1:76:15:59:2c:e3:71:bf:a8:9c:3f:
                    99:73:60:09:b1:a3:90:e5:f2:c4:42:55:7e:49:a8:
                    4f:35:ec:9c:12:10:dc:b3:4a:13:b3:02:f1:ec:b6:
                    6a:e5:0c:d7:ca:c9:4e:80:c8:4c:10:a1:4c:5d:ba:
                    7f:77:10:f2:56:45:fc:01:a7:12:0f:a6:c1:48:04:
                    f5:df:3f:09:ea:49:d8:a1:c4:e6:1d:59:5b:7a:46:
                    40:17:a2:f1:e0:ea:39:b7:18:5d:e8:54:0e:ef:ca:
                    79:21:5e:f5:55:0e:4b:c0:9a:5e:3f:52:fa:a2:83:
                    ba:30:17:99:5e:77:c5:74:3c:71:39:56:c3:92:2b:
                    71:a8:88:a5:7f:7f:5d:72:4f:3e:11:5f:de:b2:84:
                    2b:03:69:6d:99:da:5a:77:20:f4:4c:25:64:af:8f:
                    ec:5b:7a:bf:79:65:f6:eb:d3:1b:02:fa:24:43:ee:
                    1c:ec:25:09:27:4a:ea:c2:1d:44:9b:cb:f8:85:dc:
                    7a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EC:07:A0:22:96:BD:27:9F:E9:4C:5C:65:49:A5:FF:06:0E:7C:83
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a6534633a3a2f34382d3438203d3e203533313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e4c::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:52:c4:62:39:ba:08:02:ce:85:68:ba:18:a8:67:c0:e7:56:
         9f:65:2f:63:d9:e0:f9:6b:89:be:72:f9:ce:3d:95:4b:8c:54:
         06:0a:41:f9:43:f9:75:53:9e:44:27:49:8d:0b:aa:05:fc:61:
         7c:e5:3e:aa:7a:09:5c:71:3a:13:38:fb:b0:bb:74:72:d8:77:
         88:06:fd:7d:e7:d7:fd:34:29:82:5c:f7:6e:d1:3b:3a:6d:19:
         63:5c:a6:1a:3f:80:55:16:aa:5a:b3:3d:12:f8:18:ab:86:b1:
         ab:62:4f:5f:e1:b4:c9:9a:f1:25:8d:e6:11:f7:9d:d1:8b:b4:
         da:f1:1d:5b:35:92:68:90:9b:77:c4:24:6e:1a:00:10:e8:75:
         42:3b:5f:44:cb:61:e5:8c:01:16:b7:26:56:7d:17:c2:63:5b:
         74:26:e8:ac:07:29:5f:8a:38:7f:7e:10:fd:0f:e5:75:a0:47:
         48:89:59:be:be:fe:cc:fa:1e:32:fa:9c:ed:13:4d:f0:48:9a:
         0c:8e:e1:98:bb:2b:11:e5:e4:b7:3d:1c:be:2c:e0:81:92:35:
         fc:73:61:a1:fd:af:93:c5:1a:ad:ff:93:2c:c6:68:1f:94:eb:
         6f:d7:71:21:66:71:d8:8b:30:06:5c:1a:94:3e:2b:f6:54:bd:
         1c:00:5a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:05:43 2025 by rpki-client