Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a343030303a3a2f33352d3335203d3e20323634313431.roa
File:                     323830343a316530633a343030303a3a2f33352d3335203d3e20323634313431.roa (raw, json)
Hash identifier:          1bymKVvp/NI654MLms/TGZvtJQcmuumld7gnLhXiSRU=
Subject key identifier:   BF:5B:2B:63:F7:0D:4B:56:7A:A9:F2:3F:84:AF:4A:BB:D7:EB:F4:10
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       4917A53C942BCBBED452AFE159ADB063809E295A
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a343030303a3a2f33352d3335203d3e20323634313431.roa
Signing time:             Thu 02 Jan 2025 20:00:45 +0000
ROA not before:           Thu 02 Jan 2025 19:55:45 +0000
ROA not after:            Thu 01 Jan 2026 20:00:45 +0000
asID:                     264141
IP address blocks:        2804:1e0c:4000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
                          rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 18:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:17:a5:3c:94:2b:cb:be:d4:52:af:e1:59:ad:b0:63:80:9e:29:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Jan  2 19:55:45 2025 GMT
            Not After : Jan  1 20:00:45 2026 GMT
        Subject: CN=BF5B2B63F70D4B567AA9F23F84AF4ABBD7EBF410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:65:2a:9d:78:c6:a6:33:22:93:a3:40:9a:
                    ae:7b:c0:e5:fe:6e:d3:bf:8f:59:65:77:ec:3d:63:
                    14:cd:8a:96:87:2e:03:4e:16:34:76:c6:d7:d6:9b:
                    18:6e:d2:83:46:29:a8:c2:27:f9:05:9c:16:44:30:
                    ac:f5:c9:9b:6c:68:17:db:7e:62:c3:4a:ba:b5:dd:
                    83:39:46:3c:9e:f6:b4:ae:91:b9:31:fb:f0:f0:27:
                    02:d2:b6:90:8c:cb:18:ac:af:c9:65:3e:c0:18:d4:
                    c6:39:0e:e0:4e:b9:a7:0e:8d:07:8f:84:73:26:ec:
                    ec:97:2e:c4:33:00:d0:60:91:2a:97:fa:f7:50:02:
                    c8:8e:ba:98:70:6e:c3:c2:a6:da:5a:86:a7:75:41:
                    2f:01:b7:68:86:b5:6a:05:27:bd:1d:c7:bb:a7:14:
                    4c:03:1c:3a:ee:51:e8:ff:75:23:b1:58:c5:e4:b8:
                    3d:d2:4d:50:f3:25:8f:45:c2:96:49:5c:cc:16:0d:
                    64:d4:db:0b:20:31:5e:4f:d9:38:54:5a:78:8c:5f:
                    85:eb:8b:6e:d8:a6:f1:44:a0:a4:fb:f4:c6:10:db:
                    0b:26:54:e7:bf:92:e7:6b:c6:3c:ea:48:d7:74:1b:
                    22:e1:1f:b9:3e:dc:01:bb:c3:a7:8f:e2:bf:fc:bb:
                    b9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5B:2B:63:F7:0D:4B:56:7A:A9:F2:3F:84:AF:4A:BB:D7:EB:F4:10
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a343030303a3a2f33352d3335203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e0c:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         2d:ef:14:73:c7:0b:12:03:23:5d:11:af:36:63:ca:56:fc:cf:
         68:ba:e9:22:63:0f:42:54:f3:b3:35:44:8a:43:8a:7e:35:1f:
         7a:2f:6a:d0:ec:26:4e:e1:67:41:5f:02:79:c0:8c:a1:33:4b:
         f8:c7:0e:e2:c9:4c:87:bd:42:06:95:10:77:ff:02:8b:25:76:
         ba:e0:ed:5a:29:be:56:62:b1:b9:ff:86:ac:08:ef:f1:0d:90:
         c6:89:32:4c:dd:be:50:1d:e4:63:e5:c0:ee:be:aa:ea:31:65:
         64:7f:9f:9d:f0:73:a4:f0:9d:59:75:e7:2f:20:00:41:69:cb:
         51:bf:73:ed:2d:d7:18:37:ff:78:00:b3:1d:24:cb:03:53:e8:
         b6:40:d0:b4:d7:bb:e5:d0:9c:e5:14:35:1a:c6:7b:be:de:70:
         0d:56:ce:b7:07:df:ae:d6:0a:62:eb:a6:24:34:dc:d9:d7:e1:
         85:2e:7b:9e:50:1d:96:0f:87:fb:06:e5:8c:4d:a7:29:55:8d:
         bf:a5:77:f6:d3:f4:54:b9:db:9c:45:86:09:c1:68:87:45:6b:
         67:94:a8:6f:fb:d3:98:19:07:23:3f:b8:10:f2:8c:aa:a9:f8:
         5b:93:c0:39:5e:a6:42:f6:2b:7d:94:44:e9:b6:04:ab:97:33:
         3e:f1:80:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:36:10 2025 by rpki-client