Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a353030303a3a2f33362d3336203d3e20323634313431.roa
File:                     323830343a316530633a353030303a3a2f33362d3336203d3e20323634313431.roa (raw, json)
Hash identifier:          2IsVrXt8BbXUvg45Ur4Bx3opG6g89+CKr3BlDQMPGpg=
Subject key identifier:   1F:C1:36:14:2B:B3:21:77:D6:0B:06:30:36:60:1A:20:1C:CF:BC:3F
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       749452A04255F39AFDB8F84F6C0ABB4479060703
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a353030303a3a2f33362d3336203d3e20323634313431.roa
Signing time:             Thu 02 Jan 2025 20:01:44 +0000
ROA not before:           Thu 02 Jan 2025 19:56:44 +0000
ROA not after:            Thu 01 Jan 2026 20:01:44 +0000
asID:                     264141
IP address blocks:        2804:1e0c:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
                          rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 18:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:94:52:a0:42:55:f3:9a:fd:b8:f8:4f:6c:0a:bb:44:79:06:07:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Jan  2 19:56:44 2025 GMT
            Not After : Jan  1 20:01:44 2026 GMT
        Subject: CN=1FC136142BB32177D60B063036601A201CCFBC3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1b:ad:e3:26:46:db:f5:b2:b6:47:ee:4e:b6:
                    e1:78:75:21:d6:21:d3:d1:1b:09:e0:b2:f6:f2:a5:
                    c8:26:8e:78:21:43:b5:34:61:e0:49:fe:03:5d:61:
                    56:ac:df:28:9e:82:de:ed:ac:91:75:b2:78:6c:31:
                    9d:93:8b:60:ff:fc:90:04:37:93:35:85:55:42:b4:
                    cb:28:38:37:99:cc:6c:f1:c6:9f:d6:80:75:06:ef:
                    c8:0e:d7:09:2e:80:05:cc:de:a2:dc:cd:18:eb:7f:
                    aa:f7:04:9f:c5:30:0d:a1:26:a3:af:c5:5a:ef:71:
                    5c:e7:73:23:0d:ca:55:f9:e0:12:6b:dd:b9:ad:78:
                    be:37:2f:46:1d:53:de:11:e2:87:0c:1d:93:59:79:
                    6d:da:5b:b6:41:ee:9a:b3:88:b1:cd:38:a6:3c:b1:
                    da:07:1c:b1:4e:17:f4:5d:05:3e:45:49:66:e4:04:
                    8b:cc:c1:a3:de:20:3f:7e:c0:11:b2:41:62:1d:64:
                    5d:5a:2a:1f:7d:6f:62:bd:76:09:78:56:f0:90:25:
                    41:9f:f0:e9:dd:8e:e3:ae:2d:77:b7:4c:45:c3:89:
                    9b:40:68:4f:43:05:0c:3c:e1:d1:4c:05:1b:89:96:
                    88:27:8f:99:6e:9d:b3:dd:e6:51:61:66:b4:5d:36:
                    d0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C1:36:14:2B:B3:21:77:D6:0B:06:30:36:60:1A:20:1C:CF:BC:3F
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a353030303a3a2f33362d3336203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e0c:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8e:9d:5e:af:46:3f:b3:3b:ab:8c:48:b0:e0:0e:50:c6:30:59:
         30:60:3b:e3:03:26:49:72:4a:d9:ab:cc:32:0c:3b:b6:b5:97:
         f3:e7:15:c0:43:77:62:b3:b5:55:5e:53:c5:56:56:90:16:5d:
         1c:28:9e:f7:c7:41:b9:7e:6e:f4:a0:aa:68:6c:ee:10:77:19:
         25:12:ce:d0:d1:5f:f6:5c:92:d0:30:ee:e4:4b:a3:12:47:cc:
         77:16:ff:3d:f5:59:cc:9d:84:d1:5e:ab:30:9b:f2:25:03:c9:
         68:a5:09:51:85:42:6b:eb:9f:6b:da:f7:12:f5:4e:21:20:6b:
         4a:37:21:4e:00:bb:a0:37:8f:67:e6:19:0a:5d:5f:9b:1b:90:
         eb:94:c6:f1:9d:b7:ff:1d:c2:a7:87:ac:78:5d:f1:ae:03:62:
         54:81:5a:25:92:80:02:02:8f:ae:98:3b:ba:37:75:2b:14:ad:
         de:e1:1c:e4:29:c2:73:f3:ec:e9:28:18:f6:4c:07:f7:b2:19:
         91:ec:85:9a:d9:93:0e:9d:5c:15:ec:c7:56:de:32:1f:ea:6a:
         f4:33:43:ca:a1:06:59:5e:6f:12:e4:b0:12:84:4f:20:97:1e:
         0a:ae:c8:9a:d8:13:f6:61:49:42:14:74:8e:a4:56:35:a1:03:
         e4:8e:29:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:24:51 2025 by rpki-client