Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/323830343a343035383a3a2f33322d3438203d3e20323635393533.roa
File:                     323830343a343035383a3a2f33322d3438203d3e20323635393533.roa (raw, json)
Hash identifier:          P1kjWEGrObzZJrYICVUDSoEdRZLmjZ79Ee/h/Dakbdo=
Subject key identifier:   7A:C3:29:6F:34:FC:29:EC:58:3F:39:9B:EC:CE:40:0A:6A:C5:C4:EB
Certificate issuer:       /CN=5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED
Certificate serial:       6F59E1F39E0EAA66349156FCF723161AEDB29B73
Authority key identifier: 5A:F9:55:DC:B3:FA:6C:6B:A7:AE:C3:D8:BC:13:72:70:86:96:B8:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/323830343a343035383a3a2f33322d3438203d3e20323635393533.roa
Signing time:             Thu 06 Mar 2025 04:01:08 +0000
ROA not before:           Thu 06 Mar 2025 03:56:08 +0000
ROA not after:            Thu 05 Mar 2026 04:01:08 +0000
asID:                     265953
IP address blocks:        2804:4058::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl
                          rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 06:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:59:e1:f3:9e:0e:aa:66:34:91:56:fc:f7:23:16:1a:ed:b2:9b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED
        Validity
            Not Before: Mar  6 03:56:08 2025 GMT
            Not After : Mar  5 04:01:08 2026 GMT
        Subject: CN=7AC3296F34FC29EC583F399BECCE400A6AC5C4EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:b8:26:f0:c8:ad:dc:1e:d9:83:36:fd:3f:
                    47:68:43:f4:84:d6:32:94:b4:1a:65:44:36:5a:d0:
                    8d:26:45:2b:cd:82:3e:79:31:36:69:fa:3b:0e:af:
                    ae:07:31:3f:c5:0e:c8:c8:ec:68:11:87:75:5a:0c:
                    30:1a:b6:d6:02:12:8f:a3:ff:70:80:4a:3b:61:b9:
                    c1:b0:d4:e6:42:e1:b5:73:33:25:d4:f7:aa:d3:8c:
                    31:6b:a9:4a:ec:f6:17:d7:34:a1:b6:d5:4f:7e:f8:
                    b6:23:cc:bb:56:77:24:99:4f:27:a9:34:fd:9e:c7:
                    2a:ba:b0:2f:2d:56:4d:e8:c3:4d:67:b6:cc:60:24:
                    58:4e:8c:e6:bd:80:f5:df:3e:26:0e:c2:fd:89:a8:
                    1e:f4:87:27:bc:0d:aa:e4:d4:72:f7:f3:de:48:e3:
                    c8:51:e8:fa:c5:49:97:89:76:e6:2a:fb:1d:96:e0:
                    23:42:fc:29:cf:61:b9:2e:b3:8f:c8:25:7c:01:8b:
                    b0:d9:8b:78:bf:69:3e:40:4a:2c:83:5e:b7:cc:63:
                    28:c7:9c:43:fd:dc:db:42:a4:ec:39:67:2b:e9:a7:
                    89:80:5f:38:d4:8d:fb:55:7d:e6:86:e4:be:9f:a7:
                    f5:77:4b:d7:e8:af:38:77:d2:89:50:15:5a:fe:b1:
                    59:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C3:29:6F:34:FC:29:EC:58:3F:39:9B:EC:CE:40:0A:6A:C5:C4:EB
            X509v3 Authority Key Identifier:
                keyid:5A:F9:55:DC:B3:FA:6C:6B:A7:AE:C3:D8:BC:13:72:70:86:96:B8:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/323830343a343035383a3a2f33322d3438203d3e20323635393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4058::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:9c:05:fe:d5:a0:df:b1:42:c0:c7:4d:ac:52:14:41:b5:23:
         63:45:0d:92:e0:50:7c:68:70:e3:49:e3:fb:72:3e:eb:ab:4a:
         b8:26:fc:95:dd:37:6d:82:2d:38:40:5a:6f:d8:fe:70:20:a8:
         38:0c:21:01:c4:f1:28:f6:2c:a7:f9:99:61:f5:af:65:12:a5:
         de:9b:b1:bb:e1:39:d1:0a:66:5e:a0:0e:2a:d7:c3:39:d3:1d:
         dd:33:f2:87:a8:aa:f2:6f:b5:fd:ad:05:55:7c:11:49:f1:dd:
         e6:0a:bf:c9:be:7c:07:e5:a5:2f:c2:a4:91:5c:cd:0e:e4:58:
         76:99:6b:d4:02:01:1d:62:cc:6c:70:b3:30:06:b3:27:24:5d:
         af:9b:7e:fe:66:20:93:26:05:49:b0:45:47:87:57:f8:50:2e:
         c7:7a:7a:f5:2a:45:fa:df:12:ef:56:9c:df:99:40:a5:cb:07:
         47:e2:d2:9d:4e:f1:96:a6:36:4b:9f:4a:4f:d7:01:4f:a5:bc:
         a9:7f:86:c3:67:d2:b7:36:2b:76:2f:8c:8f:cf:92:42:b0:8d:
         8f:20:95:05:69:f0:11:de:05:65:c2:09:37:42:25:e2:bf:73:
         95:2a:65:41:84:dd:74:e2:b4:1d:2f:f4:2c:04:bd:c2:69:a9:
         d4:af:5d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:14 2025 by rpki-client