Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a613830303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a613830303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          1asK4FFH8nXPCkg43IWc2R4JhJi66qEHsEetqvI2zaQ=
Subject key identifier:   19:39:18:9A:A4:98:10:F4:D2:EA:2B:66:8C:C0:A4:5F:FA:EE:49:B4
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       5E02F4D43014CDBCE802F5CC054E4D73C378A42A
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a613830303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Mon 17 Mar 2025 17:57:16 +0000
ROA not before:           Mon 17 Mar 2025 17:52:16 +0000
ROA not after:            Mon 16 Mar 2026 17:57:16 +0000
asID:                     263629
IP address blocks:        2804:104c:a800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 22:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:02:f4:d4:30:14:cd:bc:e8:02:f5:cc:05:4e:4d:73:c3:78:a4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Mar 17 17:52:16 2025 GMT
            Not After : Mar 16 17:57:16 2026 GMT
        Subject: CN=1939189AA49810F4D2EA2B668CC0A45FFAEE49B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a6:24:19:f4:b9:32:bd:26:44:aa:97:a9:8b:
                    e4:8b:85:58:eb:e4:40:a2:57:67:28:4f:7a:4f:ba:
                    a3:29:d7:b9:62:6b:29:96:0a:6d:80:29:df:4d:a6:
                    66:77:a3:e3:93:2e:b6:dd:cb:56:73:84:2c:58:d1:
                    4f:a0:0b:d7:07:bd:a1:16:50:e7:78:3e:04:a9:97:
                    fb:28:b2:a3:8e:0d:4f:6b:dd:67:6b:87:ea:9c:97:
                    69:4e:83:a7:39:5c:ca:1f:d8:a7:59:fd:9a:b9:08:
                    71:5c:3a:e9:5e:77:37:21:fc:12:f5:1b:24:7d:7e:
                    be:d6:b8:15:ed:1f:08:56:f0:5a:7e:ff:1b:c9:e4:
                    87:7d:02:af:27:14:53:6b:19:6f:dc:1c:5d:a3:8a:
                    5d:46:79:a6:89:31:4d:58:05:7c:6d:85:ef:13:4f:
                    0e:94:4b:0f:c1:4b:3f:92:55:b4:d8:d6:b4:15:cf:
                    e7:8d:31:71:29:b7:99:0d:f4:ac:87:83:49:8f:52:
                    a2:ed:5e:11:18:c4:3d:1c:12:41:26:d8:90:5c:3e:
                    a1:3d:d5:de:d9:b7:87:03:07:6b:44:ac:a5:f5:b7:
                    f9:a1:06:52:cb:57:8b:2a:46:23:f3:48:8c:07:95:
                    6e:00:72:c4:32:7f:cf:03:9b:dd:25:f6:b9:e0:bd:
                    1f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:39:18:9A:A4:98:10:F4:D2:EA:2B:66:8C:C0:A4:5F:FA:EE:49:B4
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a613830303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:a800::/40

    Signature Algorithm: sha256WithRSAEncryption
         16:00:00:17:ec:82:30:7f:15:8f:7c:f4:6f:da:6c:17:39:20:
         f0:91:03:08:17:0b:05:5b:52:80:ba:c4:3f:7b:70:df:6a:08:
         7a:6d:76:41:7a:a1:73:56:b9:51:b4:7b:88:91:cd:59:e5:79:
         d9:8a:6f:33:17:48:c5:c0:57:90:6b:ff:82:e9:db:cc:5f:84:
         05:c1:0b:ec:04:ad:80:53:c1:59:11:36:af:6b:05:45:ac:11:
         cc:2f:95:30:bf:c8:b6:73:96:9f:2e:8e:79:c2:6d:a5:7e:b5:
         ef:e6:45:59:4a:82:09:b5:b6:d7:9d:aa:dd:a8:84:0d:cb:01:
         0d:73:6e:c3:07:cb:e2:85:c1:d4:0c:9e:f5:7f:37:eb:fa:2c:
         c9:74:37:fd:1b:85:47:04:9a:c3:7b:7f:4d:45:7e:64:17:5d:
         0a:46:3c:14:28:5a:1b:0e:04:fe:78:fb:27:9d:66:fc:12:95:
         41:0a:7d:7b:33:50:64:ee:f1:a7:a4:ba:c2:82:fd:16:84:f0:
         57:ea:f5:cf:cc:20:be:db:e9:8e:bc:82:98:c6:3d:aa:f1:8e:
         f1:0b:c5:81:aa:84:2b:51:ef:54:20:bc:23:49:44:e9:5f:3a:
         ca:14:c3:0f:5c:cc:dd:32:32:1b:34:ed:99:4d:9a:21:50:6c:
         fb:36:96:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:21 2025 by rpki-client