Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/323830343a333362343a3a2f33322d313238203d3e20323635343132.roa
File:                     323830343a333362343a3a2f33322d313238203d3e20323635343132.roa (raw, json)
Hash identifier:          AJQgxBmRnQbfSkxwRszHZjBQnovzHI7oLL0Od+n3aIY=
Subject key identifier:   DD:0E:4B:F3:A0:46:36:92:31:B7:31:73:C0:5C:EB:E8:5D:8F:51:2B
Certificate issuer:       /CN=F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6
Certificate serial:       2C62875FCCA48A87D6E0BE2030D21973E54DF847
Authority key identifier: F5:32:C3:FA:CC:86:AB:1E:10:18:2A:73:1C:EE:5C:6E:32:C7:B3:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/323830343a333362343a3a2f33322d313238203d3e20323635343132.roa
Signing time:             Mon 26 May 2025 18:45:15 +0000
ROA not before:           Mon 26 May 2025 18:40:15 +0000
ROA not after:            Mon 25 May 2026 18:45:15 +0000
asID:                     265412
IP address blocks:        2804:33b4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6.crl
                          rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 01:51:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:62:87:5f:cc:a4:8a:87:d6:e0:be:20:30:d2:19:73:e5:4d:f8:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6
        Validity
            Not Before: May 26 18:40:15 2025 GMT
            Not After : May 25 18:45:15 2026 GMT
        Subject: CN=DD0E4BF3A046369231B73173C05CEBE85D8F512B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e4:9e:8f:ca:4b:7a:d0:3f:a4:86:58:06:bf:
                    4e:fd:6e:b3:52:48:e4:62:a2:be:36:25:35:db:65:
                    3d:5b:c6:7b:2f:82:ac:86:91:34:da:27:44:bb:78:
                    9d:18:2e:7f:96:4f:40:1b:91:e9:56:f8:99:4e:61:
                    f1:31:8b:b1:f2:74:c8:c9:ed:c4:5c:53:26:f2:2f:
                    08:52:4a:fd:c9:eb:58:c9:6c:84:7d:cf:94:29:9e:
                    c1:26:d9:67:b8:ce:1b:3c:7c:e8:c9:4b:a7:5e:65:
                    47:ec:85:ed:a3:5a:4f:59:9e:d8:de:5c:f2:c1:f2:
                    e9:74:1f:1e:e5:07:07:4a:00:b0:04:a8:53:8f:a1:
                    6e:df:30:a9:60:38:c5:3c:a1:e1:fb:da:f7:37:6a:
                    f4:03:83:a6:0f:e9:d0:b4:d0:9f:95:3e:e5:29:d4:
                    fa:99:4c:15:2e:48:01:e6:3f:94:fd:6d:d0:c3:73:
                    6a:f3:22:ed:28:ad:f8:95:80:d7:dd:98:f5:ce:fa:
                    b1:e9:c9:bb:cc:a0:25:01:1e:c3:bf:81:64:d7:79:
                    c6:54:b5:82:3e:d8:71:34:e5:08:4b:7d:a9:1e:d7:
                    67:40:ff:2d:13:32:76:0f:b7:d8:91:96:d5:90:83:
                    18:11:76:f1:e3:71:2b:30:7a:1f:ee:71:93:87:cb:
                    54:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0E:4B:F3:A0:46:36:92:31:B7:31:73:C0:5C:EB:E8:5D:8F:51:2B
            X509v3 Authority Key Identifier:
                keyid:F5:32:C3:FA:CC:86:AB:1E:10:18:2A:73:1C:EE:5C:6E:32:C7:B3:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/323830343a333362343a3a2f33322d313238203d3e20323635343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:39:3a:a4:32:5c:96:36:76:ae:cb:99:a3:97:78:f8:6c:02:
         0c:07:d3:18:9f:2d:ee:bd:dd:ee:79:29:6a:a1:f1:ce:7d:1d:
         dc:1a:2f:a4:aa:3d:db:99:c8:94:05:8c:b0:12:52:47:64:2f:
         62:99:9a:6b:a2:ef:ff:29:66:eb:99:0b:38:11:34:31:39:0b:
         e9:a0:95:ff:f0:97:91:a6:e6:95:0f:d0:ea:35:8a:da:69:17:
         1e:2a:46:88:23:cd:d6:74:46:b3:d2:7d:c0:a7:a4:92:dd:4e:
         20:04:20:c4:1c:d6:04:5b:cc:1c:26:c7:ea:0d:75:5f:6d:fe:
         0d:f3:31:cb:c4:24:ab:b8:8e:ae:49:e7:e8:86:20:13:f8:07:
         84:7f:fb:aa:25:49:3d:e3:c9:de:5c:16:8a:95:ac:f8:f0:ed:
         a0:19:b4:f2:f8:46:14:32:35:74:29:85:e3:6e:f5:0b:f0:bf:
         c8:be:7d:3b:05:81:4f:35:b9:4c:a0:22:44:62:c2:ea:6d:fc:
         aa:53:df:c9:2d:51:69:04:9b:e9:88:10:d6:67:72:32:6a:41:
         31:c5:bc:1a:9e:75:4b:13:05:b7:d3:7d:60:4b:2c:3f:57:22:
         77:05:9a:fa:f9:e3:5a:08:a5:46:c3:9a:96:5d:e7:74:b5:8d:
         d5:ed:cb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 05:31:47 2025 by rpki-client