Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/323830343a333734303a3a2f33322d313238203d3e20323636333939.roa
File:                     323830343a333734303a3a2f33322d313238203d3e20323636333939.roa (raw, json)
Hash identifier:          C8ISb5DhwyJMyM5Ta/Dllcyy8gCkRRuhoyVjP8z/AJs=
Subject key identifier:   3E:F6:C2:80:37:86:4E:34:92:26:EA:3A:7B:40:36:B3:9A:A9:2F:C7
Certificate issuer:       /CN=00052346073E1897B04F80DC763E310E1A83518A
Certificate serial:       4CADFF0B32E157BB381D32751AC3A0D3BB240145
Authority key identifier: 00:05:23:46:07:3E:18:97:B0:4F:80:DC:76:3E:31:0E:1A:83:51:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00052346073E1897B04F80DC763E310E1A83518A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/323830343a333734303a3a2f33322d313238203d3e20323636333939.roa
Signing time:             Tue 11 Mar 2025 19:59:46 +0000
ROA not before:           Tue 11 Mar 2025 19:54:46 +0000
ROA not after:            Tue 10 Mar 2026 19:59:46 +0000
asID:                     266399
IP address blocks:        2804:3740::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/00052346073E1897B04F80DC763E310E1A83518A.crl
                          rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/00052346073E1897B04F80DC763E310E1A83518A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00052346073E1897B04F80DC763E310E1A83518A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Mar 2025 03:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ad:ff:0b:32:e1:57:bb:38:1d:32:75:1a:c3:a0:d3:bb:24:01:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00052346073E1897B04F80DC763E310E1A83518A
        Validity
            Not Before: Mar 11 19:54:46 2025 GMT
            Not After : Mar 10 19:59:46 2026 GMT
        Subject: CN=3EF6C28037864E349226EA3A7B4036B39AA92FC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:83:c0:28:44:f6:ea:cd:d5:eb:62:7c:46:a1:
                    55:93:ef:dd:1c:f6:79:c4:34:02:24:38:03:84:f7:
                    1a:ed:12:bc:6b:a1:54:64:a7:40:cb:f2:26:d2:8e:
                    6b:c8:08:e1:cb:81:6c:b0:82:31:5f:6c:96:a6:ce:
                    0a:d3:7b:d7:1e:27:89:8e:dd:5c:ba:78:49:bb:5c:
                    16:47:f9:63:c1:68:bb:0c:98:66:dd:af:a7:ab:4d:
                    91:63:b1:f0:d8:48:4a:73:d2:4e:93:a5:52:26:5c:
                    27:fb:b0:03:a1:26:39:07:09:12:3c:8c:61:f7:28:
                    3d:5f:ba:61:6a:62:94:28:c8:63:16:77:34:1c:03:
                    d1:6f:24:c6:0b:ca:72:8e:db:27:c2:7b:22:0a:6c:
                    0b:b7:89:d3:eb:0d:00:99:fd:7d:09:5f:d3:60:e6:
                    af:b1:16:6b:35:ed:70:c5:12:5f:23:31:05:1e:f9:
                    f1:be:8d:70:5a:9f:0b:b9:fb:ba:3b:4b:64:2d:63:
                    53:45:ef:c7:9a:dd:5f:3b:9e:23:86:49:48:24:67:
                    33:c8:9b:46:bf:cf:60:50:2d:0b:14:8f:c8:62:06:
                    d0:ef:6c:33:a9:69:0f:d6:c7:73:a1:a1:23:ec:c7:
                    3a:e2:23:76:ad:36:fd:ba:d3:bf:54:cf:5e:ce:80:
                    dc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F6:C2:80:37:86:4E:34:92:26:EA:3A:7B:40:36:B3:9A:A9:2F:C7
            X509v3 Authority Key Identifier:
                keyid:00:05:23:46:07:3E:18:97:B0:4F:80:DC:76:3E:31:0E:1A:83:51:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/00052346073E1897B04F80DC763E310E1A83518A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00052346073E1897B04F80DC763E310E1A83518A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/323830343a333734303a3a2f33322d313238203d3e20323636333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3740::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:9b:22:6d:ed:02:ee:76:89:6b:33:d0:b5:05:02:5a:5f:44:
         72:f0:05:e0:84:26:42:af:92:13:a9:a3:27:03:60:68:3c:ac:
         00:eb:72:80:fe:8d:1a:e0:17:5f:9f:58:db:e1:2c:5d:c0:a9:
         17:e0:8a:23:3a:a9:85:16:d0:e3:ba:c9:d2:e9:55:ae:8f:16:
         bc:df:51:f2:79:59:7b:43:d0:84:c8:6d:bd:c7:4d:7b:57:2b:
         af:d7:10:96:cc:9e:46:1b:5d:2d:56:66:2c:ea:75:5f:7b:0a:
         77:db:25:ad:a8:2f:fb:0c:33:3d:c7:da:0d:e5:b1:ea:39:fb:
         69:be:86:0d:00:f1:d4:75:fb:15:bb:2f:12:b4:ec:df:62:2a:
         ad:81:40:eb:cb:02:84:0e:8b:ac:37:83:85:2d:91:7f:fb:39:
         c5:b4:aa:39:1e:6d:da:1d:f2:34:89:f2:c8:d1:d0:81:8e:3c:
         57:61:06:2f:7e:0c:a8:3c:e7:36:c9:d8:45:6a:ff:31:7a:f2:
         8e:a5:f5:45:8e:50:8b:45:82:24:0d:1c:9b:3e:cb:30:0e:78:
         1e:3c:83:a7:51:aa:d6:4f:50:b5:d2:12:9f:51:c2:44:76:22:
         51:da:3f:02:a3:97:76:d0:04:12:5c:1c:2c:1f:ed:83:2b:38:
         d4:09:72:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:19:30 2025 by rpki-client