Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/323830343a313636303a3a2f33322d3438203d3e203532353630.roa
File:                     323830343a313636303a3a2f33322d3438203d3e203532353630.roa (raw, json)
Hash identifier:          7sosaFGujNd1fDyI3cvpjp7xta0DOEp9W0OM7udMES8=
Subject key identifier:   59:12:F1:70:29:94:3B:19:B5:93:6B:47:49:01:19:C1:9E:5C:87:2C
Certificate issuer:       /CN=122355C7CE6C4B651C393D8619E964AD6CFEB76A
Certificate serial:       550D32506D3CE3F1CC743CBAD668F7ABE8171089
Authority key identifier: 12:23:55:C7:CE:6C:4B:65:1C:39:3D:86:19:E9:64:AD:6C:FE:B7:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/323830343a313636303a3a2f33322d3438203d3e203532353630.roa
Signing time:             Thu 06 Mar 2025 04:45:39 +0000
ROA not before:           Thu 06 Mar 2025 04:40:39 +0000
ROA not after:            Thu 05 Mar 2026 04:45:39 +0000
asID:                     52560
IP address blocks:        2804:1660::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.crl
                          rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:13:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:0d:32:50:6d:3c:e3:f1:cc:74:3c:ba:d6:68:f7:ab:e8:17:10:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122355C7CE6C4B651C393D8619E964AD6CFEB76A
        Validity
            Not Before: Mar  6 04:40:39 2025 GMT
            Not After : Mar  5 04:45:39 2026 GMT
        Subject: CN=5912F17029943B19B5936B47490119C19E5C872C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:8f:24:4f:d0:88:ee:c1:ed:f8:3d:8d:c2:
                    ff:9b:0e:be:a1:01:a3:73:f3:9d:f4:bc:10:77:a1:
                    1b:ad:f4:75:50:90:e7:9e:fb:7a:07:62:d4:b5:3f:
                    56:cf:b5:b3:bc:a1:ec:8f:9e:02:77:94:17:8f:46:
                    c8:f8:f3:8d:4a:0d:44:f3:e0:a4:ed:d4:3a:a4:f5:
                    7e:f9:99:ae:34:9e:bb:cd:c2:38:84:db:3d:a2:b2:
                    aa:2e:78:bb:cc:4a:7e:17:e7:4a:29:27:c4:50:5f:
                    6e:d5:e3:94:95:c8:bc:e6:b7:3e:16:f4:75:8a:c8:
                    c1:de:fb:34:08:d4:fb:6e:b6:2c:78:f3:99:60:bb:
                    10:f3:5c:c8:dc:31:d8:2f:15:27:07:ec:54:cc:01:
                    00:9e:18:62:82:b4:d1:bd:ed:dc:72:89:93:cc:44:
                    2f:01:6e:61:a0:21:ad:2a:ca:e0:0d:0d:f0:bd:1f:
                    0d:3c:48:49:5a:b2:b4:29:90:46:10:b1:01:66:fc:
                    e8:1a:be:c3:56:2d:b2:5a:d6:00:df:e4:75:e0:1d:
                    cb:0c:c3:49:9e:fc:f0:70:98:32:7b:96:c7:3c:46:
                    ca:1f:3f:55:be:01:89:81:c6:b2:98:c8:08:da:38:
                    b2:a2:9d:7a:58:92:e5:2d:6d:5a:23:5c:f5:ed:b6:
                    40:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:12:F1:70:29:94:3B:19:B5:93:6B:47:49:01:19:C1:9E:5C:87:2C
            X509v3 Authority Key Identifier:
                keyid:12:23:55:C7:CE:6C:4B:65:1C:39:3D:86:19:E9:64:AD:6C:FE:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/323830343a313636303a3a2f33322d3438203d3e203532353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1660::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:36:2c:0a:b3:bd:83:1e:ff:73:df:c0:00:e7:80:66:90:62:
         c9:a7:88:50:a2:25:6e:db:9c:2f:53:fd:91:ec:5a:74:5a:32:
         3a:1f:a9:77:b0:82:b8:41:05:e4:9d:54:09:2a:a0:d0:5b:bb:
         2a:17:23:08:4d:04:3e:d9:ab:78:1d:9e:27:ae:4c:7d:d0:dd:
         e7:d7:b2:86:ac:23:21:50:25:4e:f4:9b:b0:b4:13:49:41:dc:
         d3:7c:d7:56:be:6d:b6:19:2b:2a:37:d0:76:4d:4f:0c:3c:e9:
         d9:39:7f:43:b5:66:54:ec:74:89:48:23:06:55:50:cf:ca:3c:
         03:b5:e4:d7:1a:11:63:c2:eb:f4:7a:55:a8:fd:13:5c:8a:ae:
         30:09:aa:32:4e:ef:04:b2:6d:af:d7:01:d9:fc:e1:0f:b9:19:
         49:f3:d8:6a:89:57:ca:6a:c0:ce:2d:af:60:17:31:10:4a:ac:
         69:e7:52:4d:28:be:2a:7a:68:7d:38:f6:d3:a6:86:3f:31:07:
         d3:88:98:78:ae:a2:1c:05:e2:63:ea:32:96:a0:f9:34:2b:b0:
         9f:00:2c:74:ea:37:16:10:82:a3:bd:2c:03:26:df:8e:67:c6:
         87:bf:b9:57:db:33:8b:28:25:c5:ca:bf:b7:57:33:51:f3:b0:
         7a:39:6d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:27:44 2025 by rpki-client