Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/323830343a6438383a3a2f33322d3438203d3e203532363337.roa
File:                     323830343a6438383a3a2f33322d3438203d3e203532363337.roa (raw, json)
Hash identifier:          vvdhDV78kqzy85F7pUt/V61rjRvKnfubu7Ub5NNCVUY=
Subject key identifier:   7B:11:57:6B:C5:BB:8B:AF:3F:21:AE:5C:EB:DE:6B:16:25:24:D6:E9
Certificate issuer:       /CN=BD40CEDDB8E6AC181C713C37060807D151D2B1AE
Certificate serial:       26C556F096027E86E0B3DC9B18F8D15E06BA6635
Authority key identifier: BD:40:CE:DD:B8:E6:AC:18:1C:71:3C:37:06:08:07:D1:51:D2:B1:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/323830343a6438383a3a2f33322d3438203d3e203532363337.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     52637
IP address blocks:        2804:d88::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl
                          rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 19:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c5:56:f0:96:02:7e:86:e0:b3:dc:9b:18:f8:d1:5e:06:ba:66:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD40CEDDB8E6AC181C713C37060807D151D2B1AE
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:48:d9:83:5b:64:c7:20:82:59:17:74:76:f0:
                    40:45:21:93:fa:38:3c:2b:18:6f:47:dc:c1:16:8a:
                    4a:d0:7e:fc:35:6e:5b:d1:bc:6f:74:7d:1d:a0:34:
                    0e:7f:84:8f:0d:fb:40:5a:5e:6a:ee:92:84:f2:53:
                    3c:0a:e0:16:a9:7f:04:d7:a1:6f:fe:d9:81:fb:17:
                    eb:eb:be:a9:56:e8:1f:65:3e:cf:d8:62:a6:05:91:
                    e6:e4:64:8f:7a:ff:b8:27:42:97:8e:be:a0:67:c6:
                    32:63:2c:ce:77:dd:e8:a6:e4:d4:36:a0:e7:29:d7:
                    8b:ed:ba:f5:62:f7:ae:9d:e1:3d:53:f5:da:ea:fe:
                    3c:dd:fe:ce:c3:a8:4e:97:f4:a5:6e:15:6e:44:78:
                    82:7d:81:68:52:40:d6:5c:f8:aa:a5:91:f3:49:3c:
                    ed:8e:b3:5d:2c:8b:b9:1c:eb:a0:ae:71:b4:ad:36:
                    d6:b9:ab:22:9d:a5:aa:5c:ae:c5:09:77:12:40:dd:
                    2b:f4:fa:54:33:64:02:12:d7:83:38:b7:db:bf:4e:
                    e8:f9:fa:08:6c:d3:ea:7d:af:5e:44:37:c2:4a:b0:
                    22:5c:d3:da:2e:a6:66:69:93:ab:c8:6a:a7:5f:5c:
                    3e:3c:50:32:91:d4:03:54:b4:f2:1f:3f:e9:fb:90:
                    ce:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:11:57:6B:C5:BB:8B:AF:3F:21:AE:5C:EB:DE:6B:16:25:24:D6:E9
            X509v3 Authority Key Identifier:
                keyid:BD:40:CE:DD:B8:E6:AC:18:1C:71:3C:37:06:08:07:D1:51:D2:B1:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/323830343a6438383a3a2f33322d3438203d3e203532363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d88::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:16:ee:2c:6a:46:e2:6e:84:b8:4b:fa:33:26:15:af:62:b8:
         aa:c8:6f:73:4d:b7:0e:a0:2a:4d:75:e2:61:dd:9e:99:38:af:
         d4:ab:5d:f6:de:b8:60:91:f7:aa:85:7d:c5:12:71:ed:29:a0:
         2f:6b:68:5f:f7:01:2e:16:34:ac:13:64:2c:a3:14:6e:91:3e:
         c9:2c:64:be:1a:6e:8a:55:b5:9b:84:7b:bb:48:ef:d8:75:82:
         7d:2f:9a:bd:99:40:fa:8b:58:23:0c:f9:cf:13:a9:9f:23:dc:
         fa:5b:2d:75:f2:ca:38:12:17:f5:c9:81:0b:67:72:b7:56:30:
         f4:33:cb:88:a0:c1:ed:28:32:68:53:22:d8:44:5a:ef:1a:01:
         29:8b:34:15:12:a7:ee:6f:d5:d0:bc:dc:ac:90:38:ca:7c:13:
         86:d6:25:1e:df:e2:92:83:82:9a:4e:d6:42:e3:b8:bb:ad:25:
         9d:29:71:7d:8e:bd:98:55:f4:8f:8b:1e:61:d6:89:1c:4f:51:
         31:d8:49:33:c3:03:82:48:3b:85:cc:f2:3f:9d:a6:ac:be:fa:
         69:33:1c:3c:f8:91:1c:83:9f:56:f5:96:21:3d:93:3f:e5:5f:
         e7:e8:6f:42:9c:e1:1f:76:1d:68:08:33:c8:27:ca:75:38:a3:
         ba:dd:1d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:07:24 2025 by rpki-client