Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/323830343a346463343a3a2f33322d3438203d3e20323638323138.roa
File:                     323830343a346463343a3a2f33322d3438203d3e20323638323138.roa (raw, json)
Hash identifier:          2u1i+suCu0rrLyjE7ldptTAPfUe+PaD7Ad0e11cTwOI=
Subject key identifier:   58:37:9D:8E:41:24:F5:C9:06:5E:A4:FA:E7:60:22:87:0A:92:72:8F
Certificate issuer:       /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial:       1C1792841B8DEC150081E0BC871EC426EF5DD5F4
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/323830343a346463343a3a2f33322d3438203d3e20323638323138.roa
Signing time:             Tue 20 May 2025 03:55:14 +0000
ROA not before:           Tue 20 May 2025 03:50:14 +0000
ROA not after:            Tue 19 May 2026 03:55:14 +0000
asID:                     268218
IP address blocks:        2804:4dc4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
                          rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 12:44:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:17:92:84:1b:8d:ec:15:00:81:e0:bc:87:1e:c4:26:ef:5d:d5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
        Validity
            Not Before: May 20 03:50:14 2025 GMT
            Not After : May 19 03:55:14 2026 GMT
        Subject: CN=58379D8E4124F5C9065EA4FAE76022870A92728F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3a:16:08:9d:e2:87:e8:28:b5:d2:92:72:df:
                    fe:01:29:4d:3c:ed:5f:08:8e:ef:aa:f9:8a:82:f6:
                    fd:65:a8:56:32:a4:f6:a8:d6:ba:96:b0:48:0c:5b:
                    d2:50:de:bf:b4:c4:ae:e3:b9:23:f3:3e:5b:8c:7d:
                    46:6f:63:4a:15:a7:36:73:db:7f:4e:e6:76:22:aa:
                    6b:48:dd:c7:17:40:13:65:fa:b6:28:e0:12:a0:52:
                    3c:ae:4b:ad:69:4e:0d:e4:c1:85:8f:54:eb:7c:ca:
                    d5:bf:ba:a7:02:ab:17:36:e3:80:62:50:ea:fe:54:
                    fb:b6:94:9b:17:b5:61:72:c7:81:b5:2b:c0:b4:77:
                    6c:54:1b:04:18:20:6c:75:46:e6:1f:ee:bb:1a:af:
                    02:d4:30:49:ba:db:52:d6:ce:5a:d8:8e:59:84:d8:
                    d6:47:85:9e:b5:0c:d5:75:38:42:92:26:74:eb:5a:
                    b2:aa:07:46:71:4c:80:56:91:81:c4:5d:33:68:d1:
                    2a:d9:75:b0:67:11:9f:64:80:f9:5f:39:04:74:47:
                    c4:77:98:10:96:c8:02:34:82:4d:19:8d:52:8d:f3:
                    62:77:23:4a:4d:a6:cd:24:5e:dd:ae:1b:44:f3:e6:
                    e1:3e:31:d0:c8:6a:0d:63:8f:db:19:67:d1:fc:da:
                    28:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:37:9D:8E:41:24:F5:C9:06:5E:A4:FA:E7:60:22:87:0A:92:72:8F
            X509v3 Authority Key Identifier:
                keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/323830343a346463343a3a2f33322d3438203d3e20323638323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4dc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:29:47:a2:7d:81:c7:cb:64:0a:9f:83:5e:87:08:30:55:1f:
         65:ec:a7:b1:48:05:4d:ac:51:7b:5b:0e:8e:1e:a7:85:1d:99:
         e0:41:df:2f:ae:66:84:00:8a:70:0b:5d:d3:a1:71:fc:f1:70:
         86:7e:46:65:72:fa:d8:c2:4c:3c:60:fb:ad:64:91:2b:b0:b7:
         0e:69:7b:b1:00:8e:fd:cb:99:e2:47:3c:2a:a1:fd:d7:a4:48:
         21:75:10:b2:34:db:f2:a6:8a:b9:72:3a:99:ae:66:a3:04:ae:
         ef:69:0b:09:74:21:58:99:3d:4d:bc:35:65:7d:ba:ec:11:5c:
         36:1c:ab:02:69:0d:b1:35:52:46:27:53:69:6b:75:86:64:28:
         1b:25:a8:92:f1:5b:36:55:c0:51:9d:0d:6c:71:67:35:6d:f8:
         6d:12:75:e2:68:00:b5:f3:0e:28:bc:f3:76:d4:d2:9c:00:2b:
         a7:0b:a6:16:75:b1:6e:cc:46:25:ac:17:d5:07:81:89:8b:95:
         64:e4:2d:8f:e8:bb:0c:e8:cf:34:a1:84:75:a8:3f:4f:e8:93:
         d7:fa:64:de:92:ea:7f:b5:fe:b1:82:f0:c9:0b:3a:c0:c8:44:
         c6:da:73:ae:3a:c2:2a:65:86:59:3e:fb:56:03:08:6a:34:38:
         5d:ad:b9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:07:22 2025 by rpki-client