Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a3a2f33332d3333203d3e20323634333131.roa
File:                     323830343a323566303a3a2f33332d3333203d3e20323634333131.roa (raw, json)
Hash identifier:          YcFu0OS7oNp4xIm4/IMhMEYiFdWBt4DLRDKAseuksVw=
Subject key identifier:   8A:F0:E2:67:9D:D6:A6:1A:B9:F6:23:A8:35:17:50:B3:F0:FE:03:A7
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       0FCC2F391C3D02C4CFDD90FB66E3C1BBD7868835
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a3a2f33332d3333203d3e20323634333131.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     264311
IP address blocks:        2804:25f0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl
                          rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:cc:2f:39:1c:3d:02:c4:cf:dd:90:fb:66:e3:c1:bb:d7:86:88:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject: CN=3082010A02820101009AB27DBE8981D5F058E950F31AD1CB8BD5378D9C6B9C6478B3D951D208D62A62B9E89EF99BE39C6C0AC3184C409FD4762FE0EF3D43F17B92872365EE776A33E43F4178C72BC92CB4C673F99C63BC7A7877C273379F61E4085297D69589CAEFAFCA5E829FAE2F76441407D2576676C745C4E8905B7C97DC5469EAA77D26FDCC1B40AB693FD20892CD6720B8DF43EE614F1220668CA5299777A0E7DA0CCC3FCD128A3F729F4A1E814A2B1F6F4B8EA71896A9186B3CC635972814302C22D9A15C25B88E915023B6BBF60200878190D54C7288AC015214377138C9D95E947DE31AD30C07A5CB5FEEEB6C77602BEAB5585C5A002834DF28DB9AC395969EBF0CD324BF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b2:7d:be:89:81:d5:f0:58:e9:50:f3:1a:d1:
                    cb:8b:d5:37:8d:9c:6b:9c:64:78:b3:d9:51:d2:08:
                    d6:2a:62:b9:e8:9e:f9:9b:e3:9c:6c:0a:c3:18:4c:
                    40:9f:d4:76:2f:e0:ef:3d:43:f1:7b:92:87:23:65:
                    ee:77:6a:33:e4:3f:41:78:c7:2b:c9:2c:b4:c6:73:
                    f9:9c:63:bc:7a:78:77:c2:73:37:9f:61:e4:08:52:
                    97:d6:95:89:ca:ef:af:ca:5e:82:9f:ae:2f:76:44:
                    14:07:d2:57:66:76:c7:45:c4:e8:90:5b:7c:97:dc:
                    54:69:ea:a7:7d:26:fd:cc:1b:40:ab:69:3f:d2:08:
                    92:cd:67:20:b8:df:43:ee:61:4f:12:20:66:8c:a5:
                    29:97:77:a0:e7:da:0c:cc:3f:cd:12:8a:3f:72:9f:
                    4a:1e:81:4a:2b:1f:6f:4b:8e:a7:18:96:a9:18:6b:
                    3c:c6:35:97:28:14:30:2c:22:d9:a1:5c:25:b8:8e:
                    91:50:23:b6:bb:f6:02:00:87:81:90:d5:4c:72:88:
                    ac:01:52:14:37:71:38:c9:d9:5e:94:7d:e3:1a:d3:
                    0c:07:a5:cb:5f:ee:eb:6c:77:60:2b:ea:b5:58:5c:
                    5a:00:28:34:df:28:db:9a:c3:95:96:9e:bf:0c:d3:
                    24:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F0:E2:67:9D:D6:A6:1A:B9:F6:23:A8:35:17:50:B3:F0:FE:03:A7
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a3a2f33332d3333203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f0::/33

    Signature Algorithm: sha256WithRSAEncryption
         2a:5d:47:a5:6b:b2:1b:e0:3c:e4:13:59:9e:c5:a4:ca:cf:74:
         4f:01:4a:10:97:7d:61:f2:8b:b4:c9:85:28:58:58:7c:5b:8b:
         6b:ee:93:ab:61:eb:e0:16:73:5b:c3:4b:13:30:0d:35:49:8e:
         be:67:1b:66:4c:d1:39:82:2f:8c:fa:43:f8:ea:10:ab:11:d1:
         a4:a0:fe:4a:f6:1d:7c:e0:38:27:76:ac:91:0c:41:e5:e2:0b:
         64:ea:f2:76:a0:33:fb:e9:60:4b:fb:55:7c:fb:db:7c:14:34:
         61:7d:9a:31:7c:27:c6:b7:8d:05:2f:a5:92:ad:08:cd:b0:38:
         c8:41:28:48:1c:1e:e0:c4:80:1c:85:fe:c9:0f:09:9e:e8:18:
         51:41:a0:d3:aa:a6:d8:a8:df:07:d2:41:38:5f:6a:d3:5b:2c:
         f9:d9:05:1e:d5:6f:c8:30:37:35:13:aa:77:02:1e:fd:52:c8:
         7f:f5:b9:b1:02:f3:38:19:2b:a9:b2:bb:54:30:8d:a5:7c:8c:
         a2:73:e5:41:d6:dc:19:2f:e2:41:49:fa:b4:75:c8:ce:23:49:
         42:ba:01:a3:1b:b5:86:f8:3f:21:b8:67:a3:61:13:7b:ac:1e:
         88:dc:ce:4a:19:46:c8:63:6f:bf:0e:9c:8d:a8:0d:60:ea:02:
         b9:ec:da:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:04 2025 by rpki-client