Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a3a2f33342d3334203d3e20323634333131.roa
File:                     323830343a323566303a3a2f33342d3334203d3e20323634333131.roa (raw, json)
Hash identifier:          s6ZliZwh7kdUkJMFUjV4TdO2wWzlNHKtMYZn0fLoPjU=
Subject key identifier:   FA:67:E1:DB:38:A0:A3:B9:99:14:CF:D8:20:11:81:3F:4E:63:C2:32
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       4CAF9C78C8C3DF185739F05156CB28B9642B3BEA
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a3a2f33342d3334203d3e20323634333131.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     264311
IP address blocks:        2804:25f0::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl
                          rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 19:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:af:9c:78:c8:c3:df:18:57:39:f0:51:56:cb:28:b9:64:2b:3b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=3082010A0282010100D172C6202F5309ADB998E5E42A3F9DDAB41D2A7D145736D6A76062273A7E17108D5CC5E1FA5F3E5359683E53AC06D8AFE581881150618CC786CC0DB97E93C954C88C241C5FA833CE2FFE1BED613C9BA466A42E5DA67B3758EBA1049925AC4F56F1FFA4273770DA367B38361176D9112FC342D68F3F8C38CF0FCCA45EBA744008AAB5C8265C5895BC21249E4D2D9DA5AEA329423738A203D52F0D8645B4C863C2EE5B21B5DCCF74D3E6884DA4623C56A6E47E564B2DC2E5714746A636B32ECD3591256BE3308F6E97D9CB5F57B11F7D385E732C333EEBFD502BC537DF46F71E1CEC4F64420F4C3FB534341E32688D559D8B982C880EC20F52A93574B8C91397D10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:72:c6:20:2f:53:09:ad:b9:98:e5:e4:2a:3f:
                    9d:da:b4:1d:2a:7d:14:57:36:d6:a7:60:62:27:3a:
                    7e:17:10:8d:5c:c5:e1:fa:5f:3e:53:59:68:3e:53:
                    ac:06:d8:af:e5:81:88:11:50:61:8c:c7:86:cc:0d:
                    b9:7e:93:c9:54:c8:8c:24:1c:5f:a8:33:ce:2f:fe:
                    1b:ed:61:3c:9b:a4:66:a4:2e:5d:a6:7b:37:58:eb:
                    a1:04:99:25:ac:4f:56:f1:ff:a4:27:37:70:da:36:
                    7b:38:36:11:76:d9:11:2f:c3:42:d6:8f:3f:8c:38:
                    cf:0f:cc:a4:5e:ba:74:40:08:aa:b5:c8:26:5c:58:
                    95:bc:21:24:9e:4d:2d:9d:a5:ae:a3:29:42:37:38:
                    a2:03:d5:2f:0d:86:45:b4:c8:63:c2:ee:5b:21:b5:
                    dc:cf:74:d3:e6:88:4d:a4:62:3c:56:a6:e4:7e:56:
                    4b:2d:c2:e5:71:47:46:a6:36:b3:2e:cd:35:91:25:
                    6b:e3:30:8f:6e:97:d9:cb:5f:57:b1:1f:7d:38:5e:
                    73:2c:33:3e:eb:fd:50:2b:c5:37:df:46:f7:1e:1c:
                    ec:4f:64:42:0f:4c:3f:b5:34:34:1e:32:68:8d:55:
                    9d:8b:98:2c:88:0e:c2:0f:52:a9:35:74:b8:c9:13:
                    97:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:67:E1:DB:38:A0:A3:B9:99:14:CF:D8:20:11:81:3F:4E:63:C2:32
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a3a2f33342d3334203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f0::/34

    Signature Algorithm: sha256WithRSAEncryption
         86:8a:e2:7c:26:8a:d1:f7:ba:8a:57:a0:6c:0a:d0:49:f8:ff:
         3a:66:90:9a:60:36:b5:40:f4:85:f3:e2:eb:19:c5:32:3d:0c:
         15:df:12:53:c2:2b:82:ec:09:09:33:bb:86:ae:21:d5:5f:bc:
         fb:c4:77:21:bb:26:64:49:cb:b6:ce:d4:98:0b:59:e4:1b:a6:
         2b:83:96:ea:d1:4b:15:20:c8:47:87:fb:e4:4b:b4:6e:f6:43:
         99:15:3c:09:94:5c:2a:c0:be:28:ed:b4:e6:dc:b4:20:ac:7a:
         8c:3a:9a:f9:8b:02:8d:81:34:04:f1:5b:8e:f6:95:1c:44:47:
         6d:1f:41:ef:93:2f:bf:54:95:7d:74:1f:0f:bf:b8:05:df:52:
         3a:57:4a:8c:d2:de:8f:8d:6c:36:b8:e5:50:f5:97:8f:d8:6f:
         c5:34:ab:73:92:e7:28:0e:4e:79:a9:e0:12:bb:8e:99:64:26:
         25:ac:c1:cb:1f:82:b7:42:92:36:e3:d9:db:6b:5d:2d:a5:3f:
         40:6a:8a:c2:b0:d3:8a:c5:4d:92:c2:c9:1b:34:a5:1f:66:10:
         40:9f:c7:f4:33:19:33:39:24:ab:55:e9:9d:18:e3:d7:a6:20:
         44:35:20:d2:83:ad:64:49:8b:3c:16:5f:43:2f:5c:52:23:46:
         1f:d7:24:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:54:22 2025 by rpki-client