Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/323830343a34343a3a2f33322d3332203d3e203238363036.roa
File:                     323830343a34343a3a2f33322d3332203d3e203238363036.roa (raw, json)
Hash identifier:          qa/VVhxguIpZ2tUnPquOwpqbPuCDAs2WExDmWbxgKrg=
Subject key identifier:   8A:22:91:35:3C:1E:0B:98:C1:0B:20:0B:C8:31:78:DF:75:55:2B:BF
Certificate issuer:       /CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
Certificate serial:       321F05759D0B75282C843124F171B2D6A410AC7A
Authority key identifier: AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/323830343a34343a3a2f33322d3332203d3e203238363036.roa
Signing time:             Thu 06 Mar 2025 17:47:57 +0000
ROA not before:           Thu 06 Mar 2025 17:42:57 +0000
ROA not after:            Thu 05 Mar 2026 17:47:57 +0000
asID:                     28606
IP address blocks:        2804:44::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.crl
                          rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 20:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:1f:05:75:9d:0b:75:28:2c:84:31:24:f1:71:b2:d6:a4:10:ac:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
        Validity
            Not Before: Mar  6 17:42:57 2025 GMT
            Not After : Mar  5 17:47:57 2026 GMT
        Subject: CN=8A2291353C1E0B98C10B200BC83178DF75552BBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d3:e2:20:b3:97:81:7b:8c:b4:ab:50:d2:90:
                    fb:b9:e1:b9:97:39:18:2f:22:e1:38:c1:e1:ed:e8:
                    a5:a7:35:fc:85:72:63:a0:12:17:75:49:8f:6e:9e:
                    f0:d5:1a:fb:58:14:f7:ff:b8:62:e2:ac:e5:70:16:
                    2a:3a:b2:15:bb:de:35:c7:eb:b8:eb:f5:5b:63:da:
                    3e:be:37:8c:ae:d9:49:da:92:88:a2:42:bc:13:e8:
                    40:a7:ca:53:6c:cd:33:ce:48:80:72:d2:58:34:78:
                    16:30:b2:c2:be:ec:a0:94:20:19:5f:89:90:16:e9:
                    44:57:c9:97:43:b4:2e:f8:e7:bc:8a:bf:cc:0c:37:
                    06:c6:65:34:0e:0a:a7:b7:54:cd:1b:77:52:c9:ac:
                    6a:de:86:29:ae:20:df:53:a5:9b:1a:da:47:05:33:
                    7b:b3:ab:a3:09:5b:08:7d:de:7a:84:78:9c:b1:16:
                    ec:29:25:a4:00:14:06:ba:fc:e5:39:c1:1e:22:c0:
                    a5:eb:40:79:bf:bd:90:5a:bd:68:fa:4f:e2:d0:94:
                    e2:3a:bb:62:36:c8:78:f0:a3:28:53:e7:7d:77:b8:
                    db:37:a3:67:b0:a6:e9:25:45:21:76:64:51:0c:14:
                    51:83:2a:65:8b:7b:d9:e6:a5:8c:02:38:81:04:bc:
                    9b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:22:91:35:3C:1E:0B:98:C1:0B:20:0B:C8:31:78:DF:75:55:2B:BF
            X509v3 Authority Key Identifier:
                keyid:AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/323830343a34343a3a2f33322d3332203d3e203238363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:1c:a8:92:5b:38:bd:46:f6:40:c6:45:99:58:a2:ab:bd:9a:
         3c:9f:be:ec:d1:bf:0a:33:9e:ac:38:09:85:67:04:35:1d:2d:
         8d:71:88:c6:43:8c:ce:b2:31:2d:46:2e:f3:d2:f5:7f:39:d2:
         6f:03:1b:e0:a6:ee:4e:b8:c2:96:a1:5c:cc:b7:23:ca:f6:80:
         de:76:ed:91:b7:4f:15:99:8d:d4:01:bc:c8:4d:87:10:06:2b:
         ea:a2:ba:fa:2d:e8:4e:7b:66:7d:47:76:db:0c:02:2b:6d:78:
         05:7d:f4:5f:bf:d0:8b:cf:0d:f9:52:da:6e:a4:c5:31:08:d6:
         3d:78:1d:df:f0:2d:a0:d8:ec:de:22:df:ab:b5:ee:ff:50:f3:
         39:fc:4a:6a:00:2b:5f:08:b6:1e:eb:8b:c9:d3:62:48:1d:85:
         e1:5f:ce:3f:d1:f8:4d:25:52:9c:c1:68:f0:9f:f6:ef:56:10:
         5f:d3:d4:90:6e:1e:18:99:3a:af:11:87:a9:a6:fb:21:1a:ec:
         9f:f5:44:ea:ac:42:14:d8:97:1d:26:5e:13:03:70:49:60:e1:
         63:43:51:38:e4:95:37:ee:b4:f4:85:14:0c:fc:70:8a:1c:76:
         51:fb:21:71:1f:97:e5:09:cd:bc:d8:cf:24:5d:32:ee:24:40:
         af:7e:52:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:18:03 2025 by rpki-client