Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/323830343a333939383a3a2f33322d3334203d3e20323636303338.roa
File:                     323830343a333939383a3a2f33322d3334203d3e20323636303338.roa (raw, json)
Hash identifier:          xtdl+veRR5wyrl4rZ7cpBMcZ+X5rx8Ebr42vGVVn6t0=
Subject key identifier:   C3:78:37:2C:90:B7:8D:42:86:D2:24:59:BD:82:6A:69:99:26:88:99
Certificate issuer:       /CN=96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE
Certificate serial:       631CA5B2C8E73C60E75AB7B3CB963AA2362B2A29
Authority key identifier: 96:F2:FB:F6:6A:D2:E9:F6:1E:CC:CE:C6:77:41:C6:AD:17:36:AC:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/323830343a333939383a3a2f33322d3334203d3e20323636303338.roa
Signing time:             Thu 06 Mar 2025 19:07:56 +0000
ROA not before:           Thu 06 Mar 2025 19:02:56 +0000
ROA not after:            Thu 05 Mar 2026 19:07:56 +0000
asID:                     266038
IP address blocks:        2804:3998::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.crl
                          rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 14:28:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:1c:a5:b2:c8:e7:3c:60:e7:5a:b7:b3:cb:96:3a:a2:36:2b:2a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE
        Validity
            Not Before: Mar  6 19:02:56 2025 GMT
            Not After : Mar  5 19:07:56 2026 GMT
        Subject: CN=C378372C90B78D4286D22459BD826A6999268899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:d3:57:59:76:cc:b6:09:e8:f7:bd:ad:b0:
                    01:92:e1:68:05:a7:c9:a6:7b:50:9d:01:f9:40:2f:
                    c2:b4:e3:a4:2f:6f:c6:d1:8c:9b:87:3c:3d:fa:3c:
                    bc:6d:df:f0:76:68:b3:bb:76:55:e6:8e:67:7f:ac:
                    c9:bb:32:c7:f9:d6:23:79:06:47:85:cd:64:64:36:
                    96:7d:07:bf:66:c6:f3:8e:94:34:bf:1b:4e:ec:62:
                    48:9d:a7:76:45:18:27:ac:76:50:64:1f:ca:05:3c:
                    3e:85:4c:ef:f0:3b:dc:5d:aa:2a:20:f0:2c:9e:67:
                    f7:2f:6b:13:4f:b1:de:5d:07:ee:33:e5:96:5f:58:
                    23:c3:39:4c:47:ea:f1:e3:26:fb:42:39:ba:61:0c:
                    b8:50:73:18:f3:48:cb:bf:d2:73:d4:2d:34:19:49:
                    be:42:77:0c:0a:9d:57:6c:b1:17:76:c9:4d:9b:a4:
                    c8:df:38:2e:8a:26:e2:0b:38:da:88:e1:85:17:09:
                    3c:77:50:89:2f:63:fb:b9:57:10:f0:a1:2b:68:8b:
                    14:c8:c0:df:f8:65:77:dd:50:b3:68:43:dd:ce:32:
                    60:c1:8f:c1:07:bb:de:41:ca:94:75:6b:7b:3f:05:
                    e9:f5:fb:04:fe:8e:d7:c2:ef:42:2e:54:a5:d9:2f:
                    50:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:78:37:2C:90:B7:8D:42:86:D2:24:59:BD:82:6A:69:99:26:88:99
            X509v3 Authority Key Identifier:
                keyid:96:F2:FB:F6:6A:D2:E9:F6:1E:CC:CE:C6:77:41:C6:AD:17:36:AC:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/323830343a333939383a3a2f33322d3334203d3e20323636303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3998::/32

    Signature Algorithm: sha256WithRSAEncryption
         d4:b5:a6:a7:45:53:d8:1d:2a:16:49:51:11:ee:25:d5:9a:cd:
         94:10:10:2c:82:21:f0:c5:a3:61:4f:86:a0:1f:a2:77:92:67:
         08:ad:a2:cf:0c:69:43:a1:11:67:c7:fc:74:4d:b5:a3:3f:e1:
         b1:99:61:be:fc:58:69:a8:b9:ac:c3:a2:3b:f7:ca:75:11:81:
         de:42:f9:22:a1:de:8f:76:62:fc:d0:53:f8:4f:2c:78:50:25:
         70:4a:e6:9e:4d:b3:05:82:f5:3e:44:bb:c3:3a:93:3b:25:be:
         7b:fe:f0:1a:68:76:7a:87:1d:7a:33:4b:f3:f2:51:6a:df:55:
         e7:c9:6b:e4:0d:e3:7e:a3:60:88:ec:aa:76:42:a6:39:5d:fc:
         81:f0:c0:af:57:28:23:4e:85:4e:16:fa:4d:b0:fe:32:26:30:
         bb:41:7e:84:ff:5a:63:d0:7f:77:b3:b2:55:1f:42:13:f6:fa:
         38:a5:3d:bd:39:55:f2:d1:a6:80:01:44:b2:11:a2:31:25:a0:
         3c:6b:45:9a:4f:ef:a1:5d:c5:ea:69:33:fa:f4:4b:f1:de:97:
         64:ea:57:73:74:c5:24:35:04:5f:27:af:34:9d:d3:fa:dd:86:
         7f:53:b5:96:9a:79:6e:e8:49:89:c8:2b:a9:e0:e9:e1:88:cc:
         d6:43:8a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:34:29 2025 by rpki-client