Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a33313a3a2f34382d3438203d3e20323635333330.roa
File:                     323830343a326533303a33313a3a2f34382d3438203d3e20323635333330.roa (raw, json)
Hash identifier:          uT21/kzpQO5kdHlvAWaze9eioj46DF5nQghfKQSa2fU=
Subject key identifier:   02:96:53:76:48:D5:7F:15:72:04:D9:B1:69:15:B6:7E:2E:A1:68:A7
Certificate issuer:       /CN=A4A432E63DF7D41D50FADC5A6469974D42C44738
Certificate serial:       43BA206B51EE2A37304582D3ECC1D2FE9F8468AB
Authority key identifier: A4:A4:32:E6:3D:F7:D4:1D:50:FA:DC:5A:64:69:97:4D:42:C4:47:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4A432E63DF7D41D50FADC5A6469974D42C44738.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a33313a3a2f34382d3438203d3e20323635333330.roa
Signing time:             Thu 05 Jun 2025 01:05:49 +0000
ROA not before:           Thu 05 Jun 2025 01:00:49 +0000
ROA not after:            Thu 04 Jun 2026 01:05:49 +0000
asID:                     265330
IP address blocks:        2804:2e30:31::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/A4A432E63DF7D41D50FADC5A6469974D42C44738.crl
                          rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/A4A432E63DF7D41D50FADC5A6469974D42C44738.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4A432E63DF7D41D50FADC5A6469974D42C44738.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 04:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ba:20:6b:51:ee:2a:37:30:45:82:d3:ec:c1:d2:fe:9f:84:68:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4A432E63DF7D41D50FADC5A6469974D42C44738
        Validity
            Not Before: Jun  5 01:00:49 2025 GMT
            Not After : Jun  4 01:05:49 2026 GMT
        Subject: CN=0296537648D57F157204D9B16915B67E2EA168A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ba:21:a2:30:1f:c3:8b:a2:59:42:9f:91:a8:
                    73:13:97:cc:c1:df:50:29:e4:f3:eb:b1:b6:f5:54:
                    69:43:13:84:7d:5c:14:02:96:de:e0:84:b6:53:43:
                    31:2f:90:4f:1f:b6:4f:3a:d6:11:e2:7e:d1:98:76:
                    ce:3a:26:d3:2b:61:ae:14:4a:db:c8:3a:69:8c:e9:
                    1b:b9:cb:c0:fb:d7:79:74:25:c5:f1:fe:99:ba:e9:
                    ac:86:5c:94:83:cf:58:11:bc:b7:a0:72:0b:40:6b:
                    b3:cc:71:55:77:4e:65:f7:4f:25:18:78:ec:e7:2a:
                    ab:e3:00:79:41:ba:d7:96:79:0c:79:f6:d6:24:32:
                    80:ce:ff:ce:bb:60:6d:9b:f6:ee:a6:07:33:c2:c9:
                    b5:03:55:b3:1b:bb:39:13:54:cb:2a:55:e7:c7:75:
                    3e:33:8c:ae:66:1e:ec:01:85:50:06:e9:03:1b:28:
                    97:22:9e:2a:14:5b:a2:e4:f5:f4:5a:35:3f:f7:5c:
                    eb:f9:de:8e:29:d6:8b:94:4d:b3:50:93:33:a9:b9:
                    e0:e6:6e:b7:0d:50:d2:ae:93:cd:c0:50:23:01:84:
                    2e:71:03:a3:73:51:e3:5a:7e:e3:c5:72:e1:55:e4:
                    b9:75:62:7d:79:3b:f5:5f:5a:41:98:f5:c0:66:b6:
                    1a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:96:53:76:48:D5:7F:15:72:04:D9:B1:69:15:B6:7E:2E:A1:68:A7
            X509v3 Authority Key Identifier:
                keyid:A4:A4:32:E6:3D:F7:D4:1D:50:FA:DC:5A:64:69:97:4D:42:C4:47:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/A4A432E63DF7D41D50FADC5A6469974D42C44738.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4A432E63DF7D41D50FADC5A6469974D42C44738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a33313a3a2f34382d3438203d3e20323635333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e30:31::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:87:66:86:8f:32:16:42:76:09:a2:2e:4a:00:78:e3:6f:53:
         b3:49:b4:80:61:2a:36:00:d2:e1:45:f0:dc:bc:d7:d7:82:f4:
         27:18:ec:99:78:b1:e5:12:95:40:d4:3d:d9:1e:7b:59:89:0d:
         3f:ff:d0:c3:3b:dc:33:8d:76:b9:72:ec:90:a1:d6:30:0a:a8:
         e0:f6:bc:21:5c:59:97:27:4b:ca:be:0f:0f:2a:9c:a2:91:2a:
         39:9d:34:a9:df:1d:1d:5e:ab:b4:de:a1:8e:9d:21:28:7a:84:
         b4:21:78:2c:33:89:5e:7a:0a:3e:ba:2c:21:2b:94:a3:f7:80:
         73:9a:81:a6:b3:cd:1a:c6:06:00:20:83:56:3b:79:03:68:5b:
         98:5f:7a:fd:87:c8:96:f3:97:51:23:26:38:ab:3a:78:26:4f:
         a3:21:2c:91:f7:17:ce:18:93:ac:db:03:67:0b:c2:65:ab:63:
         7f:d6:98:0a:1c:3d:f3:2d:9d:58:cb:24:63:2e:7c:68:51:cd:
         78:d0:3a:20:75:50:29:54:c8:6d:99:77:cd:55:f9:83:27:64:
         6f:d7:cc:6d:3c:85:93:44:7b:89:44:b1:b4:c2:78:6c:f0:0b:
         ff:60:5b:98:8f:df:a2:9f:0f:e7:03:5e:88:72:fa:08:31:c1:
         e6:56:09:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:01:53 2025 by rpki-client