Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a33323a3a2f34382d3438203d3e20323635333330.roa
File:                     323830343a326533303a33323a3a2f34382d3438203d3e20323635333330.roa (raw, json)
Hash identifier:          NeHXKd6D7lgMTpFaJWoYIAILsBI4BJqGqSiQZk9e6PQ=
Subject key identifier:   1F:AE:CA:5A:87:0C:41:F1:B1:65:B1:F9:7B:90:7D:1A:E7:B1:39:71
Certificate issuer:       /CN=A4A432E63DF7D41D50FADC5A6469974D42C44738
Certificate serial:       4C82A24AC7C4AEBC3430BCFDD1E2FE0FBA35EFD6
Authority key identifier: A4:A4:32:E6:3D:F7:D4:1D:50:FA:DC:5A:64:69:97:4D:42:C4:47:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4A432E63DF7D41D50FADC5A6469974D42C44738.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a33323a3a2f34382d3438203d3e20323635333330.roa
Signing time:             Thu 05 Jun 2025 01:05:47 +0000
ROA not before:           Thu 05 Jun 2025 01:00:47 +0000
ROA not after:            Thu 04 Jun 2026 01:05:47 +0000
asID:                     265330
IP address blocks:        2804:2e30:32::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/A4A432E63DF7D41D50FADC5A6469974D42C44738.crl
                          rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/A4A432E63DF7D41D50FADC5A6469974D42C44738.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4A432E63DF7D41D50FADC5A6469974D42C44738.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 04:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:82:a2:4a:c7:c4:ae:bc:34:30:bc:fd:d1:e2:fe:0f:ba:35:ef:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4A432E63DF7D41D50FADC5A6469974D42C44738
        Validity
            Not Before: Jun  5 01:00:47 2025 GMT
            Not After : Jun  4 01:05:47 2026 GMT
        Subject: CN=1FAECA5A870C41F1B165B1F97B907D1AE7B13971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:90:4d:79:6b:31:db:2d:cc:ab:46:3c:9b:e6:
                    d5:ac:57:03:40:ab:5f:04:a9:f7:a6:d4:5d:4b:91:
                    46:62:e1:1f:b1:d3:ad:6e:2a:3c:9a:87:3f:35:7d:
                    f2:7b:a5:dd:58:d5:a8:4d:77:43:7e:72:ef:b8:02:
                    36:79:3e:8d:8d:a9:aa:5f:3a:81:42:ff:a6:ee:0a:
                    2d:cd:a9:b5:be:20:01:7e:3d:45:b5:bf:f0:f4:94:
                    f4:f0:2c:be:1b:b8:9b:93:4f:02:41:4c:c6:99:d5:
                    b5:93:5f:cb:b0:8a:da:24:ff:5b:c3:fa:5e:f3:30:
                    22:2d:02:bf:69:4d:4b:1c:de:5a:5b:bf:6e:89:eb:
                    aa:df:80:cb:d4:bf:26:91:6f:51:db:66:39:d9:bc:
                    13:4a:39:cd:7c:17:50:20:c9:45:e0:71:8a:8e:ae:
                    3c:02:a4:f5:64:40:57:25:85:97:53:87:a9:52:96:
                    15:7a:e1:4e:a0:fb:a3:c8:45:7e:84:58:0c:64:8f:
                    27:fe:bf:44:6d:39:88:65:4f:2f:29:8d:d5:63:35:
                    66:16:82:d5:89:3f:b5:6f:d1:da:b3:47:21:4c:ac:
                    e5:fb:46:3c:5a:d8:3c:86:ce:1a:7d:1b:cb:d1:66:
                    3c:fb:d1:4f:3b:a0:a8:a9:c1:f2:63:c5:10:e9:2f:
                    3d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AE:CA:5A:87:0C:41:F1:B1:65:B1:F9:7B:90:7D:1A:E7:B1:39:71
            X509v3 Authority Key Identifier:
                keyid:A4:A4:32:E6:3D:F7:D4:1D:50:FA:DC:5A:64:69:97:4D:42:C4:47:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/A4A432E63DF7D41D50FADC5A6469974D42C44738.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4A432E63DF7D41D50FADC5A6469974D42C44738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a33323a3a2f34382d3438203d3e20323635333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e30:32::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:d5:a8:0d:93:d9:29:bb:ad:50:49:b0:42:3e:0d:b4:c0:a2:
         1a:b0:51:b4:dc:00:f6:d6:0e:44:6f:f1:38:5f:61:72:0d:dd:
         86:fe:23:97:28:98:7d:c9:09:01:23:6b:df:c3:0e:f2:c3:f1:
         24:14:6e:e7:6d:32:0b:74:e6:42:fd:c6:0e:7c:df:02:b3:2f:
         ae:1b:f4:18:59:e7:56:c4:19:f2:c3:0d:ec:68:93:71:c2:d3:
         0c:d6:67:bd:62:5c:b1:19:81:7d:7e:ae:89:56:bc:60:9b:5c:
         d5:84:83:23:8d:36:eb:b7:13:c9:2d:84:93:39:11:72:7e:52:
         e7:67:51:51:af:44:11:b5:f0:39:3b:ad:7d:ad:d8:97:ca:85:
         e9:2d:75:5f:bf:7e:38:6c:4e:49:ed:1c:c6:92:72:4f:9c:cc:
         dd:b8:26:77:a9:02:1f:a4:ca:05:6e:11:e0:53:e1:78:36:6d:
         2d:33:47:16:fe:d5:b5:55:10:eb:8b:7d:11:9a:af:2f:c5:ce:
         00:7c:71:25:f9:30:99:aa:ee:94:36:6e:5d:c5:d5:ae:c4:14:
         ec:c2:4e:46:e5:4f:53:a1:59:f6:8c:73:47:f1:c7:65:bf:c0:
         33:86:40:36:49:e3:75:aa:13:3c:e1:e8:18:81:58:70:d7:4f:
         15:12:6a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:44:45 2025 by rpki-client