Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CVDs6Lem3ghzsSBziGnD5Tqc59GjvKbRxQet3Sd5z1Jn/1/323830343a386534303a3a2f33322d3438203d3e20323733343133.roa
File:                     323830343a386534303a3a2f33322d3438203d3e20323733343133.roa (raw, json)
Hash identifier:          Mg2fs/jQTgZh4PS/XcxrlaUXKRGgZyNbTk667p3feag=
Subject key identifier:   A4:FC:59:FD:F5:09:C1:53:18:27:57:82:A9:F7:96:94:8E:94:04:20
Certificate issuer:       /CN=E2B997C368F2437649235F4F07E88EEA4077F3A7
Certificate serial:       3CAE29CF1FC5A3ED7DE9765622ACFA6031270880
Authority key identifier: E2:B9:97:C3:68:F2:43:76:49:23:5F:4F:07:E8:8E:EA:40:77:F3:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2B997C368F2437649235F4F07E88EEA4077F3A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVDs6Lem3ghzsSBziGnD5Tqc59GjvKbRxQet3Sd5z1Jn/1/323830343a386534303a3a2f33322d3438203d3e20323733343133.roa
Signing time:             Thu 06 Mar 2025 20:40:32 +0000
ROA not before:           Thu 06 Mar 2025 20:35:32 +0000
ROA not after:            Thu 05 Mar 2026 20:40:32 +0000
asID:                     273413
IP address blocks:        2804:8e40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CVDs6Lem3ghzsSBziGnD5Tqc59GjvKbRxQet3Sd5z1Jn/1/E2B997C368F2437649235F4F07E88EEA4077F3A7.crl
                          rsync://rpki-repo.registro.br/repo/CVDs6Lem3ghzsSBziGnD5Tqc59GjvKbRxQet3Sd5z1Jn/1/E2B997C368F2437649235F4F07E88EEA4077F3A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2B997C368F2437649235F4F07E88EEA4077F3A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 17:25:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ae:29:cf:1f:c5:a3:ed:7d:e9:76:56:22:ac:fa:60:31:27:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2B997C368F2437649235F4F07E88EEA4077F3A7
        Validity
            Not Before: Mar  6 20:35:32 2025 GMT
            Not After : Mar  5 20:40:32 2026 GMT
        Subject: CN=A4FC59FDF509C15318275782A9F796948E940420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:52:d7:22:4e:3e:69:e3:05:70:bd:4b:5d:7e:
                    94:45:43:b1:e4:53:fd:f3:7f:80:c6:3a:c1:d0:90:
                    28:b3:af:d8:93:b4:b1:43:f8:1f:f1:58:3a:27:03:
                    62:ae:54:99:84:c3:86:f7:43:2e:25:7a:4e:cb:11:
                    30:6f:c5:29:fc:86:31:f8:d6:71:9b:57:2a:f0:61:
                    68:e0:68:6a:e3:fc:d1:62:a1:01:15:72:d2:79:96:
                    da:03:1e:d3:0b:85:1d:b5:f8:02:d5:83:09:c3:a8:
                    1e:8e:8e:0f:40:45:60:03:b4:da:6f:a4:37:0a:aa:
                    8f:61:f4:96:e4:01:d8:57:0a:dc:c9:d7:1a:f4:ac:
                    aa:d5:7d:b7:68:7d:dd:01:3b:b3:2f:ff:c0:9c:d6:
                    49:9c:cd:79:59:57:66:fd:77:0a:ac:9b:08:02:af:
                    6d:ca:d4:57:d5:91:08:9a:7e:ce:1b:dc:bb:e2:d4:
                    b1:8e:52:a6:45:ba:f9:b9:5f:8a:46:ab:7c:d6:15:
                    a6:a2:d4:a2:6b:bd:19:e0:f9:44:72:ff:84:4d:62:
                    ea:fe:79:18:cf:b2:ad:e1:b1:65:f1:21:31:41:80:
                    de:9e:37:7b:4a:6e:f7:a7:3d:cf:0c:6c:75:14:3b:
                    68:03:df:09:02:ff:e8:ff:8d:97:93:90:87:3d:07:
                    7f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FC:59:FD:F5:09:C1:53:18:27:57:82:A9:F7:96:94:8E:94:04:20
            X509v3 Authority Key Identifier:
                keyid:E2:B9:97:C3:68:F2:43:76:49:23:5F:4F:07:E8:8E:EA:40:77:F3:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVDs6Lem3ghzsSBziGnD5Tqc59GjvKbRxQet3Sd5z1Jn/1/E2B997C368F2437649235F4F07E88EEA4077F3A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2B997C368F2437649235F4F07E88EEA4077F3A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVDs6Lem3ghzsSBziGnD5Tqc59GjvKbRxQet3Sd5z1Jn/1/323830343a386534303a3a2f33322d3438203d3e20323733343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:29:30:07:14:d1:fa:7c:49:d1:a9:7c:25:9b:e7:b7:41:b9:
         1d:14:5c:45:84:c6:aa:a1:a1:51:05:3c:5c:59:67:8b:82:a6:
         a6:18:6c:98:69:f5:b9:66:77:99:75:df:8a:99:03:cf:aa:fc:
         79:64:56:c5:5f:c4:2e:2f:4e:57:69:74:ab:68:78:84:91:e1:
         75:64:89:25:08:02:9e:8b:ae:04:7a:74:c0:a1:09:53:23:5f:
         f9:bb:09:50:c5:ef:a7:d7:59:e8:b3:5e:c7:38:5d:00:43:74:
         fd:3a:23:7f:2b:0b:f5:0b:c5:f8:87:76:1c:7f:bb:77:0d:ac:
         28:13:d7:22:74:02:3d:88:89:6d:df:2c:41:8d:bc:d5:92:a0:
         3a:02:59:97:85:79:93:1f:67:c1:b9:58:2c:90:fc:db:ab:a6:
         5c:3c:5e:2b:3f:7c:e8:4d:99:dd:4b:dd:88:2d:bb:df:9d:99:
         61:18:99:7e:f8:2f:6c:35:21:43:a9:eb:ac:03:3a:4e:5e:8b:
         57:71:ad:e1:51:1a:16:95:bd:fe:f5:10:ba:3a:ff:9f:e1:83:
         e4:f7:ea:cb:26:1c:ee:89:88:ad:14:21:01:bc:57:d7:c2:ee:
         d1:49:86:58:b6:14:93:4d:58:47:f4:e3:15:ce:18:8d:6a:71:
         3f:61:46:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 01:56:32 2025 by rpki-client