Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/0/323830343a383064303a3a2f33322d3438203d3e20323732343134.roa
File:                     323830343a383064303a3a2f33322d3438203d3e20323732343134.roa (raw, json)
Hash identifier:          sh147tBt+YHbIwahGVX9LMNScdfcRqIUUGstylUkZzo=
Subject key identifier:   E5:F4:F9:29:86:9E:FA:54:40:4D:EE:3A:EA:81:34:D3:61:F3:BF:77
Certificate issuer:       /CN=5B02344955F090AA9E94D77E6A51E3ED2C7509E6
Certificate serial:       01219D6E833C31B25B0E1F98D0D5996818F09323
Authority key identifier: 5B:02:34:49:55:F0:90:AA:9E:94:D7:7E:6A:51:E3:ED:2C:75:09:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B02344955F090AA9E94D77E6A51E3ED2C7509E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/0/323830343a383064303a3a2f33322d3438203d3e20323732343134.roa
Signing time:             Wed 05 Mar 2025 12:31:04 +0000
ROA not before:           Wed 05 Mar 2025 12:26:04 +0000
ROA not after:            Wed 04 Mar 2026 12:31:04 +0000
asID:                     272414
IP address blocks:        2804:80d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/0/5B02344955F090AA9E94D77E6A51E3ED2C7509E6.crl
                          rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/0/5B02344955F090AA9E94D77E6A51E3ED2C7509E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B02344955F090AA9E94D77E6A51E3ED2C7509E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 07:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:21:9d:6e:83:3c:31:b2:5b:0e:1f:98:d0:d5:99:68:18:f0:93:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B02344955F090AA9E94D77E6A51E3ED2C7509E6
        Validity
            Not Before: Mar  5 12:26:04 2025 GMT
            Not After : Mar  4 12:31:04 2026 GMT
        Subject: CN=E5F4F929869EFA54404DEE3AEA8134D361F3BF77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c0:00:58:1d:8d:cf:01:2c:a4:7d:4f:d4:91:
                    4f:59:df:88:0f:f3:8a:74:52:04:1a:34:cb:f8:57:
                    a2:ad:ca:b2:ed:06:dd:32:ad:a8:30:ab:1d:ba:ea:
                    86:46:47:10:24:89:76:a1:a0:e6:bc:46:38:a2:23:
                    e5:2b:40:0f:26:23:0a:df:b5:8a:63:6b:ed:1d:59:
                    62:dc:21:39:bf:15:99:3c:3d:4e:91:a3:bd:7e:34:
                    12:e6:2b:9a:1d:0d:2f:99:8c:79:91:a6:e9:9e:b7:
                    3c:a3:31:0c:a1:72:06:fc:26:19:a7:bc:0b:e4:52:
                    1d:78:b1:73:e1:54:db:1a:9b:54:62:30:1d:e5:20:
                    d4:89:87:a7:37:a3:b5:e1:90:71:87:47:6f:dc:53:
                    6c:01:e4:21:03:41:45:2d:72:7a:ef:c4:46:a6:6b:
                    cc:92:b7:59:7f:5a:42:94:83:96:68:af:d6:89:1f:
                    56:5e:d6:38:2c:95:3b:91:0f:c0:78:3c:25:62:f9:
                    7b:78:70:14:b2:b2:49:c3:6c:e0:e4:0c:64:2c:c7:
                    37:e3:02:0a:e2:95:55:76:0b:9d:ab:3f:f4:d7:8e:
                    f2:8c:7a:e9:33:6e:a1:0e:b8:60:00:a6:9c:a1:9b:
                    87:74:62:d0:92:fd:ac:69:32:1d:69:66:37:9c:dc:
                    db:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F4:F9:29:86:9E:FA:54:40:4D:EE:3A:EA:81:34:D3:61:F3:BF:77
            X509v3 Authority Key Identifier:
                keyid:5B:02:34:49:55:F0:90:AA:9E:94:D7:7E:6A:51:E3:ED:2C:75:09:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/0/5B02344955F090AA9E94D77E6A51E3ED2C7509E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B02344955F090AA9E94D77E6A51E3ED2C7509E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/0/323830343a383064303a3a2f33322d3438203d3e20323732343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:4a:47:dd:32:88:b3:1e:99:9e:b3:55:2a:43:f6:e3:bd:e2:
         53:04:31:e4:0d:29:9c:0f:60:87:20:54:05:72:32:73:98:32:
         c7:53:f6:0a:4b:15:82:03:05:a8:f4:db:c6:b6:61:2e:83:4b:
         79:a8:ff:5c:54:95:7d:35:b9:90:92:5e:e6:83:ba:fa:40:53:
         50:95:89:3b:7f:91:01:ae:4e:39:68:8b:1e:9e:d1:82:d1:4e:
         b8:1c:08:97:96:20:3e:c0:9b:be:45:ba:6a:c4:e4:85:ec:cd:
         2a:7b:6d:aa:a2:19:67:72:73:75:22:8c:37:49:bc:04:ca:5b:
         e8:89:ee:7b:7c:f3:b5:26:3c:f1:6f:37:ca:bb:05:54:37:0a:
         53:46:58:df:19:a8:81:55:13:fb:92:b4:61:14:31:99:8a:2c:
         56:08:05:32:03:0b:b9:61:82:e1:d6:59:09:92:fc:70:94:c0:
         cd:54:30:b2:ce:2b:aa:6e:1d:ff:28:46:14:12:44:7b:99:d2:
         9d:c0:2e:50:86:c3:ef:a3:35:fe:64:3b:82:f7:39:56:28:d6:
         4a:89:4a:7f:8f:53:06:0a:63:04:04:5e:5d:02:be:63:d1:9d:
         15:7d:aa:d5:35:88:a4:0e:a1:19:50:db:e3:ab:03:36:e1:48:
         1e:04:76:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:47:17 2025 by rpki-client