Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a3a2f33332d3333203d3e20323731303031.roa
File:                     323830343a373463303a3a2f33332d3333203d3e20323731303031.roa (raw, json)
Hash identifier:          5v+nTMwCioWhJD/VGCThgGl+n+v8/kmfzVRrtFEM0GU=
Subject key identifier:   42:57:64:EC:BF:D3:51:01:02:31:62:67:6F:6B:E4:AF:F1:13:2B:32
Certificate issuer:       /CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
Certificate serial:       4E0B0D1A854E268E1855A4E3AEE3A004222D7A86
Authority key identifier: B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a3a2f33332d3333203d3e20323731303031.roa
Signing time:             Thu 06 Mar 2025 02:14:52 +0000
ROA not before:           Thu 06 Mar 2025 02:09:52 +0000
ROA not after:            Thu 05 Mar 2026 02:14:52 +0000
asID:                     271001
IP address blocks:        2804:74c0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl
                          rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 11:24:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:0b:0d:1a:85:4e:26:8e:18:55:a4:e3:ae:e3:a0:04:22:2d:7a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
        Validity
            Not Before: Mar  6 02:09:52 2025 GMT
            Not After : Mar  5 02:14:52 2026 GMT
        Subject: CN=425764ECBFD35101023162676F6BE4AFF1132B32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c5:53:df:e9:3d:69:51:4d:2e:e8:51:a5:a7:
                    5b:4a:42:6a:83:6e:c9:a7:43:93:9f:35:d3:cd:d4:
                    fd:b9:b5:87:a0:de:54:89:84:26:31:81:22:c4:e4:
                    76:72:0d:a1:ca:de:56:43:bd:7a:aa:0e:6d:b5:45:
                    ee:1f:e8:57:6b:98:31:ba:0f:64:93:7f:91:ad:7e:
                    98:14:e6:91:5b:9e:d4:71:82:aa:67:1d:76:c5:d6:
                    6e:42:70:8a:4d:c4:aa:95:d4:a1:a1:f8:05:9d:49:
                    1e:f6:0a:b9:a1:5f:72:94:8c:e3:32:b6:8e:e9:b7:
                    41:6d:10:ca:cf:c7:9b:ac:d6:d3:6e:c9:45:8f:7f:
                    65:72:ee:0c:7b:7a:29:c6:67:1a:15:e9:df:91:f1:
                    07:50:86:96:3b:bc:86:28:d2:d3:0d:d8:c5:7d:7b:
                    8d:9e:7f:80:81:07:c9:7b:6f:57:5b:8b:32:e1:60:
                    f4:f3:b8:e8:7b:95:fd:2c:ed:25:f7:eb:ca:67:9e:
                    42:9d:90:50:8c:fa:7f:05:f1:c9:74:7c:7b:67:b0:
                    93:39:b8:85:6f:11:f6:42:e4:dd:e3:12:28:2a:af:
                    c2:1a:ab:4f:08:91:ad:aa:e0:91:04:e7:c2:f8:c7:
                    29:62:8e:86:e0:ba:5a:27:a8:39:7c:3c:60:e6:af:
                    8e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:57:64:EC:BF:D3:51:01:02:31:62:67:6F:6B:E4:AF:F1:13:2B:32
            X509v3 Authority Key Identifier:
                keyid:B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a3a2f33332d3333203d3e20323731303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74c0::/33

    Signature Algorithm: sha256WithRSAEncryption
         03:c6:16:1b:6d:a1:e1:1d:17:30:53:5d:1c:c9:5b:04:82:bf:
         54:0b:6d:0c:f9:1a:dd:7b:44:dc:fd:66:d0:df:05:c3:87:24:
         6a:79:31:53:29:29:99:73:cb:b0:c5:3c:53:95:60:14:02:2c:
         3a:4e:a4:74:df:d2:93:bc:7a:0a:03:14:ae:94:36:90:77:18:
         0d:d1:cb:3e:c2:e8:9c:c9:4b:c1:f4:6e:b0:81:1d:d2:18:2e:
         b2:23:82:bb:54:1d:fe:c0:3c:d8:00:13:6b:f6:69:5f:8d:03:
         6b:c9:42:9f:71:dd:72:1e:23:69:b9:6e:b2:7f:21:67:08:a7:
         7c:b1:d5:1b:b7:33:9a:a6:c1:f2:93:23:7c:07:27:bf:9a:4e:
         25:f5:d8:a2:af:27:9e:29:08:e0:5c:b1:5b:46:d8:91:25:f1:
         7d:7d:e5:62:ca:51:f3:6e:20:80:b5:1b:4f:e8:7c:ad:a0:c2:
         0a:96:b0:79:ce:cb:b8:08:df:bb:09:1e:6d:5f:3f:ac:72:79:
         a5:d3:cc:41:4e:08:91:4f:33:df:db:80:25:e4:4a:bb:8f:be:
         66:99:9e:2b:ac:1a:5a:47:2e:fa:39:7c:e9:73:cc:36:57:e0:
         01:15:2a:01:b0:2e:96:1d:99:40:5c:85:c6:fb:30:4a:70:96:
         74:8e:fb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:40:39 2025 by rpki-client