Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/323830343a316161303a3a2f33322d3438203d3e203631383732.roa
File:                     323830343a316161303a3a2f33322d3438203d3e203631383732.roa (raw, json)
Hash identifier:          zSptNN8DkmF10Nv+nlCLUTysqOi1fB0W3pY01wsysuw=
Subject key identifier:   AE:5F:0D:03:55:04:DE:9A:CB:F4:47:79:91:4D:1E:F6:DA:F6:1D:15
Certificate issuer:       /CN=0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15
Certificate serial:       08E18336A14C2AD842BBED0530E11A8827225BEB
Authority key identifier: 0D:D1:1D:4F:F8:DA:D9:A5:64:9C:8F:13:53:D4:14:BB:EF:B7:BC:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/323830343a316161303a3a2f33322d3438203d3e203631383732.roa
Signing time:             Wed 12 Feb 2025 20:28:17 +0000
ROA not before:           Wed 12 Feb 2025 20:23:17 +0000
ROA not after:            Wed 11 Feb 2026 20:28:17 +0000
asID:                     61872
IP address blocks:        2804:1aa0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl
                          rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e1:83:36:a1:4c:2a:d8:42:bb:ed:05:30:e1:1a:88:27:22:5b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15
        Validity
            Not Before: Feb 12 20:23:17 2025 GMT
            Not After : Feb 11 20:28:17 2026 GMT
        Subject: CN=AE5F0D035504DE9ACBF44779914D1EF6DAF61D15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:70:81:b7:4d:fd:ca:a3:78:e6:fc:e6:1a:7e:
                    31:a9:fd:2c:e8:ea:1e:4c:eb:74:43:15:86:8a:cb:
                    eb:88:e0:d0:3c:99:a9:dd:fb:e9:d5:16:84:85:d2:
                    58:74:20:dc:f8:c8:e6:58:64:8e:e9:b7:42:7e:c2:
                    42:98:a2:27:32:17:70:9f:0f:13:19:59:7e:0a:a2:
                    c3:e9:7f:d3:d9:45:24:02:36:7e:e7:bc:5c:61:0a:
                    ee:22:7b:1b:64:ab:61:5e:03:ed:ef:79:ac:d3:b4:
                    da:d4:3e:65:b4:19:aa:1e:10:0d:61:84:05:e2:ba:
                    73:fe:a5:4b:22:53:59:0e:ce:10:84:e2:6c:07:5d:
                    16:cb:21:19:9e:db:c0:0e:f6:2c:bf:76:66:4d:c7:
                    d5:ea:35:0d:64:70:4b:aa:a3:30:d7:77:0a:9c:70:
                    4b:e3:0a:ea:77:f6:41:e5:09:4b:78:a4:f8:aa:59:
                    a6:9b:b1:48:3e:26:74:c3:ad:23:d5:48:6c:cd:d4:
                    3b:2a:7c:5e:9d:91:f5:ca:e9:f9:19:3c:fd:90:24:
                    6c:f9:00:38:ad:92:41:1f:8e:aa:06:40:8d:37:61:
                    eb:eb:51:38:6f:67:37:55:00:04:02:6d:f5:63:2d:
                    f4:b9:58:7f:84:b8:de:05:ba:e9:7d:38:0e:ce:9c:
                    61:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5F:0D:03:55:04:DE:9A:CB:F4:47:79:91:4D:1E:F6:DA:F6:1D:15
            X509v3 Authority Key Identifier:
                keyid:0D:D1:1D:4F:F8:DA:D9:A5:64:9C:8F:13:53:D4:14:BB:EF:B7:BC:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/323830343a316161303a3a2f33322d3438203d3e203631383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1aa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:a7:3f:ea:10:44:13:3b:5d:b7:dc:92:b7:40:e4:fa:41:9d:
         5b:48:7e:6a:1f:2c:ef:a2:23:03:12:99:c9:b4:8a:4e:22:ed:
         a8:c2:ec:80:e5:2e:c8:12:5e:cf:81:ea:34:78:38:0d:1a:8c:
         a6:d6:15:b4:34:f0:8b:ad:34:75:c2:7a:09:09:82:bd:a1:79:
         48:1c:ca:93:a6:e9:8b:5e:3c:55:f6:d8:cb:99:8f:eb:98:37:
         91:b1:95:dd:e2:33:f9:e2:f3:11:20:da:a9:e6:ce:8e:13:cc:
         a6:2f:3a:69:0d:fe:0a:b6:fb:6f:c3:7d:fd:de:c8:1e:9d:db:
         a4:61:ee:39:76:06:0b:14:0d:7f:aa:32:2e:9d:d0:8d:e0:c7:
         28:63:8e:0a:28:f6:23:79:0b:85:2c:69:f6:cc:ed:7b:ad:3d:
         a1:14:b1:b5:e8:a0:51:34:8b:14:84:16:08:5b:7d:a1:24:b0:
         74:0e:06:61:99:db:23:b3:87:51:8e:b4:eb:51:27:e3:7b:9e:
         96:76:06:99:e5:03:ef:67:72:f7:66:97:37:6d:e3:da:94:30:
         3e:87:6c:ae:c2:a4:42:6d:48:eb:8f:48:90:f3:e8:df:8d:f4:
         e0:90:07:ab:30:1c:cf:d7:38:d2:64:eb:c5:59:d1:84:47:2f:
         8b:ad:56:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:32:17 2025 by rpki-client