Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a333a3a2f34382d3438203d3e20323730363330.roa
File:                     323830343a366566383a333a3a2f34382d3438203d3e20323730363330.roa (raw, json)
Hash identifier:          vVoUu1sd7Pfau3vSalaM9r9zP3hYjBDZctyQgcq1ZkI=
Subject key identifier:   81:97:02:E9:C6:D7:FD:1D:75:F3:98:05:81:89:19:30:80:42:6A:29
Certificate issuer:       /CN=F7FDF8A9EE071B0475D890E4E63DFDC5219615DB
Certificate serial:       5224C4407A404F758C72A7065A12B6A9774F136D
Authority key identifier: F7:FD:F8:A9:EE:07:1B:04:75:D8:90:E4:E6:3D:FD:C5:21:96:15:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a333a3a2f34382d3438203d3e20323730363330.roa
Signing time:             Tue 25 Mar 2025 20:18:19 +0000
ROA not before:           Tue 25 Mar 2025 20:13:19 +0000
ROA not after:            Tue 24 Mar 2026 20:18:19 +0000
asID:                     270630
IP address blocks:        2804:6ef8:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.crl
                          rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:24:c4:40:7a:40:4f:75:8c:72:a7:06:5a:12:b6:a9:77:4f:13:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7FDF8A9EE071B0475D890E4E63DFDC5219615DB
        Validity
            Not Before: Mar 25 20:13:19 2025 GMT
            Not After : Mar 24 20:18:19 2026 GMT
        Subject: CN=819702E9C6D7FD1D75F398058189193080426A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:44:99:e4:31:0c:2e:1d:19:3f:14:f6:01:8e:
                    20:d3:53:0d:b1:6e:a6:19:cb:5e:2c:1a:43:04:53:
                    80:3a:06:49:70:93:49:c2:78:df:12:49:50:2e:6a:
                    24:da:1f:b2:cd:60:7b:f8:e5:3b:45:7f:d8:36:af:
                    2f:48:a0:31:cc:8b:d8:c8:73:99:1a:51:8a:9f:d7:
                    e3:b6:14:54:3e:76:30:8b:14:0c:2a:93:cb:9f:50:
                    90:4c:f3:66:44:82:ed:94:da:87:3b:f8:d2:6f:36:
                    b0:60:c7:93:a6:d6:07:39:c0:8d:e4:e4:21:92:44:
                    f6:11:98:72:67:9d:16:75:60:ba:c0:2e:bb:bd:d7:
                    dd:4e:f8:ae:ac:5e:1e:a7:af:db:ab:a7:46:0d:b1:
                    b0:99:f2:49:72:a5:ed:76:c0:a9:ec:f1:70:47:ec:
                    ed:fd:6b:c2:c4:05:25:ea:d0:ae:e4:9d:55:d6:e6:
                    d6:f4:c8:cf:87:46:f4:94:c2:dd:69:7b:b3:2c:ae:
                    39:4a:ee:c0:6e:e8:38:8c:cd:ea:89:4d:23:dc:f1:
                    ab:91:a8:6f:48:c2:61:28:3c:0e:a8:77:54:4e:bb:
                    b8:3c:5a:37:c9:f0:25:c9:92:9a:8b:1d:9a:74:95:
                    cc:cd:13:a6:0c:30:a0:50:92:63:43:f1:9e:41:d6:
                    37:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:97:02:E9:C6:D7:FD:1D:75:F3:98:05:81:89:19:30:80:42:6A:29
            X509v3 Authority Key Identifier:
                keyid:F7:FD:F8:A9:EE:07:1B:04:75:D8:90:E4:E6:3D:FD:C5:21:96:15:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a333a3a2f34382d3438203d3e20323730363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ef8:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:14:c3:5e:d9:19:c3:60:4c:53:80:3f:81:f0:3a:1b:b7:14:
         06:ca:ca:37:b3:da:c3:b3:41:d7:b1:d8:b4:01:bd:bd:e0:28:
         b5:4b:99:4f:f0:12:24:ed:c9:82:cd:42:52:78:1c:ae:ec:8a:
         73:0a:ad:e2:41:94:74:50:4a:8e:c6:fb:7a:cd:46:e4:ad:e3:
         0c:0b:fd:bf:3e:08:b4:0f:f7:32:3d:3d:32:14:2d:a5:da:6a:
         87:ff:74:61:0b:37:e8:b8:89:78:fd:a5:f1:b3:4a:c6:e1:0b:
         b3:1f:09:b0:6a:59:e6:37:16:2e:cd:17:66:35:79:6e:0c:c9:
         ca:d9:45:fc:aa:56:e8:b8:70:69:55:31:25:97:5d:d0:c7:36:
         e5:09:d8:f2:2f:03:04:14:67:af:ce:1f:cb:b2:05:0e:68:a4:
         ab:36:a3:95:ef:59:e2:3f:4c:94:7f:aa:9e:d4:b3:21:b3:df:
         af:4f:fc:59:a4:a9:66:3c:d6:3c:27:6d:ec:1d:74:28:a7:2a:
         f6:29:61:5d:4c:dd:e6:20:0d:7a:5d:4a:3f:bd:22:82:2c:6f:
         78:34:5d:11:37:e5:38:ce:ba:b2:97:80:d7:f3:72:c7:7e:1e:
         fb:91:e8:72:eb:f9:68:83:2f:54:ca:cd:04:9b:90:a7:2f:21:
         09:2b:b9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:24:22 2025 by rpki-client