Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/1/323830343a383833383a3a2f33322d3334203d3e20323633303237.roa
File:                     323830343a383833383a3a2f33322d3334203d3e20323633303237.roa (raw, json)
Hash identifier:          yLwqeETyei+PFQOm8CnaXk3uxq9WWe/52oucl6Z9UsQ=
Subject key identifier:   F4:52:48:57:70:14:46:30:22:A2:6A:83:C3:B5:BA:FD:B4:68:3B:B1
Certificate issuer:       /CN=D0A1149273197F052C828789EFA0AE353109D430
Certificate serial:       7030094EFCE2FB16736A06F0E462134D721A206A
Authority key identifier: D0:A1:14:92:73:19:7F:05:2C:82:87:89:EF:A0:AE:35:31:09:D4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1149273197F052C828789EFA0AE353109D430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/1/323830343a383833383a3a2f33322d3334203d3e20323633303237.roa
Signing time:             Thu 06 Mar 2025 05:02:20 +0000
ROA not before:           Thu 06 Mar 2025 04:57:20 +0000
ROA not after:            Thu 05 Mar 2026 05:02:20 +0000
asID:                     263027
IP address blocks:        2804:8838::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/1/D0A1149273197F052C828789EFA0AE353109D430.crl
                          rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/1/D0A1149273197F052C828789EFA0AE353109D430.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1149273197F052C828789EFA0AE353109D430.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:30:09:4e:fc:e2:fb:16:73:6a:06:f0:e4:62:13:4d:72:1a:20:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A1149273197F052C828789EFA0AE353109D430
        Validity
            Not Before: Mar  6 04:57:20 2025 GMT
            Not After : Mar  5 05:02:20 2026 GMT
        Subject: CN=F45248577014463022A26A83C3B5BAFDB4683BB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b8:21:41:89:71:01:81:0e:be:d3:16:08:1e:
                    e7:08:f9:a7:ce:eb:cb:09:44:01:b2:47:3c:c5:cd:
                    a9:18:8e:e2:af:82:c2:6f:89:55:2f:d0:ff:b1:87:
                    2e:18:2e:fa:74:8a:93:51:e2:75:d7:b1:87:80:b0:
                    a3:a6:66:68:27:94:50:f8:ae:17:77:1c:cf:98:a0:
                    56:6d:9b:58:81:ad:00:e7:dd:76:0a:53:cb:88:e5:
                    70:ee:84:f9:89:f5:48:b1:b3:79:e7:9b:88:39:4a:
                    3b:f0:26:cd:9f:be:9a:ce:9f:53:45:c3:a8:cc:5f:
                    c4:2d:f8:6e:8f:a9:79:c5:85:9c:93:0f:e6:5e:a0:
                    98:c6:85:cc:52:51:87:35:a2:8d:86:56:9c:b6:f8:
                    d1:fe:ae:77:5e:94:ff:12:73:91:43:35:70:7b:32:
                    91:84:68:72:8c:08:e4:99:d3:cd:c2:dc:b5:a5:0f:
                    80:12:75:ca:09:dd:92:20:d4:9a:86:43:63:03:a6:
                    1a:a2:88:8e:2f:11:33:e7:05:de:9c:00:64:d4:37:
                    c9:5f:21:55:f5:c9:32:4a:b5:9f:a9:98:f1:75:59:
                    df:37:e8:29:9a:c7:02:cf:cf:a0:09:9d:e8:cd:3f:
                    e0:58:67:1a:31:c2:82:45:da:72:d5:7f:3d:e8:7e:
                    2f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:52:48:57:70:14:46:30:22:A2:6A:83:C3:B5:BA:FD:B4:68:3B:B1
            X509v3 Authority Key Identifier:
                keyid:D0:A1:14:92:73:19:7F:05:2C:82:87:89:EF:A0:AE:35:31:09:D4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/1/D0A1149273197F052C828789EFA0AE353109D430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1149273197F052C828789EFA0AE353109D430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/1/323830343a383833383a3a2f33322d3334203d3e20323633303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8838::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:32:48:4d:df:2d:66:6c:7d:31:07:82:0c:d3:dd:c0:29:f5:
         9d:93:0b:cc:48:73:b7:8b:5f:c9:a7:54:e6:ac:7e:4d:a6:8b:
         f2:49:25:75:31:c6:2e:69:47:92:92:1a:b8:75:7d:58:be:e9:
         47:96:4e:19:b4:3a:32:78:fa:8f:67:6d:ab:2c:bc:58:30:a3:
         66:a8:4d:d9:3f:9e:36:67:bf:ed:bd:1d:6f:8a:e4:5e:ae:e8:
         95:e9:76:71:69:e1:69:b9:86:58:dd:c4:10:a3:f0:d1:8d:c7:
         b0:62:90:58:b6:28:49:24:d9:65:a0:e0:ae:f2:c8:18:d1:12:
         1f:9b:42:eb:9a:e4:f9:31:06:4d:96:40:6e:77:af:7c:2e:35:
         a4:e1:7e:5c:7b:8e:7a:f3:64:03:7c:49:77:3f:96:3a:cb:15:
         bc:ea:50:74:a5:2b:0b:4b:70:2a:b5:d6:4f:39:19:d1:ac:f6:
         4a:3e:b6:f2:33:c6:21:12:fa:b1:bc:91:b8:ad:95:44:c0:18:
         1c:86:ee:bb:e6:e7:5c:fc:58:cf:1f:28:2b:38:30:56:d6:22:
         19:84:d0:9a:a5:96:d7:d5:6a:02:43:3e:89:2f:ba:a8:82:09:
         d0:4d:ae:45:33:c1:6f:d5:a7:26:c5:d6:e0:70:85:9b:c1:95:
         ff:53:99:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:02:29 2025 by rpki-client