Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/323830343a323536343a3a2f33322d3438203d3e20323634323738.roa
File:                     323830343a323536343a3a2f33322d3438203d3e20323634323738.roa (raw, json)
Hash identifier:          hwI9Lx8eXL6hL8amqiuiKV4/6lww3VpBKgW99nfA4/g=
Subject key identifier:   17:8B:38:27:16:77:54:B9:47:3B:A1:66:45:87:B2:65:6F:ED:D1:0C
Certificate issuer:       /CN=E501E8B7D257D1E26AF1E28413D4F5DD19579534
Certificate serial:       2691226D6C4DD250C6380F12D495274E540C3E46
Authority key identifier: E5:01:E8:B7:D2:57:D1:E2:6A:F1:E2:84:13:D4:F5:DD:19:57:95:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E501E8B7D257D1E26AF1E28413D4F5DD19579534.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/323830343a323536343a3a2f33322d3438203d3e20323634323738.roa
Signing time:             Fri 21 Mar 2025 15:56:52 +0000
ROA not before:           Fri 21 Mar 2025 15:51:52 +0000
ROA not after:            Fri 20 Mar 2026 15:56:52 +0000
asID:                     264278
IP address blocks:        2804:2564::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/E501E8B7D257D1E26AF1E28413D4F5DD19579534.crl
                          rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/E501E8B7D257D1E26AF1E28413D4F5DD19579534.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E501E8B7D257D1E26AF1E28413D4F5DD19579534.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 08:42:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:91:22:6d:6c:4d:d2:50:c6:38:0f:12:d4:95:27:4e:54:0c:3e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E501E8B7D257D1E26AF1E28413D4F5DD19579534
        Validity
            Not Before: Mar 21 15:51:52 2025 GMT
            Not After : Mar 20 15:56:52 2026 GMT
        Subject: CN=178B3827167754B9473BA1664587B2656FEDD10C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:59:4d:44:82:72:b5:28:df:a0:84:8b:f5:9a:
                    c5:92:62:68:f6:f9:30:6e:1b:d9:5a:ba:22:7d:8f:
                    d5:67:c4:1f:18:49:f5:e3:ab:29:97:10:74:f8:22:
                    e6:71:2c:2a:54:04:8c:45:99:3c:01:8a:fd:e1:74:
                    6f:24:81:5c:6e:94:13:f6:b2:23:94:0c:23:66:56:
                    61:a0:96:76:dd:58:70:04:25:38:4b:5a:17:93:d8:
                    99:ab:e2:1b:e6:ab:23:b5:31:8c:1f:4b:d6:83:2d:
                    dc:fc:78:1c:e2:93:b0:26:42:20:5a:fc:8f:0f:36:
                    01:dd:64:e0:06:4c:cb:0d:90:3f:aa:d5:e9:8d:5a:
                    6f:1b:a5:71:55:e5:7a:e6:79:df:37:d9:87:ce:85:
                    e2:0a:a5:60:11:e9:f5:d6:4f:7c:b1:5e:4f:c1:d8:
                    70:8d:54:c4:f7:40:98:96:d6:c0:18:98:88:4a:54:
                    87:70:e8:87:47:03:ab:e5:76:0a:3a:76:d8:22:9c:
                    f7:91:63:e6:58:35:e7:98:9a:77:dc:e8:df:d5:0f:
                    22:a5:73:79:ce:f2:50:ed:2c:55:ab:e2:5a:cd:65:
                    af:4a:ef:2b:4b:e9:f6:ac:18:1a:a0:22:87:07:41:
                    ce:0a:e2:63:23:bf:85:27:88:37:c2:b4:64:c7:6f:
                    c3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8B:38:27:16:77:54:B9:47:3B:A1:66:45:87:B2:65:6F:ED:D1:0C
            X509v3 Authority Key Identifier:
                keyid:E5:01:E8:B7:D2:57:D1:E2:6A:F1:E2:84:13:D4:F5:DD:19:57:95:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/E501E8B7D257D1E26AF1E28413D4F5DD19579534.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E501E8B7D257D1E26AF1E28413D4F5DD19579534.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/323830343a323536343a3a2f33322d3438203d3e20323634323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2564::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:a5:5a:3e:74:73:ca:64:5d:1d:7f:c2:09:72:48:a1:30:e9:
         f8:3a:db:58:86:e7:ad:32:ba:d7:4f:46:09:63:27:53:c8:df:
         2f:3d:94:67:d7:10:d9:6e:6f:bf:82:ac:17:fa:bb:c1:13:23:
         e5:ee:cf:bd:6d:45:01:61:5b:fe:3e:65:d8:c8:4a:f4:65:a5:
         ea:88:84:16:4f:03:23:ec:bb:4e:4b:16:3c:54:a4:b8:b5:51:
         e7:ca:01:5c:fd:c7:87:41:c8:2f:d2:03:10:d2:5a:7b:14:c4:
         88:4e:7c:fd:e8:ca:45:e4:1b:04:15:ca:07:ed:43:42:aa:79:
         b9:ac:80:ac:8b:4f:61:8d:6c:db:a9:3c:84:d7:87:35:9a:ba:
         b4:30:76:5d:5c:41:9a:66:1e:ee:f0:a6:56:de:fd:91:8f:67:
         5c:bc:a9:a3:3b:7d:4d:b5:f1:1a:5b:70:af:d9:54:ef:f8:71:
         c7:fc:7e:00:48:bf:f5:17:ca:1a:88:ac:8e:d2:b5:39:a6:73:
         e0:61:50:59:f5:5d:3d:b5:92:83:c8:3a:06:ec:e3:88:2c:5f:
         08:e6:24:f4:57:89:b6:5e:eb:15:17:18:9a:31:70:5a:2b:2f:
         9b:c9:69:d2:14:33:70:7b:5f:42:cb:ee:16:5b:7c:94:86:65:
         64:7f:77:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:46:08 2025 by rpki-client