Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/323830343a363262383a3a2f33322d3334203d3e20323639333134.roa
File:                     323830343a363262383a3a2f33322d3334203d3e20323639333134.roa (raw, json)
Hash identifier:          SdgJg20BzLhsdQv5tCF91SPf4pDt99pnXw4gsINW7OY=
Subject key identifier:   AD:57:07:D5:64:44:69:2D:F9:C1:D8:DC:6E:67:EB:94:5F:10:6E:CF
Certificate issuer:       /CN=2A6491204C711A84AD522B857DDD79956488BAA2
Certificate serial:       17F7DCD5CB34E866ABF11B3272994C093D82C16D
Authority key identifier: 2A:64:91:20:4C:71:1A:84:AD:52:2B:85:7D:DD:79:95:64:88:BA:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6491204C711A84AD522B857DDD79956488BAA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/323830343a363262383a3a2f33322d3334203d3e20323639333134.roa
Signing time:             Thu 06 Mar 2025 12:45:52 +0000
ROA not before:           Thu 06 Mar 2025 12:40:52 +0000
ROA not after:            Thu 05 Mar 2026 12:45:52 +0000
asID:                     269314
IP address blocks:        2804:62b8::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/2A6491204C711A84AD522B857DDD79956488BAA2.crl
                          rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/2A6491204C711A84AD522B857DDD79956488BAA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6491204C711A84AD522B857DDD79956488BAA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f7:dc:d5:cb:34:e8:66:ab:f1:1b:32:72:99:4c:09:3d:82:c1:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6491204C711A84AD522B857DDD79956488BAA2
        Validity
            Not Before: Mar  6 12:40:52 2025 GMT
            Not After : Mar  5 12:45:52 2026 GMT
        Subject: CN=AD5707D56444692DF9C1D8DC6E67EB945F106ECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0d:0f:05:60:4c:d8:de:00:49:54:a8:81:c3:
                    3f:59:91:6a:d9:5d:05:86:ab:9e:67:ff:50:e1:60:
                    39:b7:0f:f2:58:a9:3f:c5:e9:62:36:43:6d:4f:bd:
                    98:ad:d7:7e:45:f4:c4:ef:9a:da:01:fe:c2:20:7b:
                    5e:60:3f:5b:f3:e6:cb:52:10:68:e5:82:f1:10:f2:
                    da:14:65:dd:5f:32:d7:53:51:9d:f2:1e:e5:72:a1:
                    ad:ed:aa:0b:10:31:d9:36:aa:64:32:eb:78:35:9b:
                    9a:23:95:12:f7:3c:85:7c:01:51:ff:b5:06:15:15:
                    06:24:c8:f5:51:0f:23:20:88:63:0e:ee:3c:dc:7f:
                    be:94:35:fe:f7:f6:d3:4e:29:0c:fb:69:fa:22:ef:
                    03:54:3d:ef:5f:1f:92:34:9b:91:38:9f:d2:7a:06:
                    38:f7:6c:00:54:60:9c:94:45:fa:8b:60:c9:27:a4:
                    2b:64:e8:ce:73:8b:ef:91:41:8a:dd:df:5c:30:90:
                    33:36:e0:55:0a:58:79:68:9a:76:fb:05:33:a0:20:
                    67:6d:3c:31:15:43:18:6f:03:69:23:8e:fc:5b:db:
                    9c:b1:b7:8c:05:cb:11:ea:43:47:97:4d:2b:ef:cd:
                    88:25:76:2a:53:96:a1:5b:22:77:4d:59:23:c4:0e:
                    2f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:57:07:D5:64:44:69:2D:F9:C1:D8:DC:6E:67:EB:94:5F:10:6E:CF
            X509v3 Authority Key Identifier:
                keyid:2A:64:91:20:4C:71:1A:84:AD:52:2B:85:7D:DD:79:95:64:88:BA:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/2A6491204C711A84AD522B857DDD79956488BAA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6491204C711A84AD522B857DDD79956488BAA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/323830343a363262383a3a2f33322d3334203d3e20323639333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:37:81:0e:ad:23:0d:ed:97:13:56:72:45:93:d9:e6:b4:f5:
         29:99:a7:ca:ec:77:5f:3c:c9:55:47:33:9d:73:81:10:88:96:
         7a:39:f5:dd:f2:ce:df:4a:db:b9:49:e8:55:63:b0:60:2e:61:
         6a:7e:11:be:28:6d:da:44:ff:1d:7f:cf:fc:9e:48:8d:26:28:
         ec:70:ff:52:22:18:13:0b:47:2e:02:9d:bb:ba:fe:f3:d1:5e:
         66:f4:27:62:6f:1a:2c:51:1e:39:56:6f:02:2b:25:57:f8:b5:
         bb:12:e7:4c:0f:b2:14:56:19:80:73:f9:c6:4f:bf:d1:15:67:
         10:3e:13:20:fc:85:17:24:8f:8d:36:63:f5:ac:29:ed:4f:af:
         1a:62:bc:0c:a1:e6:d2:47:cf:0d:b4:71:1b:91:6c:a9:26:1b:
         5e:7d:ea:56:2d:61:02:cc:d8:1d:aa:3f:22:60:7a:72:86:8d:
         68:23:b9:0c:71:4a:d2:c8:52:52:5f:f4:ea:49:0f:3e:07:ed:
         3b:03:a4:d6:ce:22:b9:67:74:8d:a6:2b:36:0c:a4:d2:d6:6a:
         a8:fa:4c:ee:68:8c:5f:7a:ca:56:3e:1f:88:1a:e9:d4:f0:3b:
         94:4c:8f:77:48:f8:83:bc:0c:69:93:9e:85:8d:d1:83:fe:73:
         c6:62:9e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:28:21 2025 by rpki-client