Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/323830343a343939343a3a2f33362d3336203d3e20323637313931.roa
File:                     323830343a343939343a3a2f33362d3336203d3e20323637313931.roa (raw, json)
Hash identifier:          jTPyMcgAl00A+JFJCtS1p7wE7su6ke799bEHlpwARkc=
Subject key identifier:   7A:74:8D:46:EB:34:16:05:8B:BA:05:A0:47:89:47:F8:93:E9:4D:EC
Certificate issuer:       /CN=0735F183418EC62A4A31A369DAE7B7C754A48BDE
Certificate serial:       78487E626470B039D55B39F999EE1250AD5F193E
Authority key identifier: 07:35:F1:83:41:8E:C6:2A:4A:31:A3:69:DA:E7:B7:C7:54:A4:8B:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0735F183418EC62A4A31A369DAE7B7C754A48BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/323830343a343939343a3a2f33362d3336203d3e20323637313931.roa
Signing time:             Thu 13 Feb 2025 17:04:07 +0000
ROA not before:           Thu 13 Feb 2025 16:59:07 +0000
ROA not after:            Thu 12 Feb 2026 17:04:07 +0000
asID:                     267191
IP address blocks:        2804:4994::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/0735F183418EC62A4A31A369DAE7B7C754A48BDE.crl
                          rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/0735F183418EC62A4A31A369DAE7B7C754A48BDE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0735F183418EC62A4A31A369DAE7B7C754A48BDE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 14:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:48:7e:62:64:70:b0:39:d5:5b:39:f9:99:ee:12:50:ad:5f:19:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735F183418EC62A4A31A369DAE7B7C754A48BDE
        Validity
            Not Before: Feb 13 16:59:07 2025 GMT
            Not After : Feb 12 17:04:07 2026 GMT
        Subject: CN=7A748D46EB3416058BBA05A0478947F893E94DEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ca:eb:60:30:56:4e:6a:7b:3d:75:9e:6a:b1:
                    68:f5:64:31:44:a7:fe:41:23:1b:68:4a:8d:11:fe:
                    ef:e8:72:52:4d:a8:a3:d3:e7:0f:3b:49:d1:40:cb:
                    54:71:87:80:7c:1b:a2:d2:68:42:4e:53:f1:93:79:
                    60:dd:9c:bd:90:c9:b6:71:69:74:93:fd:1f:60:45:
                    1d:35:82:26:df:c5:86:5d:c9:64:c0:c8:98:eb:cb:
                    e9:96:16:ff:a8:d2:52:3a:0c:5c:ae:7d:78:2c:d4:
                    2e:fb:a4:5b:7e:e9:56:2e:c1:f4:e5:6c:dc:b1:26:
                    15:a6:ba:28:cf:22:e2:1f:fd:e9:c2:42:ff:74:d4:
                    ea:23:b8:d8:c3:c3:31:75:57:ad:b8:b4:c8:b6:c8:
                    9b:79:ee:f3:db:1c:b3:38:6a:4d:a4:4c:9c:3a:c7:
                    ee:df:ef:7a:70:aa:25:b2:a9:35:d1:81:67:5e:83:
                    d9:52:74:4a:94:60:c5:af:ff:e8:4a:96:c1:66:77:
                    5c:51:8f:8b:e3:b5:d5:d1:8c:df:60:d3:e7:c4:6e:
                    c2:2d:2a:a9:74:50:90:58:86:3b:b5:2e:b8:18:87:
                    16:09:7e:97:13:7e:3b:6e:d2:31:31:97:c8:22:6a:
                    d2:13:ae:1d:9d:c3:eb:df:8c:b2:31:ad:ca:8a:76:
                    3e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:74:8D:46:EB:34:16:05:8B:BA:05:A0:47:89:47:F8:93:E9:4D:EC
            X509v3 Authority Key Identifier:
                keyid:07:35:F1:83:41:8E:C6:2A:4A:31:A3:69:DA:E7:B7:C7:54:A4:8B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/0735F183418EC62A4A31A369DAE7B7C754A48BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0735F183418EC62A4A31A369DAE7B7C754A48BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/323830343a343939343a3a2f33362d3336203d3e20323637313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4994::/36

    Signature Algorithm: sha256WithRSAEncryption
         43:34:10:a5:d3:3b:98:d3:57:d0:a0:f0:51:a1:a9:1b:4b:c9:
         d7:b9:a5:5f:64:20:0c:ec:a4:76:e8:16:d8:62:34:d4:5a:68:
         9e:72:9f:df:70:dc:0c:75:26:5d:e2:0b:eb:7f:e2:46:2f:a9:
         60:1f:e1:ea:42:7e:c6:4d:aa:6d:0d:20:25:60:eb:31:3d:34:
         0b:73:7e:49:c0:40:3a:36:c7:45:05:fa:9a:f5:a2:df:1f:2d:
         b7:e4:4e:98:e7:d6:e9:ca:0f:cb:39:91:c1:23:40:a3:23:9f:
         c1:16:28:93:ff:10:cf:4c:76:6f:c6:df:b0:4c:6e:3f:5b:af:
         b2:19:df:a8:68:8e:4b:43:90:ad:2b:55:4c:35:b4:14:cb:b8:
         83:0c:ca:c7:8d:2b:df:d0:ba:fb:34:b6:fa:c9:e0:da:95:79:
         00:9e:66:12:e3:41:39:3d:d2:14:ec:76:be:2d:50:63:52:4e:
         f7:34:2b:f9:1b:d4:24:29:d1:db:15:09:77:1f:af:a0:dd:2e:
         38:87:29:19:f6:1f:c2:5e:c2:4a:bb:e8:98:72:09:50:58:a9:
         c2:a1:88:52:cf:55:9d:ba:5d:b7:8a:68:5f:68:e2:e1:03:aa:
         2c:c5:b1:71:51:53:89:54:35:50:9f:fe:5b:0f:23:12:1a:9c:
         88:37:59:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:53:20 2025 by rpki-client