Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/323830343a356539633a3a2f33322d3334203d3e20323639303434.roa
File:                     323830343a356539633a3a2f33322d3334203d3e20323639303434.roa (raw, json)
Hash identifier:          dCvSACxYT952OvGAzenF4uikIfHg0QBdmVMIj/9NjwU=
Subject key identifier:   BA:41:42:FC:59:48:72:41:8A:50:DF:8E:86:DD:01:D0:3F:FB:38:D0
Certificate issuer:       /CN=DE51727C4914F4A53CB897FB087E719CD71D4196
Certificate serial:       321FB8586EAEDDC0262F741E8857B6056EF724D3
Authority key identifier: DE:51:72:7C:49:14:F4:A5:3C:B8:97:FB:08:7E:71:9C:D7:1D:41:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE51727C4914F4A53CB897FB087E719CD71D4196.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/323830343a356539633a3a2f33322d3334203d3e20323639303434.roa
Signing time:             Thu 17 Apr 2025 12:31:55 +0000
ROA not before:           Thu 17 Apr 2025 12:26:55 +0000
ROA not after:            Thu 16 Apr 2026 12:31:55 +0000
asID:                     269044
IP address blocks:        2804:5e9c::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/DE51727C4914F4A53CB897FB087E719CD71D4196.crl
                          rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/DE51727C4914F4A53CB897FB087E719CD71D4196.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE51727C4914F4A53CB897FB087E719CD71D4196.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 04:15:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:1f:b8:58:6e:ae:dd:c0:26:2f:74:1e:88:57:b6:05:6e:f7:24:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE51727C4914F4A53CB897FB087E719CD71D4196
        Validity
            Not Before: Apr 17 12:26:55 2025 GMT
            Not After : Apr 16 12:31:55 2026 GMT
        Subject: CN=BA4142FC594872418A50DF8E86DD01D03FFB38D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:39:49:68:0a:e4:18:8a:13:68:ae:94:15:
                    de:a3:48:a0:81:e0:46:a0:95:ee:20:f9:0b:a2:58:
                    93:6d:e6:d6:bf:ef:f7:7d:b6:13:6f:a7:a7:85:69:
                    40:40:5f:42:e9:cc:4b:df:ce:4c:27:6b:38:72:e6:
                    1c:16:08:8b:cf:7e:49:97:3b:da:45:70:21:53:12:
                    f0:65:e9:fc:df:39:87:2e:93:7b:8f:14:69:16:c2:
                    88:d6:4f:83:3c:4d:11:d2:2f:ab:ab:02:f7:25:33:
                    11:48:24:fb:44:c8:bd:22:dd:56:0d:66:a5:a5:62:
                    9a:96:7b:b5:2e:ee:7f:2f:38:52:ba:50:14:dd:13:
                    03:8a:5d:98:0f:e7:98:0c:c5:9f:41:8a:85:fb:d4:
                    b3:56:d2:3c:38:a0:a4:23:59:13:20:c0:03:27:75:
                    22:ba:2a:85:8f:bc:b7:54:d8:45:d4:95:ba:97:3b:
                    f3:2e:9a:0c:d2:c1:5e:fd:ba:bc:df:36:65:a7:97:
                    1f:93:cc:70:f5:5e:46:f5:1d:7e:04:6f:4f:4b:eb:
                    dd:1f:37:d9:20:40:9c:fb:2e:8b:fb:2c:7e:3e:cb:
                    fa:c0:c5:a8:77:63:ae:70:4a:c2:a9:b7:b6:c1:11:
                    47:df:36:68:c0:15:8d:30:78:cb:3a:39:5f:5c:bc:
                    b3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:41:42:FC:59:48:72:41:8A:50:DF:8E:86:DD:01:D0:3F:FB:38:D0
            X509v3 Authority Key Identifier:
                keyid:DE:51:72:7C:49:14:F4:A5:3C:B8:97:FB:08:7E:71:9C:D7:1D:41:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/DE51727C4914F4A53CB897FB087E719CD71D4196.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE51727C4914F4A53CB897FB087E719CD71D4196.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/323830343a356539633a3a2f33322d3334203d3e20323639303434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:44:f4:66:01:23:17:5d:d4:f9:f6:a0:34:a4:25:bf:e4:df:
         19:c9:b3:70:16:b7:08:fc:3d:b2:f5:60:e6:f4:14:8f:01:92:
         35:a0:aa:03:9f:46:f1:05:07:77:d6:c1:21:da:97:dd:8c:49:
         9e:6a:a4:82:18:f0:b6:b1:0f:58:cb:e4:a8:f3:ba:27:d9:1f:
         69:d4:8b:1e:25:86:bd:de:2e:76:58:e4:7d:9d:1f:95:20:11:
         54:e5:0e:1a:55:ca:ba:e9:a4:b2:1c:94:76:c8:ee:aa:4b:d0:
         b6:ad:fb:7b:e4:88:f3:90:9a:b2:bc:65:ca:1d:c3:98:f2:67:
         b3:fb:f3:91:05:fd:c5:b2:54:31:e2:19:7b:3f:de:b5:c0:c6:
         22:2d:a0:57:de:56:b9:f2:c6:3c:7f:81:61:58:5b:9c:c3:17:
         67:b1:98:2b:fd:fa:a2:ec:99:e3:7e:f4:a2:1f:ba:ac:25:93:
         b5:8e:4e:22:2c:43:65:00:f6:3a:09:30:fd:8e:45:59:23:f4:
         d7:66:b9:bd:11:8f:63:a2:ab:34:19:31:ff:ca:66:25:fa:74:
         cb:a7:2e:62:15:4a:f9:40:be:ec:d2:12:5e:0e:b1:a4:93:6f:
         e5:bb:98:d1:5f:a9:bf:8a:56:96:5f:e0:1e:61:8d:57:d3:c1:
         42:fc:f9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:27:02 2025 by rpki-client