Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/323830343a3366383a3a2f33322d313238203d3e20323632353839.roa
File:                     323830343a3366383a3a2f33322d313238203d3e20323632353839.roa (raw, json)
Hash identifier:          JWIoi7JDkAPVDxyR1M2Lbd8OW+GZpgmMvJfWNO+0DRY=
Subject key identifier:   72:BC:8A:05:E5:D9:86:8A:88:2A:4F:EE:58:CB:CD:30:0B:79:6E:37
Certificate issuer:       /CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
Certificate serial:       234424793BCFA79F5BD3131B4A5CE25B5AFA5315
Authority key identifier: C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/323830343a3366383a3a2f33322d313238203d3e20323632353839.roa
Signing time:             Fri 07 Mar 2025 19:56:20 +0000
ROA not before:           Fri 07 Mar 2025 19:51:20 +0000
ROA not after:            Fri 06 Mar 2026 19:56:20 +0000
asID:                     262589
IP address blocks:        2804:3f8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 16:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:44:24:79:3b:cf:a7:9f:5b:d3:13:1b:4a:5c:e2:5b:5a:fa:53:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
        Validity
            Not Before: Mar  7 19:51:20 2025 GMT
            Not After : Mar  6 19:56:20 2026 GMT
        Subject: CN=72BC8A05E5D9868A882A4FEE58CBCD300B796E37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:63:d5:ef:59:75:82:b2:d7:76:db:6d:9e:9b:
                    7d:3f:76:2d:ef:95:fd:f4:a1:12:2b:c0:45:13:cf:
                    94:ee:a7:b8:29:81:89:82:f0:61:88:98:e1:89:80:
                    c7:ce:02:58:ab:aa:f1:f3:f9:2f:af:d2:38:36:e3:
                    ed:bc:8a:f9:b6:af:c8:87:01:7c:7b:b7:98:ee:b8:
                    9e:30:08:c6:4c:05:59:4b:2b:6d:a7:88:f1:e7:65:
                    13:cf:6c:9b:22:8a:bf:2d:20:47:83:8b:4c:8e:7b:
                    e9:d2:74:88:8a:33:33:d8:39:81:18:2e:a6:06:75:
                    14:2f:4f:5d:c2:b9:27:f9:cf:b0:d0:05:32:e1:02:
                    b2:3a:3a:97:c9:20:b2:8f:01:4c:6e:eb:20:7b:cf:
                    6f:18:37:27:be:eb:22:45:57:e4:4b:a6:d5:06:90:
                    82:18:0c:ed:fa:66:6d:96:1e:ec:03:dd:8a:4d:9a:
                    81:5b:c1:7c:52:8b:79:83:d5:15:f3:9e:41:7f:5a:
                    40:b3:1d:ca:b1:56:c5:6d:07:d3:be:b9:46:e7:ff:
                    b9:c1:13:ff:d3:83:f5:36:6a:72:32:7a:a6:7d:b5:
                    fa:04:5f:0d:66:4f:f9:86:3a:7d:f9:f5:ec:ea:bf:
                    af:f8:31:d0:35:60:0c:32:00:9d:27:37:41:49:ea:
                    8d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BC:8A:05:E5:D9:86:8A:88:2A:4F:EE:58:CB:CD:30:0B:79:6E:37
            X509v3 Authority Key Identifier:
                keyid:C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/323830343a3366383a3a2f33322d313238203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:a3:2e:69:9e:f0:8a:fe:53:28:f8:cd:8b:99:db:d0:0e:3f:
         df:28:bc:ae:cc:4b:0f:89:f3:26:88:23:1f:7d:dc:51:47:49:
         e9:80:aa:7c:59:a0:bd:a7:ad:d0:45:0e:23:b7:7d:87:52:f1:
         c8:05:07:cf:5b:e9:c2:f7:46:87:eb:b7:0c:4a:46:27:01:c2:
         39:2b:cd:f5:22:81:1a:95:83:95:f3:a0:d4:e3:33:2c:e6:3c:
         57:e5:25:ac:4e:4a:88:23:b8:8f:50:27:ef:6c:c9:6f:a3:68:
         83:de:19:ac:d2:cf:4a:61:3b:ee:0a:c9:19:63:b6:93:2f:23:
         70:93:b7:a1:cd:35:76:07:41:3c:70:39:d2:8e:e5:3c:ec:52:
         65:58:e1:03:7d:8f:ef:65:f7:a0:87:11:07:1c:b7:2c:25:3e:
         9d:30:95:57:3c:2e:d3:fa:bb:c0:70:12:2f:7e:41:75:a6:5c:
         43:60:1a:ad:2d:ff:ba:48:1a:7a:f0:88:35:c1:66:80:42:7e:
         1c:6a:79:d6:f7:3f:16:d3:5a:30:be:f6:38:78:eb:4c:34:ad:
         a9:ec:fb:53:54:0e:ad:35:d4:4f:2a:55:87:78:39:f0:e3:d7:
         97:5d:5e:74:b6:35:16:13:a6:89:4f:54:78:ea:58:76:4c:92:
         28:a5:7a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:22:27 2025 by rpki-client