Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/323830313a38383a3a2f33322d3336203d3e203533313636.roa
File:                     323830313a38383a3a2f33322d3336203d3e203533313636.roa (raw, json)
Hash identifier:          NwrP2qfGXTVbgESVxtofuxb1f+QPfhZj3LaFyUPm6/4=
Subject key identifier:   B8:E1:BB:6F:88:21:F9:7D:3D:E8:27:A6:17:09:12:E2:2F:67:1D:56
Certificate issuer:       /CN=725BCF70C08F4B2744E301141EF06513A96F28D6
Certificate serial:       7B9CED67BA8FFF80BC01D87FBA6327C7A9F15F24
Authority key identifier: 72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/323830313a38383a3a2f33322d3336203d3e203533313636.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     53166
IP address blocks:        2801:88::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl
                          rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:9c:ed:67:ba:8f:ff:80:bc:01:d8:7f:ba:63:27:c7:a9:f1:5f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725BCF70C08F4B2744E301141EF06513A96F28D6
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=B8E1BB6F8821F97D3DE827A6170912E22F671D56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:db:1d:36:a2:43:b5:36:25:5e:76:d7:b4:4a:
                    c2:d0:d9:72:ca:4e:45:ed:6e:d9:ab:5d:a2:a1:98:
                    33:2c:55:c5:33:d9:f2:25:58:d8:3a:74:05:7a:e1:
                    4b:d8:25:8f:f2:40:01:1c:87:f7:d3:93:92:24:d0:
                    1d:c3:7a:b3:41:ac:e1:49:12:12:a0:e4:c1:a2:b7:
                    3e:f1:dd:c7:60:89:32:d3:10:fa:d3:6e:7f:be:13:
                    60:73:f6:b0:01:bd:fe:9a:be:a5:4e:0d:08:92:e1:
                    20:4d:64:2e:49:ab:86:da:6a:f0:0e:00:3b:4d:a8:
                    cc:90:15:0f:99:25:c3:7e:a4:25:c8:c8:d7:df:cb:
                    b1:d1:da:94:a5:09:08:98:33:a8:3f:3c:e5:24:59:
                    70:9c:c9:2c:71:a7:e9:42:de:91:25:c3:8a:d0:56:
                    57:04:05:da:f4:3b:dc:8f:dd:95:78:64:a0:4b:f2:
                    7d:7e:28:a6:0d:9b:9b:a9:68:9c:28:29:13:2f:01:
                    63:b0:82:42:b3:10:08:5a:3e:75:8b:d0:d1:94:2f:
                    38:9f:de:1f:18:e6:73:00:cd:6b:23:38:da:29:96:
                    90:9c:f8:7b:ab:88:2b:3f:1c:06:f1:92:23:64:ac:
                    16:3c:cc:ce:07:d9:41:7a:a5:42:39:86:08:65:2f:
                    cf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E1:BB:6F:88:21:F9:7D:3D:E8:27:A6:17:09:12:E2:2F:67:1D:56
            X509v3 Authority Key Identifier:
                keyid:72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/323830313a38383a3a2f33322d3336203d3e203533313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:88::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:e8:fa:4d:c1:61:97:e6:a0:a3:b8:3b:df:56:fe:76:14:8b:
         17:69:f5:69:a9:af:fd:83:59:4d:7f:ea:52:80:ba:ef:15:e7:
         b8:d6:e2:59:dd:c9:87:45:1b:3c:ec:41:f0:fc:78:0d:1b:b6:
         10:54:ce:4c:2f:ab:13:2a:56:0a:73:1d:ff:c3:14:94:fc:7a:
         13:70:fe:33:9f:43:b5:e2:e5:b9:47:7e:bb:33:84:ba:32:6e:
         be:68:1d:79:04:d1:d3:df:0b:ec:b3:d7:44:58:48:09:34:75:
         29:ba:1c:d0:85:d8:bd:4a:69:a1:e6:0b:63:dc:f2:2d:02:1f:
         7a:67:10:e3:07:01:81:e3:cf:59:c7:48:c6:87:ff:9b:10:f0:
         8f:7c:b3:aa:8d:53:bc:7c:32:ca:5e:00:2f:2c:d6:3f:e5:fc:
         ac:89:a9:69:d7:78:31:bf:5d:db:c9:c2:3a:63:c8:45:13:ae:
         ae:a8:ea:6a:a2:1d:93:5e:fb:92:e3:85:f8:88:54:2d:9a:d9:
         c9:09:7e:07:27:55:17:91:e6:42:92:8a:79:e6:93:b7:ad:65:
         a8:29:a2:51:f6:3c:ff:54:12:24:c3:64:8f:13:6d:21:71:c3:
         3c:bf:62:3e:4c:b1:a8:0c:a5:7a:26:92:61:8f:26:05:f6:0f:
         f9:c8:9a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:24:32 2025 by rpki-client