Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/323830343a336438303a3a2f33322d3438203d3e20323636353335.roa
File:                     323830343a336438303a3a2f33322d3438203d3e20323636353335.roa (raw, json)
Hash identifier:          tpoXD4T4EUi9EwpxT41fxDYxhlTzas0mOmEydCxj8EA=
Subject key identifier:   97:DC:43:97:75:FB:00:85:26:9E:6E:27:E9:1C:1C:50:CB:70:96:6F
Certificate issuer:       /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial:       0C42A50334F13AEE1B9794A0CAC00208C1907574
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/323830343a336438303a3a2f33322d3438203d3e20323636353335.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     266535
IP address blocks:        2804:3d80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl
                          rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:42:a5:03:34:f1:3a:ee:1b:97:94:a0:ca:c0:02:08:c1:90:75:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:86:b8:d0:86:c2:c1:3a:5e:da:7a:e8:50:4e:
                    b6:be:06:00:06:0a:da:3e:f5:2b:4b:b9:1c:ed:66:
                    ee:66:b6:65:e1:34:a6:54:50:b2:b5:68:7b:69:67:
                    eb:3c:b0:81:38:52:9a:77:29:46:6c:78:cd:a3:ed:
                    26:a5:ac:2a:13:27:bc:70:6c:d2:cf:f4:cf:61:08:
                    e2:7d:4b:99:92:fc:ae:51:95:8b:31:aa:43:1a:55:
                    b0:b3:61:ad:f7:98:c9:1a:d9:1f:7f:db:a8:0a:91:
                    ab:f0:89:33:70:1f:85:5f:18:36:d9:56:86:c7:bb:
                    ba:d3:0a:41:82:5e:ff:6a:78:7d:7b:60:c6:4d:3f:
                    91:57:39:18:d0:83:a3:97:9b:65:5e:6f:82:f8:98:
                    56:c8:32:fd:2e:fe:38:2f:5b:b8:2b:a6:31:82:5a:
                    56:b2:08:05:84:49:35:8f:18:ff:58:41:92:6f:53:
                    e1:09:df:72:b9:bc:22:31:6b:7c:d7:20:44:ed:50:
                    74:75:3d:17:7f:fe:04:fd:93:6c:62:ee:01:da:ca:
                    e4:8b:00:d2:d6:7e:03:a3:8d:8b:30:c5:dd:1f:00:
                    2a:50:a0:48:42:ce:e7:b1:65:05:c8:e6:81:3b:dd:
                    72:3a:fb:82:c6:3a:7c:26:2a:e2:14:2a:f3:04:b1:
                    96:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DC:43:97:75:FB:00:85:26:9E:6E:27:E9:1C:1C:50:CB:70:96:6F
            X509v3 Authority Key Identifier:
                keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/323830343a336438303a3a2f33322d3438203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:02:ce:5c:7f:08:14:d5:03:ca:86:40:21:89:ac:3f:e6:f6:
         85:7e:42:7d:df:31:c1:3b:0e:a6:82:07:28:d1:4d:69:85:08:
         6c:b8:d4:19:55:38:11:e0:91:87:91:a0:8f:1c:9d:37:27:e0:
         1d:a4:23:c9:1c:69:2b:10:dd:3a:38:b8:9b:90:18:67:97:9d:
         7a:3c:44:86:b1:1f:e1:33:e7:5c:da:6c:56:51:f5:d6:32:8c:
         0e:8d:89:3a:f2:20:60:60:73:94:60:49:58:33:bb:73:f7:cc:
         e8:d2:56:48:09:f3:be:f4:95:e2:3a:cc:54:14:3d:17:e7:d8:
         b9:5f:18:20:ad:28:9f:cb:c0:00:71:6f:e1:2e:31:99:1e:22:
         c2:ce:70:f4:b9:8a:6e:98:91:21:6a:15:9e:0d:2d:65:10:f4:
         86:24:a3:19:98:4b:1a:f4:ba:9e:20:ad:fa:0d:b7:33:e8:cb:
         d5:9b:73:55:19:fa:2b:8f:4a:b7:12:70:04:1b:8a:a9:18:eb:
         e0:fb:86:c0:0d:a6:99:f6:0b:d2:66:16:18:14:98:df:66:fb:
         3f:4b:40:83:9e:9d:6b:f2:8e:fa:9d:56:ec:16:53:96:9f:90:
         b7:8a:bd:b9:00:d4:6a:ba:d4:c1:c0:71:70:9a:21:5c:db:b2:
         40:0f:95:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:11:28 2025 by rpki-client