Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/1/323830343a363433303a3a2f33322d313238203d3e20323639343132.roa
File:                     323830343a363433303a3a2f33322d313238203d3e20323639343132.roa (raw, json)
Hash identifier:          Tay5D5yPBM9sEYkBNsORzja4ZgagIpaGmHKf8o6U74Y=
Subject key identifier:   02:D9:DB:ED:9B:2F:84:D1:2F:A1:41:D2:1F:56:B2:7F:0F:80:BD:54
Certificate issuer:       /CN=EC1910123F7F6AC855834D3BED8883627192021E
Certificate serial:       207648B61D2BC054DC78970E44F540D30AA3D853
Authority key identifier: EC:19:10:12:3F:7F:6A:C8:55:83:4D:3B:ED:88:83:62:71:92:02:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC1910123F7F6AC855834D3BED8883627192021E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/1/323830343a363433303a3a2f33322d313238203d3e20323639343132.roa
Signing time:             Thu 06 Mar 2025 20:00:32 +0000
ROA not before:           Thu 06 Mar 2025 19:55:32 +0000
ROA not after:            Thu 05 Mar 2026 20:00:32 +0000
asID:                     269412
IP address blocks:        2804:6430::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/1/EC1910123F7F6AC855834D3BED8883627192021E.crl
                          rsync://rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/1/EC1910123F7F6AC855834D3BED8883627192021E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC1910123F7F6AC855834D3BED8883627192021E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 15:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:76:48:b6:1d:2b:c0:54:dc:78:97:0e:44:f5:40:d3:0a:a3:d8:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC1910123F7F6AC855834D3BED8883627192021E
        Validity
            Not Before: Mar  6 19:55:32 2025 GMT
            Not After : Mar  5 20:00:32 2026 GMT
        Subject: CN=02D9DBED9B2F84D12FA141D21F56B27F0F80BD54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:41:5c:8c:90:55:26:77:82:13:48:90:21:2b:
                    31:53:3d:5c:a1:8f:59:99:60:2a:ac:37:0a:69:da:
                    e2:de:4f:17:b3:7b:43:8d:c3:cf:73:d2:c9:9c:7b:
                    4b:96:46:ae:8e:57:35:e4:90:83:4f:dc:3a:ff:76:
                    f8:14:98:e5:aa:4e:52:fe:2f:b8:8d:8f:52:84:36:
                    b5:02:39:7e:78:61:06:d7:f4:5a:a0:ec:ac:8b:4c:
                    71:16:f8:0e:0a:94:4b:3b:c7:0e:6c:6f:28:34:8e:
                    f7:83:82:c4:77:4d:17:49:de:cf:95:5c:d8:81:88:
                    c8:ac:f6:0b:3a:e2:9a:e8:27:cb:6a:08:ac:eb:b3:
                    60:90:ec:7f:d0:ed:23:10:6d:12:eb:2f:f1:96:cd:
                    dd:ec:d7:ed:40:b7:75:bc:3e:aa:ab:9e:23:5f:15:
                    e0:3e:50:0e:f1:8e:cf:c1:80:ae:09:26:68:5f:12:
                    c4:a2:76:89:0b:b5:80:22:db:c6:f4:49:ea:fb:ed:
                    46:7a:50:9d:3f:4f:01:a0:16:b6:ad:da:7d:ae:cd:
                    f3:83:c8:c3:3e:b4:d6:95:7c:e0:39:26:82:7f:b9:
                    8a:b7:12:28:a0:fa:1d:7c:f0:95:86:ac:3e:35:80:
                    b2:b7:de:bc:ad:a8:5b:c7:27:b7:02:bd:b9:9d:39:
                    41:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D9:DB:ED:9B:2F:84:D1:2F:A1:41:D2:1F:56:B2:7F:0F:80:BD:54
            X509v3 Authority Key Identifier:
                keyid:EC:19:10:12:3F:7F:6A:C8:55:83:4D:3B:ED:88:83:62:71:92:02:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/1/EC1910123F7F6AC855834D3BED8883627192021E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC1910123F7F6AC855834D3BED8883627192021E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/1/323830343a363433303a3a2f33322d313238203d3e20323639343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6430::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:6f:bd:d5:00:3d:29:f6:1f:7a:6d:6a:e7:67:08:89:29:a0:
         de:43:9b:9c:b2:d3:ba:2d:dc:e5:da:c5:b4:a3:b9:03:93:38:
         59:54:cf:4d:07:bc:95:d0:a2:78:8b:ce:40:11:4e:31:84:f7:
         46:30:ef:06:84:91:22:c3:5f:55:16:c7:a2:00:fa:50:a5:6c:
         dc:70:8b:9f:5d:95:fc:30:f0:1c:28:38:1e:e7:fd:2b:39:a5:
         e8:20:98:f8:a9:43:33:43:ca:78:b3:32:54:2f:d2:fb:f0:30:
         b6:9f:da:39:bd:bc:d8:9d:9d:7a:16:26:e7:2a:a1:65:d2:15:
         17:ff:57:c5:ab:e4:9a:95:b2:ca:96:21:fe:5b:16:7c:23:8e:
         9e:23:6d:ff:e4:db:ce:82:a1:aa:10:02:bd:12:4a:27:fe:2d:
         ca:26:7c:98:e5:a3:36:6c:ce:e8:6f:6a:80:10:51:11:05:46:
         f1:97:4d:8a:9f:74:2d:63:42:66:de:c5:aa:53:13:74:0f:c1:
         ee:33:39:3f:5c:3f:6f:74:6c:42:59:27:7c:ba:7e:05:d8:c6:
         d1:46:56:a6:b8:97:72:83:c6:52:ca:e5:a7:c7:26:54:d4:03:
         76:b4:cd:20:36:6f:15:61:f9:0f:78:1e:55:e5:6e:50:e1:c8:
         06:ff:da:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:41:37 2025 by rpki-client