Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EzgHs6vsfVkoWcTHHznMoxx2sbUwD1cKNJvB7wkz8rkS/0/323830343a333637343a3a2f33322d3438203d3e203337343638.roa
File:                     323830343a333637343a3a2f33322d3438203d3e203337343638.roa (raw, json)
Hash identifier:          C/CC51O2eDQBfGobQc9tvfklgcDsERlBeoVlGueVX1A=
Subject key identifier:   26:99:80:3B:69:14:B2:8A:68:2A:DB:8A:11:3F:2E:C2:8E:30:20:86
Certificate issuer:       /CN=05BBCA5A86038E045DA98F756A6D1BDDBED83780
Certificate serial:       2127F6D2A9BB69BDD11BBC83F57B03797EC5D23E
Authority key identifier: 05:BB:CA:5A:86:03:8E:04:5D:A9:8F:75:6A:6D:1B:DD:BE:D8:37:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05BBCA5A86038E045DA98F756A6D1BDDBED83780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EzgHs6vsfVkoWcTHHznMoxx2sbUwD1cKNJvB7wkz8rkS/0/323830343a333637343a3a2f33322d3438203d3e203337343638.roa
Signing time:             Mon 24 Feb 2025 23:09:56 +0000
ROA not before:           Mon 24 Feb 2025 23:04:56 +0000
ROA not after:            Mon 23 Feb 2026 23:09:56 +0000
asID:                     37468
IP address blocks:        2804:3674::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EzgHs6vsfVkoWcTHHznMoxx2sbUwD1cKNJvB7wkz8rkS/0/05BBCA5A86038E045DA98F756A6D1BDDBED83780.crl
                          rsync://rpki-repo.registro.br/repo/EzgHs6vsfVkoWcTHHznMoxx2sbUwD1cKNJvB7wkz8rkS/0/05BBCA5A86038E045DA98F756A6D1BDDBED83780.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05BBCA5A86038E045DA98F756A6D1BDDBED83780.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 14:40:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:27:f6:d2:a9:bb:69:bd:d1:1b:bc:83:f5:7b:03:79:7e:c5:d2:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05BBCA5A86038E045DA98F756A6D1BDDBED83780
        Validity
            Not Before: Feb 24 23:04:56 2025 GMT
            Not After : Feb 23 23:09:56 2026 GMT
        Subject: CN=2699803B6914B28A682ADB8A113F2EC28E302086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:94:8e:c1:64:51:28:48:de:2f:ed:95:bc:16:
                    b8:6d:b1:bf:3e:65:f8:98:25:c9:16:65:48:76:8b:
                    c1:7d:ac:72:18:1c:5f:a0:d2:85:ab:20:ff:5d:ed:
                    26:c5:d6:58:a8:f1:0f:63:11:40:59:dc:39:16:bd:
                    26:72:a7:e9:eb:3e:5b:65:7d:47:51:c4:86:d8:29:
                    cb:40:66:fc:9f:93:24:6a:b3:dc:a8:c4:cd:0d:e8:
                    89:52:1d:39:75:1a:cd:98:84:20:99:93:9f:93:c8:
                    77:62:53:0e:87:aa:4c:6f:41:e5:83:38:4e:b4:9e:
                    c5:9e:9e:a7:16:2a:b1:36:78:82:12:dc:34:19:fd:
                    bf:02:d2:51:7e:93:04:54:e4:74:01:83:1d:75:85:
                    22:d6:58:02:8f:c8:db:17:8d:83:fa:07:ea:6e:bc:
                    01:07:22:c9:eb:90:45:fa:a4:35:d9:57:c8:68:6c:
                    03:02:f3:db:56:de:3d:78:2b:b2:f9:fe:ee:46:0b:
                    4e:a0:04:43:55:ac:42:61:df:f2:40:fc:43:88:49:
                    e6:b4:17:9f:23:fd:d3:6c:fd:ba:3a:09:83:ca:a3:
                    98:af:92:04:e8:17:1b:37:a4:10:53:cd:91:cc:1b:
                    33:27:37:e5:c5:79:cf:27:26:8a:56:c6:d1:54:be:
                    cd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:99:80:3B:69:14:B2:8A:68:2A:DB:8A:11:3F:2E:C2:8E:30:20:86
            X509v3 Authority Key Identifier:
                keyid:05:BB:CA:5A:86:03:8E:04:5D:A9:8F:75:6A:6D:1B:DD:BE:D8:37:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EzgHs6vsfVkoWcTHHznMoxx2sbUwD1cKNJvB7wkz8rkS/0/05BBCA5A86038E045DA98F756A6D1BDDBED83780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05BBCA5A86038E045DA98F756A6D1BDDBED83780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EzgHs6vsfVkoWcTHHznMoxx2sbUwD1cKNJvB7wkz8rkS/0/323830343a333637343a3a2f33322d3438203d3e203337343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3674::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:51:c8:15:79:55:67:eb:32:1b:69:da:f7:a2:f2:9a:c4:4b:
         f5:e8:15:92:d6:42:d7:fe:62:a9:a2:f9:21:34:6c:85:d5:35:
         d4:6d:c0:e4:60:3a:08:af:ae:8d:a6:00:04:46:52:23:39:a0:
         74:44:7b:26:28:47:6a:f6:9c:45:d6:b4:44:7d:c6:52:f4:7d:
         ad:d6:15:81:89:d1:14:d7:63:16:e0:03:9d:cc:30:2c:77:2b:
         c3:bc:66:4b:fe:c5:ce:b8:36:5b:01:fd:27:3a:c3:0b:2e:15:
         e5:75:be:0f:48:00:ec:9d:ac:f2:b9:fc:06:dc:63:91:93:72:
         85:d4:4a:a3:9b:59:96:fe:1a:a0:f8:12:45:67:f5:97:35:be:
         72:f5:c8:67:a2:ad:9a:3f:b8:32:a9:97:94:bf:49:6a:73:f3:
         ce:f3:50:48:5d:ce:d5:61:86:eb:ee:72:01:f2:fb:ef:57:59:
         d0:53:db:7f:b5:90:48:6d:a4:95:93:e1:a7:d8:10:71:3e:53:
         15:81:27:55:a3:5a:e8:a3:68:aa:1a:78:91:37:50:ff:c1:4d:
         51:95:3b:97:eb:7f:c4:0c:5a:35:93:62:91:52:f5:06:73:79:
         c2:6a:c0:34:71:80:7f:55:39:fa:9c:2e:2e:b0:c9:13:37:77:
         5c:13:98:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:45:18 2025 by rpki-client