Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/323830343a343930303a3a2f33322d3336203d3e20323637313538.roa
File:                     323830343a343930303a3a2f33322d3336203d3e20323637313538.roa (raw, json)
Hash identifier:          mkXbBavvXuIoxB8wAmwN1Km/q8T+j8ZzwJ8g4OxYKrg=
Subject key identifier:   93:D2:9E:81:C1:7B:D7:29:69:A9:9E:76:DB:B0:C9:A0:5E:85:72:08
Certificate issuer:       /CN=C5A26047546067241D33D84B5B25FBA9D232E5B8
Certificate serial:       3C419CB84D4C5D0F705CA59D5043F88A626A9FF0
Authority key identifier: C5:A2:60:47:54:60:67:24:1D:33:D8:4B:5B:25:FB:A9:D2:32:E5:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5A26047546067241D33D84B5B25FBA9D232E5B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/323830343a343930303a3a2f33322d3336203d3e20323637313538.roa
Signing time:             Fri 07 Mar 2025 14:43:22 +0000
ROA not before:           Fri 07 Mar 2025 14:38:22 +0000
ROA not after:            Fri 06 Mar 2026 14:43:22 +0000
asID:                     267158
IP address blocks:        2804:4900::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/C5A26047546067241D33D84B5B25FBA9D232E5B8.crl
                          rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/C5A26047546067241D33D84B5B25FBA9D232E5B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5A26047546067241D33D84B5B25FBA9D232E5B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 01:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:41:9c:b8:4d:4c:5d:0f:70:5c:a5:9d:50:43:f8:8a:62:6a:9f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5A26047546067241D33D84B5B25FBA9D232E5B8
        Validity
            Not Before: Mar  7 14:38:22 2025 GMT
            Not After : Mar  6 14:43:22 2026 GMT
        Subject: CN=93D29E81C17BD72969A99E76DBB0C9A05E857208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:58:92:91:b8:22:5e:94:02:ad:0d:74:db:a1:
                    52:b9:d9:6f:48:64:93:33:6c:0c:1e:4f:af:9e:a0:
                    d8:60:14:f8:eb:82:2a:59:f6:fd:11:13:d7:68:d9:
                    6b:c5:83:3a:cc:89:a9:a7:67:5d:31:23:09:db:04:
                    84:af:1a:88:e2:3a:c2:67:6e:aa:b8:48:6c:af:ec:
                    73:0e:02:29:3c:53:4e:08:b2:77:8b:c8:77:7b:49:
                    20:f1:9a:07:a2:64:2f:24:fc:f8:68:8a:21:5a:38:
                    24:86:cd:cd:e9:f4:f1:d1:5a:b2:21:83:9d:00:bd:
                    a5:54:d3:e8:9c:2b:84:3c:49:a3:75:df:45:d5:0d:
                    1a:e6:b2:de:90:63:da:dd:38:33:11:7f:a0:6c:4f:
                    c4:62:c4:1a:9b:b7:a5:5d:10:df:28:11:ca:5e:55:
                    16:25:95:bc:ba:30:b7:79:2f:0e:ae:e4:8d:16:1a:
                    a7:05:c1:bb:74:71:53:11:97:10:40:54:0d:8f:ca:
                    67:5e:9b:22:44:bc:f5:1c:5d:92:d4:d9:fc:88:33:
                    56:b1:2f:5d:e9:db:1c:05:1b:c0:28:a6:3b:8f:92:
                    b8:51:24:3e:b9:93:0f:0e:d6:f3:59:f2:45:a0:6d:
                    e6:76:bf:7c:9c:91:69:b3:76:98:dc:28:6b:78:3f:
                    46:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D2:9E:81:C1:7B:D7:29:69:A9:9E:76:DB:B0:C9:A0:5E:85:72:08
            X509v3 Authority Key Identifier:
                keyid:C5:A2:60:47:54:60:67:24:1D:33:D8:4B:5B:25:FB:A9:D2:32:E5:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/C5A26047546067241D33D84B5B25FBA9D232E5B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5A26047546067241D33D84B5B25FBA9D232E5B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/323830343a343930303a3a2f33322d3336203d3e20323637313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4900::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:ac:9b:7d:fe:64:45:8b:f5:1b:26:15:4a:30:1a:fc:7a:fd:
         e8:8e:2f:c3:42:c5:ab:06:72:18:fa:ec:22:fe:51:88:df:7b:
         4d:c0:04:23:a3:56:92:0d:e6:1d:b1:34:2b:b6:61:f8:39:31:
         40:68:8a:66:e1:b6:9b:6e:72:18:11:96:85:72:ff:f0:00:bf:
         14:2a:96:17:41:69:0e:85:f9:0d:6d:f3:07:b5:9b:54:0c:73:
         b6:61:92:70:95:8f:2a:9f:8b:ec:55:a8:fa:a8:be:9e:55:7e:
         2f:10:58:3a:ef:cf:ea:2e:1c:48:ec:86:02:7c:61:17:c4:86:
         74:be:db:eb:03:00:df:fb:16:ad:e6:8c:59:b8:3c:3f:13:9f:
         c1:06:e2:10:8f:73:46:65:4b:e6:2b:b3:60:30:4c:a2:85:86:
         ea:0a:23:66:1f:e5:57:94:6b:47:d4:3e:23:58:28:78:61:3d:
         83:9a:03:51:a6:72:57:06:fb:a4:03:1a:03:31:2c:ca:cd:2b:
         4f:f7:7c:d4:c1:1d:39:6f:c8:6f:55:b0:9d:fc:ca:6d:a9:99:
         1c:f9:bc:4b:64:d0:9c:86:58:b6:aa:f0:e7:83:4b:e8:94:21:
         da:ca:1a:5f:b7:cf:1a:13:6d:be:54:f2:d5:a6:24:b4:31:9b:
         28:e7:7c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:18:14 2025 by rpki-client