Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/323830343a353666383a3a2f33322d3332203d3e20323638303335.roa
File:                     323830343a353666383a3a2f33322d3332203d3e20323638303335.roa (raw, json)
Hash identifier:          7TsaBy3M03QNzuAWNl8xE7NgAI8f/a0Bd9jjmuvqMk4=
Subject key identifier:   30:96:CB:12:8A:A7:E2:F9:29:82:0B:C3:61:4A:13:9A:C2:03:75:75
Certificate issuer:       /CN=50489A084AA380458A19AC12E8D87EDE0CC41542
Certificate serial:       0C9124ECE1D687C950958ED05E2D019F0BED36C7
Authority key identifier: 50:48:9A:08:4A:A3:80:45:8A:19:AC:12:E8:D8:7E:DE:0C:C4:15:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/323830343a353666383a3a2f33322d3332203d3e20323638303335.roa
Signing time:             Thu 06 Mar 2025 09:45:12 +0000
ROA not before:           Thu 06 Mar 2025 09:40:12 +0000
ROA not after:            Thu 05 Mar 2026 09:45:12 +0000
asID:                     268035
IP address blocks:        2804:56f8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.crl
                          rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:91:24:ec:e1:d6:87:c9:50:95:8e:d0:5e:2d:01:9f:0b:ed:36:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50489A084AA380458A19AC12E8D87EDE0CC41542
        Validity
            Not Before: Mar  6 09:40:12 2025 GMT
            Not After : Mar  5 09:45:12 2026 GMT
        Subject: CN=3096CB128AA7E2F929820BC3614A139AC2037575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:09:72:d7:db:d1:89:1b:be:91:1f:35:d2:07:
                    16:5a:64:9b:99:c0:68:1e:40:36:b8:a6:72:a3:ea:
                    48:68:13:2a:71:ab:ea:31:0c:03:b2:8b:bb:36:9f:
                    c8:73:25:34:0a:42:9d:e6:7c:1d:d0:44:d0:d6:28:
                    c7:88:2e:4a:27:e6:10:e5:45:46:2c:eb:cd:93:c3:
                    78:2a:26:e0:1e:a3:c7:33:b0:51:56:8a:3e:45:a5:
                    d3:df:b2:c1:4e:b2:62:76:da:33:76:c8:df:45:fe:
                    2c:a7:c7:30:b1:b4:c7:c9:b8:52:99:1c:78:f9:9d:
                    1d:fa:6b:23:c3:6e:71:84:33:b3:76:c4:d6:7c:bf:
                    33:b4:31:f5:80:ac:81:1b:87:14:f5:b8:ad:65:b5:
                    a1:40:bd:87:22:13:b1:61:89:d1:67:fc:4d:01:e4:
                    71:00:e3:3d:93:c4:7c:0b:cf:b9:48:af:8e:cd:50:
                    fd:4a:9a:d5:17:b0:7c:55:61:a3:d8:1a:13:54:57:
                    b4:51:88:0a:80:06:3f:0c:04:79:b4:bb:fe:e3:0c:
                    44:89:15:2c:1d:39:49:cd:46:2b:56:b0:80:ba:fd:
                    50:e1:42:e2:53:56:6a:8a:bb:e0:50:e6:9f:54:1a:
                    dd:71:a7:95:4b:cf:7a:a0:ee:cc:ef:f5:95:68:b7:
                    a7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:96:CB:12:8A:A7:E2:F9:29:82:0B:C3:61:4A:13:9A:C2:03:75:75
            X509v3 Authority Key Identifier:
                keyid:50:48:9A:08:4A:A3:80:45:8A:19:AC:12:E8:D8:7E:DE:0C:C4:15:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/323830343a353666383a3a2f33322d3332203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:66:2c:30:a0:6d:7c:f4:df:50:8d:fd:fe:a5:d6:fc:41:7b:
         1f:a2:2b:f8:68:d6:a4:d4:c8:84:45:c0:5f:98:23:36:1d:0b:
         e5:d6:6b:34:6e:db:08:76:a6:b0:11:24:41:0f:81:e8:12:36:
         19:b3:f3:4f:b6:a4:a3:6d:84:65:86:12:64:21:da:9d:4e:8d:
         fe:9c:4e:cc:c5:0a:dd:4e:cd:be:19:bc:82:03:11:b9:df:0b:
         02:ca:df:87:4c:b5:31:c3:c7:ca:59:e8:cc:0f:b2:cb:86:37:
         01:ad:fd:3b:4e:1f:bc:cf:ce:0e:4b:1c:6c:09:11:1a:ee:bf:
         e3:8d:1a:b6:d5:73:97:09:68:4c:82:b3:52:eb:27:56:c7:67:
         d9:6e:a8:31:90:2f:8f:15:d8:69:c8:e7:9f:0f:f0:76:82:c8:
         e7:a1:53:de:bb:4f:fa:ec:9c:d7:c1:0d:b0:72:3f:a1:5f:79:
         f5:b7:5c:76:08:bc:e7:74:7c:e3:51:74:15:50:2c:5a:d1:f6:
         14:d0:54:be:a3:ff:01:2e:6d:27:de:c5:7f:0a:c2:15:a7:4c:
         11:cc:79:03:59:26:7a:b4:3c:ad:2f:bc:73:ee:9f:b4:d3:18:
         ac:cb:10:6c:8b:df:9d:78:5c:23:27:20:d1:bd:6b:11:c7:56:
         67:75:35:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:07:56 2025 by rpki-client