Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/323830343a336133343a3a2f33322d3430203d3e20323632363136.roa
File:                     323830343a336133343a3a2f33322d3430203d3e20323632363136.roa (raw, json)
Hash identifier:          nSnbtrs+X54XvqyJxHaXG9Mn9fxQNBk3b0UQ8JJHe9U=
Subject key identifier:   76:1D:69:64:58:71:D4:DB:4C:6F:64:01:60:DD:61:BA:95:02:D5:78
Certificate issuer:       /CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
Certificate serial:       23B34B9C8F4AB6BC05F1C12F067721AC40854459
Authority key identifier: 53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/323830343a336133343a3a2f33322d3430203d3e20323632363136.roa
Signing time:             Thu 06 Mar 2025 05:00:16 +0000
ROA not before:           Thu 06 Mar 2025 04:55:16 +0000
ROA not after:            Thu 05 Mar 2026 05:00:16 +0000
asID:                     262616
IP address blocks:        2804:3a34::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl
                          rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 15:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b3:4b:9c:8f:4a:b6:bc:05:f1:c1:2f:06:77:21:ac:40:85:44:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
        Validity
            Not Before: Mar  6 04:55:16 2025 GMT
            Not After : Mar  5 05:00:16 2026 GMT
        Subject: CN=761D69645871D4DB4C6F640160DD61BA9502D578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:cd:a8:22:77:9c:f1:1c:39:d1:d7:28:fb:
                    13:20:6f:05:15:f4:dd:d1:7e:f4:f1:f1:f4:56:29:
                    70:3a:61:55:54:86:1d:32:e4:e5:3d:05:e5:22:1a:
                    d8:0a:44:2f:c6:86:0f:20:ac:15:56:8c:11:88:4d:
                    f1:46:a9:e8:e4:14:58:1c:17:e4:27:7b:eb:08:f6:
                    be:99:12:5d:10:6c:3b:60:4b:85:83:00:31:28:01:
                    f0:f3:a5:f7:9b:e1:a6:92:1e:c5:d4:3c:66:3f:f8:
                    6c:22:3e:f5:78:b2:2b:0d:9c:25:f9:eb:6c:88:63:
                    07:06:40:9e:8a:72:a4:cf:32:b2:25:ba:26:bb:64:
                    bc:00:06:97:e2:64:ba:06:f0:e8:78:b4:9d:34:79:
                    cc:7b:36:8e:99:c1:8f:d5:3c:43:85:bc:38:2a:0b:
                    e0:49:f8:22:aa:77:d7:b5:76:cd:10:3e:07:dc:85:
                    f4:d8:24:0f:b1:ed:5a:f3:e1:b2:89:89:23:49:3f:
                    81:c9:e7:dc:17:13:08:34:2b:dc:34:8b:18:9b:e3:
                    31:20:59:85:d1:c8:48:6d:0d:80:53:07:46:55:25:
                    01:80:09:18:0d:8b:42:b0:e4:01:96:1b:5d:ab:be:
                    35:da:ff:f2:71:fe:27:af:f7:55:94:4e:31:cc:0c:
                    7e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1D:69:64:58:71:D4:DB:4C:6F:64:01:60:DD:61:BA:95:02:D5:78
            X509v3 Authority Key Identifier:
                keyid:53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/323830343a336133343a3a2f33322d3430203d3e20323632363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a34::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:c0:3a:14:6f:93:7e:7b:8e:07:6e:1d:7d:82:13:38:d1:b4:
         22:e6:1b:e2:e7:a9:0b:20:0f:cc:80:81:18:4f:f1:9d:61:dd:
         04:63:2f:a7:bb:52:1a:6c:a4:b4:ec:1b:57:58:9f:70:f6:21:
         b4:0e:65:f5:29:18:8f:40:16:f7:4e:1d:5d:6a:71:2f:53:a4:
         aa:2f:bc:73:77:83:0e:3d:a3:c1:41:ce:5a:ee:c4:81:b1:78:
         c4:8f:f6:0b:e1:04:d8:66:59:51:e9:a2:26:5d:9e:17:45:06:
         21:73:51:7e:28:dd:b7:94:25:e1:02:b3:f7:27:d3:81:b4:c4:
         15:69:59:80:28:c5:0c:83:d7:23:f5:44:fc:dd:75:4f:73:81:
         48:1c:1a:10:e5:2e:29:01:19:a4:14:a1:d7:4d:44:b3:ef:d1:
         e5:b5:e1:a6:d0:a3:47:d6:7d:c3:1f:5e:39:90:ad:b6:55:91:
         9e:2c:82:6c:f8:74:04:bf:86:92:57:14:66:d8:91:4d:84:49:
         5e:aa:25:00:af:04:d7:e7:f6:47:0f:37:68:e2:61:d0:e1:57:
         da:a4:77:ae:d7:2e:86:f2:c2:f8:ee:a1:2a:9f:bc:74:5f:fa:
         f2:81:98:cd:13:f9:0c:41:bb:c3:da:bf:cb:f4:44:43:b8:41:
         2e:22:68:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:35 2025 by rpki-client