Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/323830343a313363383a3a2f33322d3438203d3e20323633353531.roa
File:                     323830343a313363383a3a2f33322d3438203d3e20323633353531.roa (raw, json)
Hash identifier:          /hIpNtuEzhiojgRNiztWaFYPpbFP5H++w4j3J6l6unA=
Subject key identifier:   ED:79:59:C7:10:48:3A:08:64:3F:DB:D7:D7:74:F1:51:47:E4:D0:1A
Certificate issuer:       /CN=3D10000E40C545C40D0B40A419954E6B6B94E80F
Certificate serial:       5DD22D2EBDF77247B114E4579A51EC246EDC8B6E
Authority key identifier: 3D:10:00:0E:40:C5:45:C4:0D:0B:40:A4:19:95:4E:6B:6B:94:E8:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D10000E40C545C40D0B40A419954E6B6B94E80F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/323830343a313363383a3a2f33322d3438203d3e20323633353531.roa
Signing time:             Mon 07 Apr 2025 20:25:51 +0000
ROA not before:           Mon 07 Apr 2025 20:20:51 +0000
ROA not after:            Mon 06 Apr 2026 20:25:51 +0000
asID:                     263551
IP address blocks:        2804:13c8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.crl
                          rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D10000E40C545C40D0B40A419954E6B6B94E80F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d2:2d:2e:bd:f7:72:47:b1:14:e4:57:9a:51:ec:24:6e:dc:8b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D10000E40C545C40D0B40A419954E6B6B94E80F
        Validity
            Not Before: Apr  7 20:20:51 2025 GMT
            Not After : Apr  6 20:25:51 2026 GMT
        Subject: CN=ED7959C710483A08643FDBD7D774F15147E4D01A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:b3:03:b4:36:23:b0:bc:63:32:17:10:69:
                    be:10:b1:5a:82:ba:f3:df:81:34:d4:1a:ac:12:2f:
                    b1:ac:66:ad:13:13:02:2b:18:1a:0a:94:b9:6e:fc:
                    f8:81:61:08:01:7c:69:40:05:47:a8:39:14:3d:38:
                    70:39:00:a9:b3:92:51:4b:fd:df:2c:b0:44:40:6a:
                    8c:7f:c4:29:25:fe:a6:4d:8b:80:ad:20:71:6f:6d:
                    bc:6b:a7:08:c8:e3:b7:04:70:27:32:1d:56:47:0d:
                    dd:c0:29:7d:76:80:13:b1:0f:65:66:ff:fb:41:b1:
                    3a:c5:83:82:40:4c:8f:98:66:d7:25:64:c1:ee:e7:
                    a0:60:75:d4:c0:88:8e:59:6d:cf:37:1e:99:90:1d:
                    89:b5:35:37:c9:af:a1:2c:bc:d7:dd:f4:35:76:f1:
                    1e:56:cf:28:c1:8b:ea:3e:ef:84:d0:b9:f7:b8:cb:
                    d3:eb:d0:4d:0d:22:18:46:43:be:8f:33:e3:0e:6d:
                    c6:ec:e9:45:b1:bd:2b:83:78:ca:b9:43:b1:c8:45:
                    b8:f4:68:65:a5:55:82:1b:4e:77:71:98:d1:62:93:
                    57:50:ff:5b:30:93:f7:d3:59:c1:c3:f2:03:a6:90:
                    eb:41:21:19:a2:d2:f1:e3:e0:97:0f:b6:3e:f3:17:
                    f8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:79:59:C7:10:48:3A:08:64:3F:DB:D7:D7:74:F1:51:47:E4:D0:1A
            X509v3 Authority Key Identifier:
                keyid:3D:10:00:0E:40:C5:45:C4:0D:0B:40:A4:19:95:4E:6B:6B:94:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D10000E40C545C40D0B40A419954E6B6B94E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/323830343a313363383a3a2f33322d3438203d3e20323633353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:13c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:e9:19:a7:e0:ed:a6:76:1c:cb:5e:b4:44:5d:7e:8a:0f:59:
         75:aa:77:79:26:ba:96:20:d6:94:4b:87:cd:d0:64:6d:48:a1:
         4a:a3:39:37:9b:67:91:cb:a8:5a:d1:ae:f3:bb:fd:c3:77:7a:
         d5:0f:c9:e6:3d:69:3b:38:2f:e7:4e:aa:61:26:2f:2e:bb:f4:
         44:bb:3d:a7:36:06:8e:65:8d:b1:d0:26:cc:57:77:3f:5a:e9:
         eb:53:97:9c:17:95:b0:aa:d0:f9:24:8b:26:b1:b3:15:ef:7e:
         cf:77:09:5a:10:06:3f:ad:bf:c5:92:7c:c8:6b:6d:d3:fc:ab:
         b1:7c:cd:d7:79:b1:b3:f3:6a:db:a0:b4:a8:29:47:58:be:a5:
         66:4b:2c:10:96:19:2c:b5:e2:2c:21:4c:d5:27:73:2a:51:7a:
         0e:cf:7c:cd:dc:b3:eb:f7:2d:94:aa:0a:97:12:5c:57:f7:fc:
         2d:61:08:3a:4e:e4:96:88:3e:bb:53:15:ed:46:f8:c7:75:13:
         7f:f3:cd:46:ac:63:b4:7a:db:26:18:86:bf:12:1f:36:30:f7:
         e3:5a:3c:cb:fc:1d:6c:99:b0:46:19:37:54:2d:9d:7d:58:20:
         cf:02:a8:ac:81:9a:52:5a:78:dc:2b:f1:94:98:67:c3:c2:eb:
         eb:61:3e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:44:02 2025 by rpki-client