Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/323830343a6430303a3a2f33322d313238203d3e203532353833.roa
File:                     323830343a6430303a3a2f33322d313238203d3e203532353833.roa (raw, json)
Hash identifier:          ANaUa4vyoixcr5Neo53gxUm6Ke6+6JB+jQKW/IcTvLM=
Subject key identifier:   13:B2:BB:3A:C3:91:88:CA:9A:79:BC:A7:6D:0A:62:ED:98:DE:C1:76
Certificate issuer:       /CN=E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9
Certificate serial:       254EDFDBA8978FA7473404928793F68AC6A60BCA
Authority key identifier: E1:97:0E:01:B5:16:F8:93:C6:1C:B2:5B:64:A1:FB:0E:8C:F7:DC:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/323830343a6430303a3a2f33322d313238203d3e203532353833.roa
Signing time:             Mon 15 Jul 2024 13:30:05 +0000
ROA not before:           Mon 15 Jul 2024 13:25:05 +0000
ROA not after:            Mon 14 Jul 2025 13:30:05 +0000
asID:                     52583
IP address blocks:        2804:d00::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.crl
                          rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 12:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4e:df:db:a8:97:8f:a7:47:34:04:92:87:93:f6:8a:c6:a6:0b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9
        Validity
            Not Before: Jul 15 13:25:05 2024 GMT
            Not After : Jul 14 13:30:05 2025 GMT
        Subject: CN=13B2BB3AC39188CA9A79BCA76D0A62ED98DEC176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3f:48:2f:6f:0c:dc:ed:e7:94:64:4c:9a:18:
                    e4:c9:d1:e0:19:6a:33:ab:7c:14:9e:89:3c:79:d0:
                    f6:17:86:bd:69:86:5b:5b:bc:2d:87:2b:bc:c4:af:
                    ad:be:fd:3c:01:3f:0a:0c:4e:79:59:6c:dd:1e:66:
                    c3:ce:fe:01:48:a4:ca:f9:bc:07:eb:93:f7:ee:41:
                    8f:92:9c:87:e9:43:34:7e:54:5d:5a:af:5f:29:13:
                    7c:74:1e:82:6f:2f:03:8e:3c:5e:1d:9d:08:b7:1a:
                    9e:70:c8:bd:e6:b7:15:6a:23:03:5b:b4:b4:b9:c2:
                    48:2e:66:f0:b3:dd:c9:9a:8f:5e:6c:20:d4:7f:07:
                    a4:50:00:d7:ca:79:e7:35:bd:d8:c0:10:5e:5a:36:
                    03:de:5d:c0:b2:1d:5a:20:8d:9f:48:c3:f4:6d:38:
                    ae:7d:5a:bf:78:1e:f9:be:49:c6:84:b6:4b:4f:db:
                    9f:92:d7:d3:3e:49:b7:17:b3:d5:8d:0d:2b:31:47:
                    92:64:62:ff:9e:7e:a1:a0:26:e2:38:ba:7b:8f:83:
                    f7:51:4f:2e:2d:93:09:74:9a:48:d2:47:06:57:94:
                    41:3d:82:2c:15:03:f3:e0:b3:d2:75:a6:04:a2:51:
                    c8:2c:41:52:1d:2d:38:49:bc:0d:ce:dd:77:94:ff:
                    4d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B2:BB:3A:C3:91:88:CA:9A:79:BC:A7:6D:0A:62:ED:98:DE:C1:76
            X509v3 Authority Key Identifier:
                keyid:E1:97:0E:01:B5:16:F8:93:C6:1C:B2:5B:64:A1:FB:0E:8C:F7:DC:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/323830343a6430303a3a2f33322d313238203d3e203532353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:2c:7f:0f:0f:ee:73:69:03:51:72:ad:09:e6:a9:8e:1c:c7:
         37:a0:7f:bb:89:4b:91:6f:b2:2b:85:10:31:d2:d5:e3:b9:86:
         87:81:a9:df:3e:a6:71:f1:43:f5:3f:68:08:74:4a:ca:f7:d2:
         e1:a0:5d:38:a6:20:5d:1f:a0:21:2a:f6:64:12:6d:12:b9:00:
         cc:0c:59:d0:83:88:02:eb:22:f4:d2:6c:14:b5:44:5c:20:e8:
         31:a5:c0:6f:97:f2:d8:4b:6c:19:79:a3:2a:4d:a0:02:e8:b7:
         34:de:34:9c:93:2b:4b:85:0b:e5:74:f4:bf:09:cd:93:7a:7b:
         8a:c8:b2:ec:2a:e8:e9:09:18:b7:ef:da:42:38:cc:c9:f8:46:
         9d:c7:da:a4:6c:0d:30:ac:18:90:2b:47:41:34:4f:9a:68:12:
         95:3a:f6:c6:d5:35:ec:76:db:8a:de:94:9e:95:92:ed:17:36:
         19:fc:23:85:f3:fb:69:55:f3:5c:19:32:51:e6:ce:a2:57:ad:
         ba:07:cc:1e:9d:af:39:b0:0a:b2:16:fc:cc:92:41:51:eb:58:
         0a:eb:1e:7e:b3:e0:46:72:b8:70:50:e5:3f:20:d7:a1:6a:52:
         03:3d:c0:cb:ef:bc:b5:97:f6:51:21:84:3a:91:8b:c6:2d:25:
         43:95:d7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:54 2025 by rpki-client