Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/323830343a393165343a3a2f33322d3438203d3e20323734363733.roa
File:                     323830343a393165343a3a2f33322d3438203d3e20323734363733.roa (raw, json)
Hash identifier:          s21rNeQfq9YTEKaQ6qP+omsM/9QsW3wpcSyzvCuwbG0=
Subject key identifier:   67:C1:3B:45:40:25:CA:B6:B8:4D:77:F4:E3:A5:41:15:F6:83:CC:F5
Certificate issuer:       /CN=17AE8ABC703FA8586809D4D87EB5C6452788A9EE
Certificate serial:       5B0B3CAE4A344B07B44E34EA618DDAD0646B6A30
Authority key identifier: 17:AE:8A:BC:70:3F:A8:58:68:09:D4:D8:7E:B5:C6:45:27:88:A9:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/323830343a393165343a3a2f33322d3438203d3e20323734363733.roa
Signing time:             Mon 16 Dec 2024 18:25:19 +0000
ROA not before:           Mon 16 Dec 2024 18:20:19 +0000
ROA not after:            Mon 15 Dec 2025 18:25:19 +0000
asID:                     274673
IP address blocks:        2804:91e4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.crl
                          rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:49:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:0b:3c:ae:4a:34:4b:07:b4:4e:34:ea:61:8d:da:d0:64:6b:6a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17AE8ABC703FA8586809D4D87EB5C6452788A9EE
        Validity
            Not Before: Dec 16 18:20:19 2024 GMT
            Not After : Dec 15 18:25:19 2025 GMT
        Subject: CN=67C13B454025CAB6B84D77F4E3A54115F683CCF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:18:71:4a:45:f6:99:1e:03:b6:b6:ed:7b:bd:
                    8d:fb:89:5a:7c:d0:46:f8:80:30:22:de:1c:10:4d:
                    ff:09:63:4f:6c:cb:1c:ac:78:5e:b0:61:09:39:95:
                    16:34:f5:04:3b:20:c1:21:46:ae:2f:51:3c:bb:e0:
                    8f:b5:e9:cc:ca:c9:b1:71:8d:8c:e0:1b:2e:ba:c3:
                    71:79:98:ad:57:df:db:3e:06:40:04:f8:0f:b4:64:
                    0b:d2:d1:f7:38:e0:4d:ee:08:07:95:72:fd:4b:62:
                    6b:cf:18:4d:1e:6b:a9:ae:43:33:b5:05:00:5d:61:
                    f8:60:02:d6:e7:c7:d9:f9:ea:0f:06:a3:30:46:f4:
                    05:2f:3e:8c:70:d3:c0:7f:0f:54:99:9b:56:e4:44:
                    54:fd:8c:5e:7c:ac:2f:9e:89:6c:5e:6e:16:9c:9f:
                    64:3e:4e:6f:d7:9c:80:b5:10:d4:cd:23:55:52:08:
                    bd:fd:f8:b6:a6:3c:56:13:0d:2a:90:73:6b:12:a4:
                    c8:b7:60:1a:db:3c:6c:a1:80:f2:ca:e3:ed:e8:bc:
                    30:2d:46:24:db:ff:72:ba:3a:9d:99:84:28:d8:d3:
                    d7:98:65:e7:a6:6e:59:81:0b:32:8c:85:01:39:58:
                    c2:5b:a0:44:00:b1:25:fe:0e:e6:02:4b:26:82:2b:
                    f4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C1:3B:45:40:25:CA:B6:B8:4D:77:F4:E3:A5:41:15:F6:83:CC:F5
            X509v3 Authority Key Identifier:
                keyid:17:AE:8A:BC:70:3F:A8:58:68:09:D4:D8:7E:B5:C6:45:27:88:A9:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/323830343a393165343a3a2f33322d3438203d3e20323734363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:61:8c:1c:16:7c:25:a2:68:1a:f5:e2:57:f4:b4:4c:9f:d0:
         5d:4e:9a:3b:50:1d:53:71:a7:6d:aa:3d:66:97:ad:1e:93:47:
         22:76:02:a6:89:86:65:f6:dc:fe:f2:44:b1:59:08:0a:1c:85:
         cc:bf:cc:86:66:28:bb:fb:15:76:0a:30:f7:50:14:ef:f4:6c:
         be:14:f2:15:74:95:cb:ca:b9:23:51:ce:d0:4b:8c:78:9d:31:
         ff:1c:61:72:f9:82:6c:dd:bf:b1:6f:4a:b3:58:72:25:0c:4b:
         8c:ad:e3:99:8a:c9:63:b9:6a:26:80:65:78:b3:33:9f:50:ef:
         d0:ba:68:93:50:5a:a6:17:3a:51:cc:a8:6f:d9:3a:1c:fd:5d:
         27:87:6b:b1:66:7f:6d:01:fe:2c:8c:cb:f6:53:c7:ec:5e:e6:
         b8:a5:46:6e:e1:57:19:a4:e0:9a:31:c5:cf:4c:7e:1e:7c:c8:
         ac:89:7f:5f:db:6f:f0:d4:bd:df:ca:a1:11:12:5c:42:ff:a8:
         e1:d9:e3:2b:10:37:dc:3d:f2:92:7c:e6:d0:ba:f5:a8:92:75:
         fe:85:19:9c:cf:f3:28:56:a5:c2:57:e0:a4:18:b3:db:51:06:
         be:8d:05:ad:ce:1f:f3:69:b0:53:73:a8:28:ee:fc:32:0a:47:
         6b:bb:1c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:14:08 2025 by rpki-client