Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a3a2f33322d3332203d3e20323731333830.roa
File:                     323830343a376139343a3a2f33322d3332203d3e20323731333830.roa (raw, json)
Hash identifier:          p8gpCyP3CfAnrCHe29NjGEWs50bYRoVwXF0E70Gc7Ts=
Subject key identifier:   AA:A6:03:29:B7:7E:94:1D:03:35:D0:5B:45:15:AE:B0:E4:65:83:26
Certificate issuer:       /CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
Certificate serial:       2B3DC6F07A90187803866BB61A2171D6C0388655
Authority key identifier: 4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a3a2f33322d3332203d3e20323731333830.roa
Signing time:             Thu 06 Mar 2025 14:33:21 +0000
ROA not before:           Thu 06 Mar 2025 14:28:21 +0000
ROA not after:            Thu 05 Mar 2026 14:33:21 +0000
asID:                     271380
IP address blocks:        2804:7a94::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl
                          rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 11:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:3d:c6:f0:7a:90:18:78:03:86:6b:b6:1a:21:71:d6:c0:38:86:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
        Validity
            Not Before: Mar  6 14:28:21 2025 GMT
            Not After : Mar  5 14:33:21 2026 GMT
        Subject: CN=AAA60329B77E941D0335D05B4515AEB0E4658326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d7:a3:47:4e:0c:65:3a:a4:92:df:94:21:9b:
                    3a:c4:9b:c1:be:84:11:93:f5:d2:7d:6f:0b:57:99:
                    1c:49:ee:66:81:53:5e:16:88:bf:a4:94:59:48:2b:
                    d7:19:c0:db:99:9f:cf:87:d6:26:9a:a9:2d:9a:d7:
                    01:56:a9:9c:21:46:ce:bb:43:94:93:9b:47:70:ca:
                    9b:19:86:bb:d4:c8:d5:34:32:0d:ea:75:14:c5:61:
                    36:84:cd:78:99:f9:d8:73:4d:60:e1:f2:56:59:8f:
                    03:08:d6:67:56:ab:7e:45:16:13:38:4a:c3:be:6a:
                    78:b0:2d:e1:c8:2c:0e:1a:ec:0d:20:34:4b:5c:11:
                    21:9e:ea:a1:a1:cc:5b:f1:d1:4c:e1:0d:f4:82:7b:
                    88:f5:bb:8b:b2:a6:e2:ff:fe:a4:58:1c:47:5c:6c:
                    ec:34:9c:fc:fe:18:df:e4:7b:82:48:08:17:a3:d2:
                    07:c5:11:a0:45:ca:ee:2e:ce:40:a4:35:a2:4a:7e:
                    60:9f:54:6d:24:06:b4:1b:5a:4f:c5:e6:12:93:dc:
                    04:d0:cc:22:b6:c9:23:91:5a:58:64:b4:4c:8f:eb:
                    2d:5a:b3:62:97:49:a4:5d:1f:eb:ea:4e:a6:37:19:
                    70:46:ce:86:cc:16:62:24:3f:86:7f:50:e7:0f:a7:
                    de:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A6:03:29:B7:7E:94:1D:03:35:D0:5B:45:15:AE:B0:E4:65:83:26
            X509v3 Authority Key Identifier:
                keyid:4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a3a2f33322d3332203d3e20323731333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a94::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:4c:58:d2:9e:18:de:3d:14:b3:10:e6:4d:be:89:a4:cb:14:
         35:01:24:eb:4c:81:46:4b:80:b1:31:50:0a:38:01:8f:27:8b:
         b0:91:e1:70:b5:9f:51:47:32:59:3d:3c:5b:57:a0:ba:7e:1a:
         00:5f:89:55:ca:94:6f:ba:3b:7d:b2:69:0b:90:aa:c8:e8:4b:
         6f:4d:92:0a:52:63:29:5b:61:33:87:d3:e3:cb:09:c5:ae:94:
         e9:0c:5f:81:bd:92:a1:1b:1e:d0:d0:d6:73:34:ae:16:83:68:
         79:9e:e0:f4:9c:2c:83:e9:ca:a7:9f:fd:05:91:60:38:b0:4a:
         0d:c3:3c:3f:b4:e9:5d:b6:51:1f:d1:5b:78:0f:ff:fa:5c:dd:
         3c:07:ba:18:3c:b0:b9:c7:18:12:fa:06:f8:07:77:1e:fd:5e:
         99:29:6e:81:ce:13:b1:ec:18:06:e9:02:dc:e6:a2:b5:a9:e0:
         5e:5f:4e:c1:ca:0d:6e:a6:69:8b:8d:fa:5e:3c:7e:e5:e3:8f:
         54:1e:5f:69:31:cf:50:04:71:e7:8d:2b:ae:41:c1:2b:8f:69:
         63:81:9b:bf:13:9c:5b:3b:89:bd:1c:a1:ff:08:36:ca:ba:76:
         5b:0f:c8:e0:79:49:c5:de:12:7c:2b:d9:54:9c:e2:f4:fd:8b:
         c8:65:80:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:53:34 2025 by rpki-client