Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a6466343a383030303a3a2f33332d3333203d3e203532353331.roa
File:                     323830343a6466343a383030303a3a2f33332d3333203d3e203532353331.roa (raw, json)
Hash identifier:          cpf0OjUClKONdKQvoLZIoLdc7i4ox1I5IeuvHDMGUOI=
Subject key identifier:   1F:25:98:48:75:F1:9A:FC:06:C8:C3:1B:FD:5F:B1:4F:F6:71:00:E8
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       17D9A94E67ABA87DDC0E1D02C70BB0F5CF2CD006
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a6466343a383030303a3a2f33332d3333203d3e203532353331.roa
Signing time:             Thu 06 Mar 2025 01:43:43 +0000
ROA not before:           Thu 06 Mar 2025 01:38:43 +0000
ROA not after:            Thu 05 Mar 2026 01:43:43 +0000
asID:                     52531
IP address blocks:        2804:df4:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 06:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d9:a9:4e:67:ab:a8:7d:dc:0e:1d:02:c7:0b:b0:f5:cf:2c:d0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Mar  6 01:38:43 2025 GMT
            Not After : Mar  5 01:43:43 2026 GMT
        Subject: CN=1F25984875F19AFC06C8C31BFD5FB14FF67100E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:da:50:18:dd:5a:a6:d9:82:16:a1:c0:79:cb:
                    90:44:56:19:ae:d5:63:ed:d7:de:59:a7:8f:f6:ed:
                    9c:ee:11:b6:80:81:ec:87:a0:e0:96:a6:18:8b:13:
                    01:f0:7d:b4:e7:8f:b5:b7:d5:24:f6:a3:3a:54:87:
                    91:78:2a:bf:e3:3e:e2:3c:af:36:30:c5:a9:bf:65:
                    aa:79:b4:90:61:a4:a4:f4:de:0e:4e:cb:7d:8e:6b:
                    d3:4a:5a:cc:32:09:36:1c:65:88:54:dc:85:8b:d8:
                    3a:df:80:d8:bd:13:37:09:02:87:c5:c0:dc:94:f3:
                    0e:fe:cf:44:42:e2:79:0e:99:9e:53:19:78:b4:9c:
                    9b:42:44:c0:d5:86:bd:cc:d1:3d:d9:16:8e:1d:a4:
                    5a:47:2c:08:d3:52:f0:33:78:49:bc:37:c3:48:8f:
                    ff:5d:a2:08:35:73:1c:3f:23:28:3b:8d:f7:48:27:
                    37:13:31:d8:68:b0:5d:13:ad:b1:a5:2d:64:42:76:
                    26:bf:f9:cf:ef:9d:5a:9c:a9:9c:8c:0b:1c:b3:81:
                    7d:42:96:cf:03:19:bc:fa:aa:f3:09:97:04:65:c7:
                    a9:77:5e:58:47:fc:ac:03:65:69:f1:02:af:e2:ed:
                    d0:5b:53:7d:e9:3e:6a:28:ee:94:de:71:9b:aa:0b:
                    b1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:25:98:48:75:F1:9A:FC:06:C8:C3:1B:FD:5F:B1:4F:F6:71:00:E8
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a6466343a383030303a3a2f33332d3333203d3e203532353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:df4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1b:ed:eb:0e:1d:3e:5c:7a:5e:dd:ef:c8:58:12:f8:35:c8:a3:
         5b:2b:2d:45:4a:e2:eb:1e:75:7e:0d:47:ba:bf:c4:66:d3:72:
         af:bf:32:0c:a7:62:6e:c6:eb:1d:6a:36:25:28:54:bf:65:41:
         cb:1a:9f:d0:bb:b8:a7:fc:d3:91:8a:99:77:4a:82:50:98:45:
         dd:8f:4e:e0:85:18:93:a2:65:7c:13:6e:f8:d6:8c:aa:cd:fa:
         78:fb:f9:e0:10:85:d0:6c:8f:73:c7:f7:1f:90:0a:20:42:c5:
         a8:48:54:41:d0:5b:d5:6a:75:b1:7c:b1:b2:64:f2:27:2d:cb:
         27:fb:82:25:1e:d0:68:d0:be:82:2b:7d:4b:03:6d:28:8f:27:
         6c:9e:07:0d:75:cc:6f:04:a5:79:89:b4:81:be:b2:42:2b:0c:
         cc:ea:47:7d:d9:31:57:b8:6a:98:95:1b:ff:57:25:17:27:75:
         ee:a8:22:89:9d:46:6e:45:cf:0d:7c:c4:18:39:2d:45:37:73:
         0d:be:a1:ae:d2:c8:91:1c:5e:0e:68:3d:20:d3:41:08:f6:18:
         59:84:a3:d8:53:cb:d8:e6:dd:d4:e7:18:dd:03:16:0c:f8:12:
         ff:51:c0:c8:19:2c:1c:6e:72:aa:9b:06:24:c3:bc:f2:50:8e:
         72:cd:da:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:11:34 2025 by rpki-client