Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a6466343a3a2f33332d3333203d3e203532353331.roa
File:                     323830343a6466343a3a2f33332d3333203d3e203532353331.roa (raw, json)
Hash identifier:          LMIpjdApJ8LTe5gHPdfJZWIEF+7Azwi6TdWi5A+e8Sk=
Subject key identifier:   38:D0:2E:80:FD:0C:65:48:06:6B:3B:9B:76:B0:45:26:A3:58:3F:21
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       7C2BB87C2D8E185092B9914FAF23156562B9CCF8
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a6466343a3a2f33332d3333203d3e203532353331.roa
Signing time:             Thu 06 Mar 2025 01:43:43 +0000
ROA not before:           Thu 06 Mar 2025 01:38:43 +0000
ROA not after:            Thu 05 Mar 2026 01:43:43 +0000
asID:                     52531
IP address blocks:        2804:df4::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 16:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:2b:b8:7c:2d:8e:18:50:92:b9:91:4f:af:23:15:65:62:b9:cc:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Mar  6 01:38:43 2025 GMT
            Not After : Mar  5 01:43:43 2026 GMT
        Subject: CN=38D02E80FD0C6548066B3B9B76B04526A3583F21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:91:c6:a7:89:95:8f:da:95:6b:10:2f:11:e0:
                    3b:6e:d4:59:ab:3a:73:58:6d:7c:cc:44:c8:13:3f:
                    a0:42:2c:d1:b7:82:71:84:28:06:1d:3b:42:b1:84:
                    63:6f:c3:92:75:2e:ce:6c:5f:2d:1c:db:5d:38:2c:
                    bb:05:ad:e6:7c:38:ba:46:6a:09:b6:26:9c:b6:0d:
                    1a:d5:a8:82:1f:8a:c9:c9:26:20:6b:ca:bf:ae:05:
                    72:16:26:e7:5d:f8:d9:c9:df:a4:f2:d4:41:c0:d5:
                    84:bb:24:b7:c1:bd:56:67:23:e2:77:a0:57:a9:15:
                    ea:83:f1:ee:f6:c8:78:60:3d:7c:f4:f9:83:92:8e:
                    8f:28:77:83:02:cd:40:db:47:4e:f2:60:f7:e6:d9:
                    ff:4d:e7:c5:48:60:7a:6d:ad:1b:1a:31:59:f6:54:
                    2d:71:e8:ac:dc:73:7f:18:d2:7c:f8:e8:69:45:de:
                    4b:f5:b0:6f:fa:2e:49:99:ec:75:1f:62:51:15:f1:
                    fd:83:61:b3:0a:8a:b2:21:bc:dc:05:a8:72:c0:13:
                    36:c8:45:ab:d5:27:86:e7:2d:0e:a3:77:05:d4:9b:
                    df:f1:3e:19:5e:49:8f:cc:0d:ef:b8:71:9d:04:99:
                    f0:f2:f3:0e:fa:e7:df:d9:19:94:ac:d7:47:6a:cf:
                    02:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D0:2E:80:FD:0C:65:48:06:6B:3B:9B:76:B0:45:26:A3:58:3F:21
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a6466343a3a2f33332d3333203d3e203532353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:df4::/33

    Signature Algorithm: sha256WithRSAEncryption
         a0:5a:35:11:92:8d:ac:1e:ac:ed:ea:bc:eb:d6:f5:d1:db:ad:
         16:0e:af:9b:df:95:0b:72:fc:90:a2:b6:1a:57:f8:f5:72:32:
         c1:82:ed:d2:04:33:49:c4:b7:d6:ad:c3:41:54:28:30:c0:40:
         7b:f9:23:5f:ef:78:70:d0:98:e9:e7:c0:b1:7e:00:a2:89:be:
         cb:29:9d:22:1f:29:c3:f0:28:a3:45:5d:cd:df:51:70:7e:9c:
         9c:1f:65:c9:df:48:2a:55:fc:01:97:71:f9:e7:24:f9:f3:7a:
         ae:fd:32:59:de:b6:fa:c5:28:2b:ed:76:cc:e5:3a:9e:93:7e:
         de:cb:85:10:af:39:38:db:f7:46:f1:bc:25:53:b5:cf:df:3f:
         1a:3b:8d:d4:2e:ce:7d:1e:c3:fc:c8:af:57:70:e8:e3:d5:95:
         22:47:9d:06:79:c4:12:3e:63:a5:60:d5:5a:84:88:9c:c3:a7:
         d5:0f:53:26:9f:7a:80:c7:de:c0:35:47:d2:35:2a:96:a3:51:
         31:9e:a8:ab:d6:4d:c6:77:68:06:c2:d5:5b:e0:9f:3d:32:4d:
         cc:ca:83:92:87:2a:e0:94:57:44:86:c6:de:4d:f3:c8:30:cb:
         13:71:c0:0c:b8:3b:77:b0:55:1c:e6:ca:58:b6:95:6d:f3:7f:
         84:e4:fb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:24:11 2025 by rpki-client