Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/323830343a323434383a3a2f33322d3438203d3e20323634323132.roa
File:                     323830343a323434383a3a2f33322d3438203d3e20323634323132.roa (raw, json)
Hash identifier:          QLh34/K8q3OWo34HwqvBpdMmV6uRNXzRst8MWdcZRLA=
Subject key identifier:   91:01:62:53:C2:88:22:3E:7D:2E:5F:FB:29:0A:BD:BD:90:4C:6D:65
Certificate issuer:       /CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
Certificate serial:       38E09F6B4E0716A17B4EF1B5749963F989801911
Authority key identifier: 91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/323830343a323434383a3a2f33322d3438203d3e20323634323132.roa
Signing time:             Thu 13 Mar 2025 12:15:24 +0000
ROA not before:           Thu 13 Mar 2025 12:10:24 +0000
ROA not after:            Thu 12 Mar 2026 12:15:24 +0000
asID:                     264212
IP address blocks:        2804:2448::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl
                          rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 05:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e0:9f:6b:4e:07:16:a1:7b:4e:f1:b5:74:99:63:f9:89:80:19:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
        Validity
            Not Before: Mar 13 12:10:24 2025 GMT
            Not After : Mar 12 12:15:24 2026 GMT
        Subject: CN=91016253C288223E7D2E5FFB290ABDBD904C6D65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:db:8c:63:b2:72:ec:dc:c1:c7:34:43:6d:
                    89:3d:92:26:b3:6d:95:77:1c:40:c7:e6:cd:96:f9:
                    c1:b4:a9:d2:27:aa:f8:34:19:31:b9:2e:db:26:04:
                    2e:be:fd:e4:5d:f3:cd:fa:e2:88:df:75:eb:d9:71:
                    3c:f8:08:62:25:f8:ab:4a:6e:ac:a3:20:3e:95:54:
                    1f:56:ce:fa:69:da:2f:49:b1:d2:cb:ab:19:92:23:
                    a8:82:95:5f:0a:18:22:b7:00:69:06:70:66:d7:54:
                    81:ef:17:bd:cf:8c:a1:ac:bd:c6:31:69:d0:11:03:
                    24:bc:ec:d1:8f:f3:c5:52:36:18:65:e6:4e:9d:79:
                    91:c6:88:8e:0a:92:b1:8f:cb:e7:93:64:8f:db:dd:
                    61:23:ce:20:59:0a:0d:42:45:d6:60:6f:ff:6a:b2:
                    b1:10:6f:a9:4c:5f:ec:cf:21:e2:2d:d3:d3:41:6c:
                    b2:f5:0b:c3:25:cf:fa:1a:76:a6:52:08:94:08:36:
                    47:ba:5b:3d:d4:3f:9a:f8:d5:8b:36:43:f3:a0:a0:
                    a7:d2:d0:03:e8:bc:c0:97:68:8b:08:3a:18:21:75:
                    6f:f7:cd:d0:0c:d6:52:12:06:a8:fe:3d:60:4d:5a:
                    48:36:1a:15:1d:5c:fb:e2:cb:73:6a:d0:f8:20:75:
                    29:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:01:62:53:C2:88:22:3E:7D:2E:5F:FB:29:0A:BD:BD:90:4C:6D:65
            X509v3 Authority Key Identifier:
                keyid:91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/323830343a323434383a3a2f33322d3438203d3e20323634323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2448::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:57:bd:0c:aa:0d:76:f5:a7:a6:a4:b5:73:07:82:c8:2d:e1:
         ca:c4:26:c7:13:a7:9f:e3:25:b7:a3:d7:67:dd:05:37:82:98:
         dc:1a:03:f3:0c:1a:79:f2:64:8b:2c:05:e6:5c:c6:25:d1:f1:
         00:f9:88:84:d5:52:8f:1c:df:c9:a2:6c:ec:5b:aa:81:23:2b:
         0e:5b:93:a1:49:b3:6f:0b:4d:3c:ac:52:83:50:79:a5:c8:12:
         10:48:79:82:0d:08:20:ad:de:5c:34:b3:87:27:40:42:c7:c4:
         2b:2c:de:53:e9:98:bd:eb:61:71:c0:97:de:71:dd:cd:a7:ce:
         43:c2:0b:bf:35:04:aa:ad:f5:74:11:b4:2b:a2:c7:cc:20:19:
         fd:40:e6:0f:1f:4a:bd:4b:c3:4c:c6:2e:33:84:ee:32:54:ef:
         17:f2:01:95:65:e1:7d:9c:e7:99:49:3a:5f:ce:2f:6f:6b:de:
         fb:a6:be:bd:d7:54:95:26:b3:1a:00:f8:e0:c6:d6:47:60:b5:
         49:21:7b:5b:c5:3b:3d:94:10:36:30:6d:8a:c9:9f:a9:96:9a:
         ee:ea:d7:bc:62:cc:55:39:0a:7e:60:19:94:08:9b:5c:eb:8d:
         63:17:0f:e9:31:89:80:b0:46:07:53:5b:a6:91:48:96:14:52:
         f7:e9:23:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 18:33:00 2025 by rpki-client