Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a376530303a3a2f34302d3430203d3e20323638343235.roa
File:                     323830343a353130343a376530303a3a2f34302d3430203d3e20323638343235.roa (raw, json)
Hash identifier:          uLu9gWUq6/BimsV43hOxu+K+0rS7t0/6Njcdq0Bi1g8=
Subject key identifier:   E9:2F:8F:E3:D3:23:D8:AE:34:F1:02:2D:E2:E7:04:F5:0B:A1:F3:E8
Certificate issuer:       /CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
Certificate serial:       7D3F0EBF4BE72F883A45CC6AC034043D9204FAC8
Authority key identifier: E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a376530303a3a2f34302d3430203d3e20323638343235.roa
Signing time:             Tue 06 May 2025 18:38:16 +0000
ROA not before:           Tue 06 May 2025 18:33:16 +0000
ROA not after:            Tue 05 May 2026 18:38:16 +0000
asID:                     268425
IP address blocks:        2804:5104:7e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl
                          rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 22:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3f:0e:bf:4b:e7:2f:88:3a:45:cc:6a:c0:34:04:3d:92:04:fa:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
        Validity
            Not Before: May  6 18:33:16 2025 GMT
            Not After : May  5 18:38:16 2026 GMT
        Subject: CN=E92F8FE3D323D8AE34F1022DE2E704F50BA1F3E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:15:83:09:59:ac:02:9e:03:0d:34:3f:63:3f:
                    06:7d:e5:ac:2a:7e:f2:a0:32:18:5f:ed:97:77:c2:
                    eb:86:a7:7c:2c:1a:c1:4a:fe:38:37:ae:65:4c:b5:
                    bb:e4:a1:c6:cd:55:55:ed:0c:ab:0a:03:fa:43:2b:
                    74:41:fc:7f:13:c3:f6:27:5f:f2:28:0d:05:a4:98:
                    7f:34:53:0b:55:ea:e5:d7:ba:aa:22:21:e1:86:ec:
                    90:e7:18:64:a5:c7:f9:c1:1a:83:0f:55:c5:2a:db:
                    e3:34:4d:ab:a9:a4:f7:15:e8:04:48:c1:c6:5e:0d:
                    bf:28:3d:80:fa:e2:86:b2:bc:56:d9:0e:6c:06:38:
                    f9:40:59:bb:89:78:7b:5c:cc:18:9d:ac:eb:e6:3a:
                    05:66:f8:0f:18:e1:af:47:a2:3e:aa:c3:ee:fb:0d:
                    c0:c4:1c:c8:59:de:c6:9b:fc:3c:8e:ed:14:91:f0:
                    b3:93:a0:be:fe:5b:16:ce:e0:c5:69:5f:69:81:43:
                    e5:36:92:af:8a:64:6c:59:1e:9f:3a:97:49:04:3a:
                    33:b6:e5:21:de:33:f1:ed:7c:80:ed:21:94:c6:bc:
                    e9:35:76:96:ba:27:41:6c:bc:31:25:e8:a1:cf:ab:
                    35:4e:5c:79:86:cb:99:69:79:87:b0:a8:d9:3e:3c:
                    71:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2F:8F:E3:D3:23:D8:AE:34:F1:02:2D:E2:E7:04:F5:0B:A1:F3:E8
            X509v3 Authority Key Identifier:
                keyid:E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a376530303a3a2f34302d3430203d3e20323638343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5104:7e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c3:f9:cd:c3:a0:0d:f0:b8:e3:19:25:d3:83:40:83:90:cd:79:
         db:a7:fb:c0:0c:eb:6e:4b:8d:11:21:24:1e:db:af:24:a6:36:
         ec:cf:c3:21:3a:27:55:88:d8:ff:b4:ea:12:f3:63:03:4b:4e:
         12:30:b9:9f:23:5b:b6:6a:3e:7c:b1:d1:b2:e4:2f:72:91:f4:
         e2:79:12:ac:04:3e:14:09:4c:a9:e4:24:2d:74:0d:0d:11:77:
         d3:2f:60:57:d3:d8:19:22:08:d3:cb:3a:c1:0c:a0:f2:05:5b:
         e4:f2:fb:48:aa:28:01:2f:a2:79:17:ab:3f:84:0d:26:9f:94:
         75:84:18:9c:7f:e0:1a:63:c8:6c:25:ad:8b:1a:3c:dd:e0:39:
         73:bb:3c:dd:86:90:ed:2e:17:6e:c9:1e:d7:58:51:52:db:78:
         9a:ba:e5:59:d0:a7:ec:2f:5b:ae:c5:25:9a:65:54:93:f8:ca:
         24:b7:eb:83:5f:46:49:76:1e:ca:b2:38:13:7d:12:71:3f:fa:
         84:ce:19:f9:80:fe:17:58:10:cc:0f:44:6c:d4:d9:90:5f:ee:
         74:86:a6:12:4e:35:9c:7a:ce:2f:52:dc:77:c9:5c:b6:09:20:
         33:dd:3b:0a:18:e3:51:22:b9:d7:10:47:77:60:ab:32:55:61:
         17:44:b7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:34:41 2025 by rpki-client