Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/323830343a333034303a3a2f33322d3438203d3e20323634393339.roa
File:                     323830343a333034303a3a2f33322d3438203d3e20323634393339.roa (raw, json)
Hash identifier:          gzgB+hN3/XwnZ217gd/lKm+/0v3haf0w4F8jpPy/ba4=
Subject key identifier:   23:5A:C0:80:D5:C4:3C:29:0A:29:A5:3E:CD:A8:8F:F4:43:85:EE:9D
Certificate issuer:       /CN=00A0649BEB784D778983813CFFD9D01F42F24C95
Certificate serial:       3DFEF833F9B0AA86BF1E85F478968FD95FB55A4B
Authority key identifier: 00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/323830343a333034303a3a2f33322d3438203d3e20323634393339.roa
Signing time:             Thu 08 May 2025 23:11:58 +0000
ROA not before:           Thu 08 May 2025 23:06:58 +0000
ROA not after:            Thu 07 May 2026 23:11:58 +0000
asID:                     264939
IP address blocks:        2804:3040::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl
                          rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 15:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:fe:f8:33:f9:b0:aa:86:bf:1e:85:f4:78:96:8f:d9:5f:b5:5a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00A0649BEB784D778983813CFFD9D01F42F24C95
        Validity
            Not Before: May  8 23:06:58 2025 GMT
            Not After : May  7 23:11:58 2026 GMT
        Subject: CN=235AC080D5C43C290A29A53ECDA88FF44385EE9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b7:38:ee:33:50:42:5d:50:67:94:ed:61:16:
                    5f:90:24:98:b1:16:8a:99:6d:04:0d:bd:07:d6:f9:
                    d5:fd:46:8a:8a:69:e7:8c:e5:c7:2e:46:3c:19:f0:
                    00:6b:26:d1:8c:1b:2f:c1:34:55:c3:4c:42:d4:10:
                    ae:ce:1f:97:a8:fd:5e:38:55:48:04:07:c4:06:71:
                    0a:0c:e2:29:f1:9e:bc:5f:e8:d6:37:b1:00:b4:f9:
                    c3:05:aa:6c:39:e3:c9:86:1d:78:8d:ce:ae:b8:cd:
                    02:9a:3a:25:76:05:da:1c:ab:f8:20:ff:19:69:12:
                    a1:e9:01:a0:88:78:a4:91:13:a3:11:35:29:5c:6d:
                    a4:51:97:fb:36:8a:2f:17:81:f8:0f:58:17:03:ef:
                    a7:b2:65:10:36:a6:12:6d:3e:c8:84:60:75:d5:d1:
                    4c:b8:40:9a:26:ff:34:aa:48:7c:2a:b8:14:8b:03:
                    2e:bc:45:6b:63:81:22:36:eb:3a:64:56:0e:6a:b3:
                    d6:57:32:46:4f:c8:f3:6f:8e:f9:bf:97:1c:60:29:
                    16:8b:9a:48:76:47:ff:86:18:21:17:ea:68:e1:96:
                    1f:73:37:e0:95:99:a7:7a:f9:18:83:71:d9:e7:a6:
                    81:76:89:60:35:a6:56:05:18:33:56:45:72:87:01:
                    73:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5A:C0:80:D5:C4:3C:29:0A:29:A5:3E:CD:A8:8F:F4:43:85:EE:9D
            X509v3 Authority Key Identifier:
                keyid:00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/323830343a333034303a3a2f33322d3438203d3e20323634393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3040::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:b7:28:61:d7:36:9a:54:24:b9:85:ff:7d:60:5b:ad:f4:b5:
         31:74:8e:80:70:92:b0:68:f8:61:3d:38:36:a2:8e:c4:a6:72:
         92:c8:06:59:69:95:34:39:6b:08:c9:37:b6:ef:69:6e:71:7e:
         51:5b:10:a2:af:de:c9:89:28:5b:59:8b:d9:63:31:e4:2a:5a:
         c7:34:17:f6:b8:85:82:ac:3e:ca:2a:73:62:09:ac:8e:c4:bb:
         e1:51:e6:66:4f:81:38:f9:36:93:b0:51:0e:e3:ca:b7:34:00:
         d1:74:ee:e5:4b:a4:0a:36:15:bc:0d:52:60:18:3e:d5:eb:c2:
         4f:e0:0e:eb:09:77:f9:c4:2f:7f:e7:d0:8e:aa:72:e1:b3:f9:
         d3:24:a1:54:92:60:97:12:29:ee:cf:70:a6:b8:6d:a8:10:36:
         d1:f2:f5:1f:f8:4c:8d:fb:70:d8:9b:56:2f:61:b2:26:3a:3b:
         9b:38:39:f2:80:de:b0:d6:9f:28:3b:f6:fd:8a:ec:61:0a:11:
         e0:b8:77:43:96:ce:3f:55:0b:61:99:d9:41:96:f0:15:f0:3e:
         bc:73:fe:88:2f:de:40:96:d5:c4:48:b7:80:a5:65:b5:dc:86:
         29:7d:f4:21:3f:67:cc:29:a5:c8:9c:2a:76:25:33:71:07:87:
         74:ef:88:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:45:40 2025 by rpki-client