Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/323830343a386332343a3a2f33322d3438203d3e20323733373832.roa
File:                     323830343a386332343a3a2f33322d3438203d3e20323733373832.roa (raw, json)
Hash identifier:          WtjmMp7Bep6h8xh9FRZHJddXwbfmCSBmONGWHCoQIGY=
Subject key identifier:   C2:D6:D1:AE:93:C4:42:8C:23:25:FC:C4:A9:C2:D4:30:08:F5:9C:27
Certificate issuer:       /CN=AD3E03F0337609F9F56ECDE68343DB12CC14C9A0
Certificate serial:       59A2B60A275E9F46687BF0E450BB2F50AA2C226A
Authority key identifier: AD:3E:03:F0:33:76:09:F9:F5:6E:CD:E6:83:43:DB:12:CC:14:C9:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/323830343a386332343a3a2f33322d3438203d3e20323733373832.roa
Signing time:             Wed 07 May 2025 19:31:17 +0000
ROA not before:           Wed 07 May 2025 19:26:17 +0000
ROA not after:            Wed 06 May 2026 19:31:17 +0000
asID:                     273782
IP address blocks:        2804:8c24::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.crl
                          rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 04:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a2:b6:0a:27:5e:9f:46:68:7b:f0:e4:50:bb:2f:50:aa:2c:22:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD3E03F0337609F9F56ECDE68343DB12CC14C9A0
        Validity
            Not Before: May  7 19:26:17 2025 GMT
            Not After : May  6 19:31:17 2026 GMT
        Subject: CN=C2D6D1AE93C4428C2325FCC4A9C2D43008F59C27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:71:13:c9:85:18:35:c6:10:66:b5:e3:29:46:
                    65:4d:b6:e5:59:3a:28:9f:f1:90:97:65:15:f9:7c:
                    0f:ed:1d:a9:7d:f4:bc:2f:1d:69:24:f7:f9:e4:14:
                    b1:0b:69:d7:fa:cd:21:7e:a5:01:24:7e:50:c1:c2:
                    fc:ab:ce:cd:4c:b1:32:1b:54:00:c1:f4:19:cf:dc:
                    d4:0a:a0:fd:31:ce:d8:88:23:80:08:06:d6:d5:79:
                    ef:b0:3f:17:97:15:b0:34:c8:78:ed:36:90:d1:6c:
                    7e:49:8f:a5:c2:8f:1b:5e:1c:79:9e:6c:94:e5:0c:
                    ab:ac:0e:34:7b:04:6f:74:c3:ee:9d:62:1d:2a:5a:
                    34:20:27:bc:b1:81:55:42:06:b0:52:7d:20:8b:d8:
                    d3:e8:bd:e0:ef:4f:8a:c6:7d:da:9f:b3:11:48:7a:
                    3a:d9:aa:2b:ed:2d:60:50:e0:6f:21:df:09:c7:40:
                    2a:94:56:9a:15:75:0e:42:50:9d:20:fb:c7:32:99:
                    d9:a8:22:77:93:6d:52:81:d4:db:fb:dd:90:6f:f1:
                    2f:9d:7e:6c:a5:07:29:ed:fe:c5:0e:7c:b6:c7:e0:
                    6b:7f:aa:0b:a9:7a:6a:e5:2e:cf:78:4b:f0:84:e9:
                    00:2a:44:13:0d:d5:0a:2f:e9:4d:e0:c0:c6:51:f4:
                    e3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D6:D1:AE:93:C4:42:8C:23:25:FC:C4:A9:C2:D4:30:08:F5:9C:27
            X509v3 Authority Key Identifier:
                keyid:AD:3E:03:F0:33:76:09:F9:F5:6E:CD:E6:83:43:DB:12:CC:14:C9:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/323830343a386332343a3a2f33322d3438203d3e20323733373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c24::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:42:e4:f7:20:90:e2:0a:3d:74:f2:b5:bf:5f:c3:64:03:86:
         b9:b1:df:0e:11:bf:fc:67:ed:2f:a8:0f:a5:7c:35:7b:03:26:
         3f:85:cc:b3:06:46:de:7b:89:17:ea:fb:08:71:46:27:f8:94:
         da:f0:a8:6e:d6:dc:da:d7:37:96:0b:7a:7f:7f:76:4f:9f:9b:
         e3:8d:70:8d:70:74:ca:ef:5f:46:5e:4b:51:36:fa:82:34:81:
         69:fb:bc:88:3e:b8:22:d7:5f:80:a1:f5:94:61:ec:98:77:b2:
         9d:3c:b4:ca:22:c1:6f:af:23:9f:dd:1d:11:31:92:6a:f5:3f:
         8e:d3:6c:c0:12:45:12:30:cb:99:59:10:62:d7:dc:6f:4e:4b:
         d7:7b:87:55:1a:12:03:ae:02:d6:23:6b:fe:ae:f8:ce:43:aa:
         77:9a:51:fb:86:83:f5:ba:a1:85:fc:9f:f0:46:de:dc:a6:b5:
         ec:f5:cb:49:6e:10:95:f4:82:81:cd:75:00:c3:33:15:f4:56:
         64:59:56:8c:48:98:f6:2a:62:c9:86:11:fe:11:04:3f:15:87:
         9a:37:1a:e3:ad:33:70:5d:ea:bc:e4:8a:bf:3a:ea:21:d7:05:
         92:01:e1:03:22:68:c9:cc:75:b7:03:b1:bb:75:56:27:18:ec:
         3e:60:f3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:18:14 2025 by rpki-client