Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a3a2f33322d3332203d3e20323730373933.roa
File:                     323830343a373138303a3a2f33322d3332203d3e20323730373933.roa (raw, json)
Hash identifier:          G/8sOQAKJ2pRfqjgiD8KuFlR3xRUXqDfDJ8G294ZuXU=
Subject key identifier:   93:81:C6:C2:E0:73:D1:EF:4B:6A:9A:19:66:01:AC:B3:E2:EE:CA:BC
Certificate issuer:       /CN=AAC19A004E25530B8859C605F2862F7AB78E6003
Certificate serial:       525780A6A432F3FBDB0AAA59E6D2FC1D2F3E2620
Authority key identifier: AA:C1:9A:00:4E:25:53:0B:88:59:C6:05:F2:86:2F:7A:B7:8E:60:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC19A004E25530B8859C605F2862F7AB78E6003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a3a2f33322d3332203d3e20323730373933.roa
Signing time:             Wed 30 Apr 2025 18:25:18 +0000
ROA not before:           Wed 30 Apr 2025 18:20:18 +0000
ROA not after:            Wed 29 Apr 2026 18:25:18 +0000
asID:                     270793
IP address blocks:        2804:7180::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/AAC19A004E25530B8859C605F2862F7AB78E6003.crl
                          rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/AAC19A004E25530B8859C605F2862F7AB78E6003.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC19A004E25530B8859C605F2862F7AB78E6003.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 16:47:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:57:80:a6:a4:32:f3:fb:db:0a:aa:59:e6:d2:fc:1d:2f:3e:26:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAC19A004E25530B8859C605F2862F7AB78E6003
        Validity
            Not Before: Apr 30 18:20:18 2025 GMT
            Not After : Apr 29 18:25:18 2026 GMT
        Subject: CN=9381C6C2E073D1EF4B6A9A196601ACB3E2EECABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:e5:de:16:ee:ce:e4:43:77:9c:8a:47:13:
                    51:df:04:21:d0:1c:2a:ce:19:1f:c8:3b:d6:ce:5e:
                    11:77:8a:cb:11:41:26:3b:aa:70:f0:44:90:ef:36:
                    b4:cb:c6:48:df:07:a7:eb:e1:c3:d1:11:6f:bd:c4:
                    4f:09:e4:36:76:31:c8:ad:3a:7f:57:45:61:d2:cb:
                    af:1d:97:a9:29:d9:08:c8:f1:ef:5a:11:b5:12:62:
                    9e:6b:14:c8:02:13:d8:5f:62:f1:14:83:4f:49:f5:
                    a8:34:64:9b:45:2c:ef:58:b0:4f:0b:b5:4f:d0:eb:
                    10:46:d7:2f:ac:0d:50:4c:4a:b7:8b:16:a3:fd:67:
                    de:f9:f6:8a:bd:77:2f:0c:08:da:15:0b:1a:de:7c:
                    15:61:0a:9a:19:cd:d4:66:c8:5e:dc:77:31:b7:e4:
                    1c:af:43:30:f1:0b:87:0e:41:55:9d:2b:04:60:79:
                    70:a0:17:f7:b3:fb:09:df:05:42:1c:4b:9b:56:f1:
                    5c:37:6c:86:c4:5e:d8:35:6d:c3:bb:5f:5b:44:4c:
                    26:2b:69:58:99:38:b6:d2:1b:41:ef:cb:cb:c4:88:
                    9e:f5:db:67:14:b9:24:2d:33:13:1c:10:4f:85:21:
                    a3:9b:3b:94:da:da:d1:d0:87:8f:7b:d6:31:52:45:
                    c8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:81:C6:C2:E0:73:D1:EF:4B:6A:9A:19:66:01:AC:B3:E2:EE:CA:BC
            X509v3 Authority Key Identifier:
                keyid:AA:C1:9A:00:4E:25:53:0B:88:59:C6:05:F2:86:2F:7A:B7:8E:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/AAC19A004E25530B8859C605F2862F7AB78E6003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC19A004E25530B8859C605F2862F7AB78E6003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a3a2f33322d3332203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7180::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:c2:9c:f1:85:51:42:b9:a6:f9:02:79:86:bc:c3:76:b6:ee:
         16:ae:b8:a5:f6:9b:c1:a9:18:d8:ff:5d:36:0a:47:94:86:0e:
         e6:b4:c0:f2:dd:69:33:1f:90:c8:65:6c:ed:b8:d4:e8:cb:d0:
         13:69:25:a1:0a:84:ca:58:c3:1b:84:91:0e:e7:e9:bf:90:a5:
         15:23:5c:9f:fa:6a:97:35:de:2b:db:90:df:f4:69:73:7a:88:
         92:b0:79:a2:86:ad:3a:a6:cd:07:60:c5:ce:07:1b:7f:18:f1:
         e3:25:34:af:f0:6e:7b:bc:b1:0f:c5:23:19:3c:01:5a:2a:27:
         6f:82:44:22:0f:82:dc:c8:d6:8d:f9:99:34:45:a6:7c:ae:79:
         a2:f2:26:ea:0b:06:fb:af:4f:06:58:19:d8:38:f7:ad:7f:dd:
         ea:5a:d5:79:f5:94:22:6c:cd:e6:9a:ab:a1:17:a8:64:84:cd:
         4f:77:95:32:e4:16:65:ea:98:6c:58:76:05:4e:5f:91:27:e9:
         69:cd:e2:b6:eb:64:5e:f0:c4:d7:81:b5:a8:37:2c:62:67:dd:
         57:72:41:fa:9d:9f:52:0c:bb:c2:ce:c7:fd:47:f9:5a:57:5e:
         cf:b1:eb:64:af:f0:65:ea:43:54:63:94:9c:cb:70:19:70:64:
         8f:b1:f9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:39:35 2025 by rpki-client