Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a3a2f33342d3334203d3e20323730373933.roa
File:                     323830343a373138303a3a2f33342d3334203d3e20323730373933.roa (raw, json)
Hash identifier:          zUqFqJprQHVDONM3injBArf36g1P1J0g1BLwsOlJoJs=
Subject key identifier:   14:F1:A1:2C:B0:6F:6F:DD:DE:F2:F8:1D:D8:6A:F4:F2:73:5E:60:46
Certificate issuer:       /CN=AAC19A004E25530B8859C605F2862F7AB78E6003
Certificate serial:       4EB0C2B7B44D50ECDC9BD1EEB55A40EB3DA997D2
Authority key identifier: AA:C1:9A:00:4E:25:53:0B:88:59:C6:05:F2:86:2F:7A:B7:8E:60:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC19A004E25530B8859C605F2862F7AB78E6003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a3a2f33342d3334203d3e20323730373933.roa
Signing time:             Wed 30 Apr 2025 18:25:18 +0000
ROA not before:           Wed 30 Apr 2025 18:20:18 +0000
ROA not after:            Wed 29 Apr 2026 18:25:18 +0000
asID:                     270793
IP address blocks:        2804:7180::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/AAC19A004E25530B8859C605F2862F7AB78E6003.crl
                          rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/AAC19A004E25530B8859C605F2862F7AB78E6003.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC19A004E25530B8859C605F2862F7AB78E6003.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 02:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b0:c2:b7:b4:4d:50:ec:dc:9b:d1:ee:b5:5a:40:eb:3d:a9:97:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAC19A004E25530B8859C605F2862F7AB78E6003
        Validity
            Not Before: Apr 30 18:20:18 2025 GMT
            Not After : Apr 29 18:25:18 2026 GMT
        Subject: CN=14F1A12CB06F6FDDDEF2F81DD86AF4F2735E6046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fe:92:3d:5f:35:70:8c:c6:e6:d6:c3:5d:ca:
                    75:1b:c3:29:76:dc:08:2c:11:c5:23:11:e1:ec:bd:
                    f5:b8:aa:cd:d5:dd:f3:02:99:8b:ee:f5:78:ee:68:
                    c3:a0:93:c0:2f:31:52:e6:33:b8:f6:00:57:33:70:
                    d3:a0:20:e6:3e:28:17:91:10:89:0e:a9:79:69:11:
                    b1:11:14:47:b3:8f:01:e2:e2:ce:e2:74:7a:be:c5:
                    b6:a2:b8:60:5c:bc:49:e4:0b:48:4e:c5:0c:40:f4:
                    c4:59:89:a6:ac:85:59:fb:d5:cd:ff:d8:67:9c:9b:
                    fb:36:fe:80:78:a7:42:ba:04:db:8c:d4:03:d8:15:
                    c0:10:bd:38:18:b4:36:56:78:b4:06:8d:24:3c:f3:
                    97:da:b2:31:16:c7:93:a8:4f:8a:fd:11:a9:49:e7:
                    22:d3:4d:27:58:c5:cf:b9:3b:f4:c3:a6:f8:4b:b8:
                    aa:ca:52:c0:85:ff:64:ba:61:51:e8:c9:d4:ee:8d:
                    e5:d9:92:72:19:1a:78:20:4a:db:64:fb:c0:11:f2:
                    6b:3c:72:7e:30:86:12:01:a5:cd:83:70:a7:8a:32:
                    27:81:d1:c5:84:61:f5:ce:36:2f:93:a7:79:c8:c6:
                    38:16:08:0b:83:60:e9:63:83:1f:18:58:0a:82:50:
                    66:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F1:A1:2C:B0:6F:6F:DD:DE:F2:F8:1D:D8:6A:F4:F2:73:5E:60:46
            X509v3 Authority Key Identifier:
                keyid:AA:C1:9A:00:4E:25:53:0B:88:59:C6:05:F2:86:2F:7A:B7:8E:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/AAC19A004E25530B8859C605F2862F7AB78E6003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC19A004E25530B8859C605F2862F7AB78E6003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a3a2f33342d3334203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7180::/34

    Signature Algorithm: sha256WithRSAEncryption
         08:7d:c9:75:82:e1:43:56:37:61:b7:65:f6:9d:89:45:9f:4e:
         76:3e:9a:b4:6c:31:39:89:15:cc:76:b3:77:5f:19:8f:d7:fc:
         a7:b2:06:92:4c:ff:83:f1:7b:ff:ef:fd:b4:5e:a6:6a:42:42:
         4d:89:17:8a:38:9b:cd:6a:d1:f4:78:a7:20:a3:2d:8b:97:ad:
         8c:b2:b5:e7:e2:b1:25:4e:a1:8f:70:82:cd:c8:00:55:ac:a5:
         81:c7:35:44:13:11:14:50:d9:2d:99:0f:21:89:5a:ad:5f:bc:
         0a:2e:ab:23:ff:c0:00:1c:32:70:23:5f:9f:de:de:58:55:f8:
         c8:56:48:4c:0d:fd:a7:2d:1f:dd:44:4b:f9:b7:fb:f0:f1:7f:
         cd:24:51:25:4f:8d:45:81:71:14:3f:36:41:bc:e7:80:62:7e:
         bc:e4:82:f1:8c:2f:32:1e:f6:e7:83:6b:16:ce:67:f3:f0:5b:
         5d:23:b2:05:c9:af:cf:21:6b:cf:31:63:c7:7f:fa:7c:78:8b:
         6a:35:72:0b:50:e0:3e:2e:8f:81:14:1c:e3:1c:09:19:89:77:
         e4:e4:da:ec:ac:52:12:c1:6d:33:02:4c:cc:47:e2:ba:60:02:
         16:4a:f0:89:31:59:c8:a0:09:aa:11:13:06:1f:f5:0d:1c:92:
         ca:9b:02:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:52:42 2025 by rpki-client