Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a3a2f33322d3332203d3e20323636393833.roa
File:                     323830343a343635343a3a2f33322d3332203d3e20323636393833.roa (raw, json)
Hash identifier:          hvCADBQSrVTSilBO3ILhiLNAM9an+Jt17+xLL58R580=
Subject key identifier:   A2:7C:7C:B7:01:FB:74:97:92:70:93:AB:28:C8:E5:9B:C5:74:7E:E0
Certificate issuer:       /CN=3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F
Certificate serial:       4208800837E5A1A74FC7EE52D899AD25AC8786D4
Authority key identifier: 3D:C3:91:5B:16:1F:2F:1D:4A:EF:DF:6B:F5:81:EE:C0:95:B3:D6:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a3a2f33322d3332203d3e20323636393833.roa
Signing time:             Tue 06 May 2025 12:25:37 +0000
ROA not before:           Tue 06 May 2025 12:20:37 +0000
ROA not after:            Tue 05 May 2026 12:25:37 +0000
asID:                     266983
IP address blocks:        2804:4654::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.crl
                          rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 22:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:08:80:08:37:e5:a1:a7:4f:c7:ee:52:d8:99:ad:25:ac:87:86:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F
        Validity
            Not Before: May  6 12:20:37 2025 GMT
            Not After : May  5 12:25:37 2026 GMT
        Subject: CN=A27C7CB701FB7497927093AB28C8E59BC5747EE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e6:26:89:26:90:23:9c:96:31:66:2f:28:be:
                    7c:79:07:74:f8:e9:6d:74:bb:eb:95:41:14:9a:8e:
                    c5:16:9f:5a:47:8f:27:a8:53:66:f7:de:f3:87:93:
                    7c:25:f5:ea:f9:8c:58:4a:99:ca:56:7b:20:a3:31:
                    bd:f9:1e:fa:1b:ca:4c:e5:08:2b:e6:52:0e:3c:78:
                    39:94:ba:73:5d:fe:7e:5a:09:d2:14:45:ac:38:e8:
                    17:58:10:08:73:0e:71:3d:66:87:1a:d4:20:d3:a1:
                    7e:59:e8:fd:8f:8a:30:7b:cc:7c:46:27:c3:78:09:
                    2e:2b:77:11:c0:83:6d:35:c6:be:69:cb:23:55:ce:
                    0a:d3:8a:d8:58:b7:6e:7a:04:19:52:61:07:be:9f:
                    78:9c:af:bf:d5:87:f3:a5:97:57:9b:76:25:8b:16:
                    c7:5e:a0:f0:aa:a8:c3:41:96:89:48:66:b1:9d:16:
                    cf:af:7a:73:c3:12:20:6a:eb:60:23:8f:65:6b:87:
                    a9:2d:84:ea:3a:45:54:82:42:89:c0:20:ef:53:a0:
                    86:f3:8d:2d:58:5d:90:ae:c7:51:b1:07:f6:54:d1:
                    e3:42:40:03:70:e2:15:ca:4c:7f:d7:b0:03:0b:b2:
                    df:c3:04:2a:6d:2f:e9:6b:e8:c2:4b:88:47:9c:67:
                    6e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7C:7C:B7:01:FB:74:97:92:70:93:AB:28:C8:E5:9B:C5:74:7E:E0
            X509v3 Authority Key Identifier:
                keyid:3D:C3:91:5B:16:1F:2F:1D:4A:EF:DF:6B:F5:81:EE:C0:95:B3:D6:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a3a2f33322d3332203d3e20323636393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4654::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:74:5b:59:db:05:58:49:f0:e0:d2:af:f0:cd:2f:9b:2d:3a:
         78:28:1e:3c:48:0e:dd:68:00:b1:88:f4:ea:ea:cd:ee:f0:de:
         8b:23:52:24:b3:46:e2:a8:e1:c6:b2:61:c1:73:40:d0:5f:3b:
         e0:38:90:d5:ad:65:8c:f2:1a:38:33:0e:d1:90:c1:96:4d:6c:
         a0:48:cb:33:f7:ac:3f:fb:52:17:9b:3e:0c:a0:23:33:46:9b:
         ed:80:2d:6f:9a:3a:98:8c:36:6c:53:70:5f:db:ac:05:03:34:
         c4:a8:32:08:2c:0d:d1:76:ea:91:31:b5:54:7a:3a:96:e4:d0:
         51:a9:b5:e0:74:7a:6e:cf:b8:f3:d7:e4:fa:6b:e1:32:4f:43:
         ac:bf:a4:1a:62:4f:d0:b1:c0:4c:1c:79:26:c9:2c:92:08:a1:
         53:f0:f0:c6:93:05:3d:82:d8:24:59:92:0d:e2:f4:10:bf:ce:
         ad:ca:47:3f:25:b5:a0:de:98:4d:d5:f5:23:7c:2e:19:46:de:
         e1:78:ce:ca:2e:42:a8:76:f0:73:50:9d:08:4c:73:ce:92:20:
         56:bf:ca:0d:24:28:45:af:39:0a:24:5a:c9:1a:aa:e7:5b:37:
         47:d6:06:8a:a8:d6:f9:64:86:03:7b:ab:be:cd:ce:85:7f:55:
         52:49:76:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:28:06 2025 by rpki-client