Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393830303a3a2f33382d3338203d3e20323733333039.roa
File:                     323830343a386337633a393830303a3a2f33382d3338203d3e20323733333039.roa (raw, json)
Hash identifier:          v241yZIPsYfh8By7UfOd4UGPLra9ZK/JOdWqe9yeMDo=
Subject key identifier:   2D:62:E7:93:64:2F:1F:D6:80:68:66:26:89:B4:92:0F:E5:78:BE:B4
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       223609E90D95B85A5AA9FBCD7EDE29A91655495E
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393830303a3a2f33382d3338203d3e20323733333039.roa
Signing time:             Wed 09 Apr 2025 13:53:38 +0000
ROA not before:           Wed 09 Apr 2025 13:48:38 +0000
ROA not after:            Wed 08 Apr 2026 13:53:38 +0000
asID:                     273309
IP address blocks:        2804:8c7c:9800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 20:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:36:09:e9:0d:95:b8:5a:5a:a9:fb:cd:7e:de:29:a9:16:55:49:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Apr  9 13:48:38 2025 GMT
            Not After : Apr  8 13:53:38 2026 GMT
        Subject: CN=2D62E793642F1FD68068662689B4920FE578BEB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:03:eb:8d:95:05:4b:88:8e:e4:5d:1b:e1:c6:
                    55:12:3a:0f:de:47:82:fa:01:ef:35:ba:0b:c5:25:
                    b6:1f:ae:d5:37:61:98:45:34:a4:17:26:09:8e:0f:
                    cb:99:7e:34:57:4d:1a:f5:1a:b0:45:82:95:f9:60:
                    31:d1:c4:c3:3f:06:ca:1a:5e:43:54:9c:f6:63:15:
                    ec:f8:07:2f:84:df:8c:12:f1:94:8a:d9:cc:41:c8:
                    ab:18:00:0c:d0:b4:24:9f:76:2d:87:b0:86:10:4f:
                    44:35:7e:9a:ff:83:6e:70:ec:b9:a0:eb:d4:61:bc:
                    ad:3b:d3:e0:72:37:f0:af:b0:85:d8:56:7f:37:70:
                    67:3c:a1:6c:24:e6:70:62:a9:9c:98:fb:5d:9a:f8:
                    c5:55:ba:f2:3b:41:4a:9e:39:75:44:11:0c:56:dd:
                    72:af:03:12:06:13:81:00:bb:97:f7:92:d7:9c:ac:
                    d1:7c:5c:40:59:5b:f4:82:37:d8:36:2e:32:d7:4f:
                    d8:b9:09:a6:1a:6c:94:f9:c6:0a:cb:b6:d3:00:4e:
                    83:00:85:c2:15:6f:a9:25:18:87:d5:3a:ad:fb:de:
                    18:c9:8e:86:1f:66:8e:df:62:21:50:9d:bb:13:cd:
                    5c:cb:c9:1d:c6:6c:a1:67:c0:53:b6:4a:f7:4c:a2:
                    90:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:62:E7:93:64:2F:1F:D6:80:68:66:26:89:B4:92:0F:E5:78:BE:B4
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393830303a3a2f33382d3338203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c:9800::/38

    Signature Algorithm: sha256WithRSAEncryption
         16:2f:d0:d9:66:96:ff:46:d1:92:da:88:77:8c:3a:22:8a:2c:
         79:91:16:1d:83:42:5d:12:32:28:bf:24:83:18:be:c3:aa:90:
         5c:e0:1c:3a:0c:e7:71:80:9d:aa:c0:66:78:ac:ab:01:26:39:
         09:f1:bd:2e:0e:0b:29:04:1f:c5:3e:30:8a:13:44:cb:f1:92:
         76:13:c1:af:5a:52:55:a7:6b:98:cd:b7:55:89:fc:f2:b1:55:
         89:43:a1:02:56:74:31:b0:29:e4:51:ba:aa:f2:d0:0f:85:8b:
         d9:38:d2:a2:65:34:ab:7d:6f:7e:56:8f:27:62:b6:8b:fb:8f:
         e9:14:85:50:b1:b6:9c:dd:c6:64:a4:42:c7:b2:07:01:84:ae:
         29:cb:88:44:54:9b:55:39:44:ba:99:ca:e5:b6:8c:a7:98:5b:
         2d:4f:f9:ad:eb:a9:ad:2d:88:d1:30:43:9f:39:f2:fb:eb:eb:
         75:dd:cc:af:ab:11:5b:09:2a:bc:31:53:fe:9a:df:86:70:55:
         1e:a3:e2:8f:00:3c:4a:10:34:0d:02:a3:cb:61:0c:08:ec:19:
         5a:07:b1:4f:29:a5:52:e3:bd:43:50:80:13:4c:d9:cf:05:72:
         3a:80:ad:67:82:a2:6e:9f:a0:4b:5a:24:59:05:17:49:ff:a0:
         26:39:0f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:17:54 2025 by rpki-client