Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/323830343a6232383a383030303a3a2f33332d3333203d3e203532393434.roa
File:                     323830343a6232383a383030303a3a2f33332d3333203d3e203532393434.roa (raw, json)
Hash identifier:          qUmeAUSzj5b97HEKqkFmtCPvqDZ477zd8qhRx3JkjWA=
Subject key identifier:   20:BB:A5:82:BF:F0:B2:34:CD:BF:89:BF:2D:FC:03:B8:8B:37:39:49
Certificate issuer:       /CN=2B7B2B36CB333C1CF60039B1C38742338BE69E2F
Certificate serial:       57ACCB5265167795F77A02B33D5F79FC8BFC8FCC
Authority key identifier: 2B:7B:2B:36:CB:33:3C:1C:F6:00:39:B1:C3:87:42:33:8B:E6:9E:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/323830343a6232383a383030303a3a2f33332d3333203d3e203532393434.roa
Signing time:             Tue 06 May 2025 14:31:40 +0000
ROA not before:           Tue 06 May 2025 14:26:40 +0000
ROA not after:            Tue 05 May 2026 14:31:40 +0000
asID:                     52944
IP address blocks:        2804:b28:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.crl
                          rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 13:50:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ac:cb:52:65:16:77:95:f7:7a:02:b3:3d:5f:79:fc:8b:fc:8f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7B2B36CB333C1CF60039B1C38742338BE69E2F
        Validity
            Not Before: May  6 14:26:40 2025 GMT
            Not After : May  5 14:31:40 2026 GMT
        Subject: CN=20BBA582BFF0B234CDBF89BF2DFC03B88B373949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:26:d3:b6:ff:78:30:55:ea:b4:fa:6d:e9:f6:
                    5e:01:2e:a8:2b:26:1e:d3:15:1f:70:13:92:72:be:
                    5e:76:4e:cd:b0:bd:dd:22:db:0b:d0:df:04:09:2c:
                    9d:f0:95:5f:11:e2:fc:63:cb:56:7b:47:c9:19:c2:
                    5a:08:aa:0b:38:08:fd:6d:d7:34:4e:ec:93:8b:22:
                    56:d2:ce:b7:38:bf:9b:d7:ce:1b:0e:3d:10:5c:85:
                    15:7a:f5:4f:6f:37:03:bf:3f:c9:74:1c:c0:81:d9:
                    3c:6a:55:d1:47:80:74:2d:df:82:23:a1:79:ba:12:
                    7b:d2:04:90:f4:68:da:9c:1d:0e:7f:05:e4:a9:6d:
                    ea:cf:c6:7d:5b:b3:05:cf:ca:cf:80:4b:e5:89:fc:
                    81:4b:93:ca:ac:2b:21:2f:62:4a:9f:c5:29:a7:be:
                    12:d3:cf:16:3c:32:10:65:72:fa:fe:b9:3e:91:2a:
                    fc:3f:07:ed:31:ad:3d:a6:ee:5d:e8:8a:21:3a:42:
                    95:0d:1b:58:e8:16:15:06:ef:63:01:a1:9f:1b:29:
                    9a:4c:3d:45:e2:1c:7a:7f:b4:b9:d9:87:05:2d:c1:
                    aa:a1:6c:02:06:73:18:a6:5d:26:df:d9:20:1e:a2:
                    0b:88:7e:76:8f:a2:59:7f:8a:98:c9:ac:9c:60:3c:
                    a7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BB:A5:82:BF:F0:B2:34:CD:BF:89:BF:2D:FC:03:B8:8B:37:39:49
            X509v3 Authority Key Identifier:
                keyid:2B:7B:2B:36:CB:33:3C:1C:F6:00:39:B1:C3:87:42:33:8B:E6:9E:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/323830343a6232383a383030303a3a2f33332d3333203d3e203532393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b28:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         03:37:40:f0:dd:aa:95:94:06:e6:ac:58:5b:f3:0f:b9:99:49:
         99:39:06:77:d9:85:1c:77:b5:a2:04:07:a0:77:d8:93:30:89:
         00:a4:ee:fb:75:81:b8:38:37:0e:5d:12:c4:14:0e:8a:03:14:
         86:8e:5f:43:1e:6b:07:ec:3c:8c:59:34:1e:5e:a6:7d:a5:31:
         27:ee:11:5f:f7:2e:14:f7:9e:83:c1:e8:4d:cc:3c:ca:e3:a5:
         d1:d0:4a:b0:c9:17:ed:72:ab:2e:23:44:09:a8:d8:6b:8e:26:
         1e:3e:45:62:e4:92:f8:8a:ae:04:3f:f6:47:f0:53:bb:46:f3:
         d3:2d:bd:04:57:ab:18:4e:51:1b:60:6b:ba:c3:00:7c:c7:f5:
         df:67:fe:43:89:a3:29:2b:03:89:ec:94:94:9e:cf:62:dd:90:
         0d:49:a8:09:df:97:d8:aa:58:d4:0d:71:62:00:25:f2:bc:5e:
         6c:9a:96:09:ea:bd:1e:1f:c4:81:91:a5:98:14:e7:9f:2e:98:
         56:95:d7:f5:53:94:50:1b:4e:81:46:5b:82:5b:58:88:64:79:
         fb:56:e4:05:eb:d9:ff:8d:a9:aa:a3:53:e9:93:44:3d:8a:da:
         cd:92:fc:81:88:95:12:9c:49:4b:35:88:c8:38:ca:50:32:34:
         80:fe:7f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:56:34 2025 by rpki-client