Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/323830343a323435303a3a2f33322d3335203d3e20323634323134.roa
File:                     323830343a323435303a3a2f33322d3335203d3e20323634323134.roa (raw, json)
Hash identifier:          3AUGhipJwZzjVi8Kid1gPFP+TDPF8YWVH3O3aUPCNLc=
Subject key identifier:   90:E9:8B:8F:EA:AA:B3:42:4E:60:26:FB:24:64:73:46:E0:7C:4C:16
Certificate issuer:       /CN=BC038A5595864CBCD2C347394864706970D0059D
Certificate serial:       1EBFE723781C6A5D4CE34E9BD9E18A9FA89C4C34
Authority key identifier: BC:03:8A:55:95:86:4C:BC:D2:C3:47:39:48:64:70:69:70:D0:05:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC038A5595864CBCD2C347394864706970D0059D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/323830343a323435303a3a2f33322d3335203d3e20323634323134.roa
Signing time:             Thu 22 May 2025 20:53:53 +0000
ROA not before:           Thu 22 May 2025 20:48:53 +0000
ROA not after:            Thu 21 May 2026 20:53:53 +0000
asID:                     264214
IP address blocks:        2804:2450::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/BC038A5595864CBCD2C347394864706970D0059D.crl
                          rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/BC038A5595864CBCD2C347394864706970D0059D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC038A5595864CBCD2C347394864706970D0059D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 19:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:bf:e7:23:78:1c:6a:5d:4c:e3:4e:9b:d9:e1:8a:9f:a8:9c:4c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC038A5595864CBCD2C347394864706970D0059D
        Validity
            Not Before: May 22 20:48:53 2025 GMT
            Not After : May 21 20:53:53 2026 GMT
        Subject: CN=90E98B8FEAAAB3424E6026FB24647346E07C4C16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:7d:dd:b7:bc:07:e0:05:20:1d:af:9c:6e:a7:
                    11:22:32:86:d9:78:f3:65:bc:5b:2b:a1:8a:ce:e0:
                    e7:36:6f:c5:e8:9c:07:36:dc:d5:8a:92:1f:6f:27:
                    e6:71:dd:f5:16:68:3f:d6:ee:e3:f8:0e:f4:e5:32:
                    ab:12:94:ef:61:fa:d4:48:0a:f6:d7:b4:70:d1:e8:
                    01:26:b3:5a:ad:d5:60:c8:2a:b7:c8:f1:4f:5e:99:
                    33:6a:67:a6:ef:72:ad:81:85:70:3f:49:b7:36:34:
                    b6:c1:85:a3:2a:6d:c6:49:a3:3a:0f:df:9b:58:c0:
                    30:b1:3f:a9:5e:bf:13:6d:eb:db:1e:6b:59:39:d8:
                    5f:b4:4e:92:52:d1:37:9d:9c:0c:df:b6:4f:09:88:
                    3f:8f:48:7a:c7:18:05:db:80:c6:15:21:70:19:7e:
                    65:83:21:2d:ad:f6:07:a5:62:c5:4c:02:6f:41:a5:
                    ae:06:cc:49:60:cd:23:95:d7:47:76:66:dd:7f:df:
                    07:23:e4:b6:02:8c:96:ac:f4:36:c9:d5:b0:ea:4f:
                    6b:64:2b:e4:6b:b4:00:7d:32:c4:1c:4f:3e:3d:be:
                    16:6b:1a:ba:57:fe:fc:31:91:ab:18:16:b2:4d:55:
                    48:c9:d2:52:37:3f:a4:fb:a7:b6:a1:f5:77:c9:26:
                    6a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E9:8B:8F:EA:AA:B3:42:4E:60:26:FB:24:64:73:46:E0:7C:4C:16
            X509v3 Authority Key Identifier:
                keyid:BC:03:8A:55:95:86:4C:BC:D2:C3:47:39:48:64:70:69:70:D0:05:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/BC038A5595864CBCD2C347394864706970D0059D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC038A5595864CBCD2C347394864706970D0059D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/323830343a323435303a3a2f33322d3335203d3e20323634323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2450::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:56:be:3b:cb:3e:e1:41:19:b7:a8:4e:87:72:e3:b5:05:c3:
         ab:63:fd:be:35:42:e8:e7:2c:cd:22:b0:40:82:60:8d:1c:73:
         0d:3a:18:ca:56:a6:22:9b:47:d9:72:ae:7c:cb:5d:1a:02:f7:
         68:4f:5c:f2:57:43:ae:ba:b2:13:b0:f5:63:3b:e2:0a:56:41:
         2c:0e:8a:f3:08:34:cc:15:e9:50:d1:74:8c:53:90:f4:8e:5b:
         34:f6:98:95:97:7e:8d:1f:9d:67:88:d2:a0:7c:03:03:18:03:
         38:ce:c6:84:03:78:7d:0f:5e:fc:9e:96:ba:57:1a:f6:fe:b4:
         5a:ca:7e:52:e8:fd:8a:ae:51:0e:74:b1:3b:a6:8d:48:f9:b6:
         ab:23:dc:28:fd:0d:6f:69:9d:94:c7:3e:bd:40:be:da:11:4b:
         1f:1b:39:bf:33:e5:e5:0f:64:3d:1a:aa:9c:90:83:a7:fb:08:
         17:32:68:3c:47:38:70:9c:0a:f1:38:4c:12:46:e8:40:57:96:
         63:e1:e4:5c:cd:78:ce:c1:a2:6e:58:87:bc:e7:47:b4:8c:80:
         75:5f:20:cf:69:bc:53:98:79:30:26:af:16:af:6f:9f:dd:d2:
         e2:23:e3:cc:1d:45:0d:09:f1:02:64:1c:21:7e:ee:c6:ca:a1:
         c7:3b:d0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:02:09 2025 by rpki-client