Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a363430303a3a2f34302d3430203d3e20323633303835.roa
File:                     323830343a3936633a363430303a3a2f34302d3430203d3e20323633303835.roa (raw, json)
Hash identifier:          52huXuVGIt+pjgM9LTH0dEdhFFUOrYBxuDBGKi6kYYk=
Subject key identifier:   E7:76:E9:CA:79:1C:AE:B6:83:05:01:E7:82:4C:B1:E6:E4:AD:64:08
Certificate issuer:       /CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
Certificate serial:       17B6F9F2F179207CAF628306E38141B6CED6D241
Authority key identifier: 1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a363430303a3a2f34302d3430203d3e20323633303835.roa
Signing time:             Wed 07 May 2025 20:49:31 +0000
ROA not before:           Wed 07 May 2025 20:44:31 +0000
ROA not after:            Wed 06 May 2026 20:49:31 +0000
asID:                     263085
IP address blocks:        2804:96c:6400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl
                          rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 02:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b6:f9:f2:f1:79:20:7c:af:62:83:06:e3:81:41:b6:ce:d6:d2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
        Validity
            Not Before: May  7 20:44:31 2025 GMT
            Not After : May  6 20:49:31 2026 GMT
        Subject: CN=E776E9CA791CAEB6830501E7824CB1E6E4AD6408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fa:0f:a9:6f:71:7e:56:0a:d9:33:6b:5c:d2:
                    fa:93:aa:96:46:27:94:21:0b:f0:cc:82:73:fb:85:
                    5c:ce:dd:58:98:f1:8c:c3:cf:04:cf:8b:da:6a:f2:
                    7a:b7:23:9e:f5:ca:e8:9e:08:a6:af:4e:8c:ec:35:
                    ee:ab:97:f6:15:94:50:26:a8:e0:2f:43:60:e4:95:
                    17:d9:0e:59:53:22:f8:b3:81:bf:01:d7:a5:44:66:
                    91:e3:96:68:f0:d8:1d:34:57:c3:ac:ec:8d:e5:dd:
                    4d:9e:29:f9:b7:9f:4e:e9:3c:c9:ce:85:44:1c:95:
                    76:92:b3:7a:9d:2f:62:cd:00:ba:2d:44:80:46:e8:
                    b8:d4:fa:d0:36:38:19:3c:08:80:a8:ad:90:8d:fe:
                    65:da:98:81:46:83:d2:de:ad:78:41:df:96:b6:07:
                    4b:a0:92:0f:1a:84:d1:72:90:29:7f:a1:91:a4:cc:
                    dc:6b:ca:97:e8:09:9f:e2:9d:e5:67:c9:06:42:1f:
                    15:d1:db:61:20:66:a2:19:0f:6f:54:b2:64:e7:7c:
                    26:ab:fa:e9:b8:63:bd:d1:b4:ed:37:31:d1:e7:f7:
                    cb:fd:21:6f:c0:e5:56:96:50:7e:00:f3:c9:11:12:
                    84:45:98:80:6a:25:10:0a:41:40:73:98:24:2b:66:
                    a3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:76:E9:CA:79:1C:AE:B6:83:05:01:E7:82:4C:B1:E6:E4:AD:64:08
            X509v3 Authority Key Identifier:
                keyid:1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a363430303a3a2f34302d3430203d3e20323633303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:96c:6400::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:17:8b:d6:59:90:78:40:bb:f5:3b:44:54:69:41:80:e9:44:
         5c:f6:38:6e:b7:4c:ed:fa:7e:1b:08:d4:af:9e:ee:38:7e:67:
         1e:a3:35:fa:66:9a:e2:aa:b9:f0:1d:e8:f3:f7:0d:df:95:f4:
         df:a0:82:af:bd:ce:59:36:20:67:85:f4:e9:cf:fb:8b:08:0d:
         3b:43:d1:14:ac:1c:31:8a:75:8d:e3:b4:07:f8:ac:4e:f4:86:
         10:b7:3f:ab:13:15:02:48:b5:a9:d0:65:46:1c:89:9b:04:a9:
         7a:df:a5:8b:7c:ad:88:3a:6e:2c:34:10:64:b9:3d:95:19:a2:
         bc:69:b9:cf:b9:c2:bd:72:cc:b5:9b:bb:78:6d:a2:14:d1:2f:
         14:d1:3c:00:36:3b:55:6f:ee:f2:36:29:2c:a1:fd:d7:f1:47:
         1b:84:68:db:2e:07:b2:58:1a:88:66:5b:19:21:d9:67:5a:33:
         bb:7f:2a:97:f6:02:9b:bb:7c:82:47:08:67:0c:22:02:04:dc:
         df:4d:2d:f5:74:49:ae:43:3a:1b:5a:77:c3:53:df:e1:1a:52:
         7f:47:35:83:73:93:52:69:4c:11:c9:e6:46:9f:a2:b8:d8:8d:
         e7:d1:c7:c1:89:2b:67:c4:9d:b9:a1:37:dd:02:60:7b:99:94:
         4f:38:a3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:01:55 2025 by rpki-client