Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/323830343a353463343a3a2f33322d313238203d3e20323638363639.roa
File:                     323830343a353463343a3a2f33322d313238203d3e20323638363639.roa (raw, json)
Hash identifier:          4KpZ+pNRbgNxiaONNxCzxo8iVOX8PKCRteZG+WxjR94=
Subject key identifier:   F3:F3:2A:7C:29:3B:ED:F7:D8:DD:3B:B2:75:58:47:76:32:01:DF:E3
Certificate issuer:       /CN=B01C0A2D1BA362A78473A2F4FCF2337F67ACB58F
Certificate serial:       549452334D2C8DDEF72E2CEC3199E00A00598378
Authority key identifier: B0:1C:0A:2D:1B:A3:62:A7:84:73:A2:F4:FC:F2:33:7F:67:AC:B5:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B01C0A2D1BA362A78473A2F4FCF2337F67ACB58F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/323830343a353463343a3a2f33322d313238203d3e20323638363639.roa
Signing time:             Fri 24 Jan 2025 13:42:54 +0000
ROA not before:           Fri 24 Jan 2025 13:37:54 +0000
ROA not after:            Fri 23 Jan 2026 13:42:54 +0000
asID:                     268669
IP address blocks:        2804:54c4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/B01C0A2D1BA362A78473A2F4FCF2337F67ACB58F.crl
                          rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/B01C0A2D1BA362A78473A2F4FCF2337F67ACB58F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B01C0A2D1BA362A78473A2F4FCF2337F67ACB58F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 18:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:94:52:33:4d:2c:8d:de:f7:2e:2c:ec:31:99:e0:0a:00:59:83:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B01C0A2D1BA362A78473A2F4FCF2337F67ACB58F
        Validity
            Not Before: Jan 24 13:37:54 2025 GMT
            Not After : Jan 23 13:42:54 2026 GMT
        Subject: CN=F3F32A7C293BEDF7D8DD3BB2755847763201DFE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:51:9b:a2:f8:c6:b8:32:08:71:90:2f:33:49:
                    71:30:87:83:d7:fe:b1:b1:bd:0a:2e:5a:98:3d:07:
                    2f:60:70:52:78:26:c4:f7:11:03:24:aa:4c:ef:8b:
                    95:8a:75:3a:a4:36:d0:95:02:52:d6:b4:0c:b3:ce:
                    ea:d7:0f:46:50:3d:a9:25:6a:9d:c2:08:0d:6b:3e:
                    37:5b:f9:17:a0:67:cb:78:dc:a6:6a:af:9c:bc:e9:
                    86:ca:70:f4:4e:a3:5c:4c:3d:3a:96:40:e8:8d:bb:
                    e6:08:90:14:a5:95:3c:c2:9a:ad:74:da:6f:b1:b6:
                    da:ca:da:e3:88:e3:c7:0b:ac:ae:09:9d:e3:5e:78:
                    6c:c3:05:64:c4:a1:cd:43:10:cb:b0:0a:a7:62:f8:
                    d5:9c:57:03:88:f6:0b:28:63:5e:e5:c1:28:bb:33:
                    3d:46:fb:57:1c:de:4c:71:94:ce:97:d1:ec:51:36:
                    b6:e5:60:7d:9a:b1:4b:19:9d:6c:e0:a5:65:23:43:
                    00:33:3a:cb:6e:fa:30:16:6b:14:d7:c4:51:72:80:
                    16:d2:7c:69:d8:a0:46:d3:18:0f:9a:96:f7:ad:da:
                    1c:d7:bd:76:0a:cd:e1:93:7c:10:24:5a:2b:b5:5e:
                    63:4d:5f:f4:c8:49:1f:f8:33:c9:6f:53:06:26:ba:
                    91:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F3:2A:7C:29:3B:ED:F7:D8:DD:3B:B2:75:58:47:76:32:01:DF:E3
            X509v3 Authority Key Identifier:
                keyid:B0:1C:0A:2D:1B:A3:62:A7:84:73:A2:F4:FC:F2:33:7F:67:AC:B5:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/B01C0A2D1BA362A78473A2F4FCF2337F67ACB58F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B01C0A2D1BA362A78473A2F4FCF2337F67ACB58F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/323830343a353463343a3a2f33322d313238203d3e20323638363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:d8:19:f5:61:93:c0:ca:69:91:a5:a1:e9:fa:d6:7e:d0:29:
         e2:94:a4:7f:1a:10:0c:c7:ce:15:3a:5b:f2:b7:c2:57:27:ae:
         1e:32:85:d3:2b:64:6a:ac:53:4a:a0:41:69:ea:19:3e:0c:5d:
         91:a4:e0:f5:75:a5:49:7f:32:d5:13:6f:58:6e:fa:81:6b:cb:
         50:9f:fa:45:3e:38:fe:f7:2d:32:90:31:54:d8:b3:15:b6:32:
         b7:18:c1:f5:b0:0b:a6:7c:e2:59:32:b6:68:d1:db:b7:4c:1e:
         c0:3b:b2:74:65:28:93:65:8e:be:d7:dc:1e:6a:2d:23:f8:31:
         5d:b4:df:2f:04:ce:93:f6:57:ca:55:bb:e7:b7:dd:f1:0b:6f:
         5d:f1:a8:f4:bb:39:67:48:28:b4:df:ad:f1:78:36:46:6c:97:
         f4:e6:e5:0f:39:1b:6c:e4:b8:b6:78:61:d8:34:57:5c:52:3a:
         65:db:b3:4c:78:18:f6:3f:d2:87:36:15:a9:05:0d:fc:f5:92:
         3d:ae:99:4b:50:2c:fe:cb:af:b1:43:f6:f9:b2:a1:1d:40:b6:
         a9:51:a7:ad:ff:b5:1b:c7:80:a8:60:a0:ff:a7:33:4c:38:1f:
         57:f9:4f:9f:cf:e7:17:09:3e:5a:44:b4:c5:2a:50:cd:50:ef:
         c5:24:f2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:44:08 2025 by rpki-client