Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/323830343a376266383a3130303a3a2f34342d3434203d3e20323731343636.roa
File:                     323830343a376266383a3130303a3a2f34342d3434203d3e20323731343636.roa (raw, json)
Hash identifier:          p6AI15r5xT4iERWaM/AURhhIqK2knSoJU569AF4dqV4=
Subject key identifier:   63:20:55:C0:5D:C1:4F:39:93:A4:E8:2E:81:8C:37:FF:B7:07:44:28
Certificate issuer:       /CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
Certificate serial:       41F5BCA91CD448D34221B3BFBE72355F053239C9
Authority key identifier: E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/323830343a376266383a3130303a3a2f34342d3434203d3e20323731343636.roa
Signing time:             Mon 02 Dec 2024 18:07:26 +0000
ROA not before:           Mon 02 Dec 2024 18:02:26 +0000
ROA not after:            Mon 01 Dec 2025 18:07:26 +0000
asID:                     271466
IP address blocks:        2804:7bf8:100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 21:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f5:bc:a9:1c:d4:48:d3:42:21:b3:bf:be:72:35:5f:05:32:39:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
        Validity
            Not Before: Dec  2 18:02:26 2024 GMT
            Not After : Dec  1 18:07:26 2025 GMT
        Subject: CN=632055C05DC14F3993A4E82E818C37FFB7074428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3f:1e:c7:42:20:1a:54:fc:7b:f8:dd:be:f1:
                    8f:a7:bd:d0:4e:aa:e3:55:1c:0f:21:49:2b:11:30:
                    70:83:a2:e0:4a:46:39:a2:88:8b:a1:6c:f2:8d:af:
                    c1:6b:92:5c:aa:56:e1:06:31:66:bb:ac:63:40:4f:
                    77:b5:a1:60:dd:06:30:6c:3b:a4:a6:13:46:ee:2c:
                    c2:3c:e4:92:82:3b:09:54:14:a1:5b:58:7a:d1:53:
                    cc:f0:b4:58:2e:d7:f7:53:1c:03:1e:6a:74:37:9e:
                    10:0c:f4:f0:aa:6a:0a:ca:5b:b0:23:c3:01:fc:1b:
                    2d:fa:1a:a7:81:b4:56:24:e7:97:60:ce:89:97:54:
                    46:54:b3:de:0e:78:6b:6a:fe:b2:d1:e0:20:9a:1b:
                    e1:af:6c:2c:aa:06:23:48:3c:68:40:41:d5:a7:0e:
                    3a:3e:25:6c:db:17:cd:3d:b0:ab:83:b2:66:6e:34:
                    0d:f9:b3:c7:2f:12:7e:27:90:47:96:ed:0d:a4:bf:
                    d8:68:bc:51:e5:31:aa:4f:51:4f:23:8c:3e:04:ca:
                    5e:b0:aa:39:2c:29:90:03:be:86:1a:da:48:50:e6:
                    e3:b6:52:76:92:5f:c1:f4:be:66:16:d9:72:b4:cb:
                    f8:d6:6b:f8:97:ca:94:4b:ca:d9:fb:e3:3d:20:89:
                    c0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:20:55:C0:5D:C1:4F:39:93:A4:E8:2E:81:8C:37:FF:B7:07:44:28
            X509v3 Authority Key Identifier:
                keyid:E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/323830343a376266383a3130303a3a2f34342d3434203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bf8:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         3f:94:21:a1:8e:3d:95:b7:4e:fb:86:54:b5:44:66:8f:15:5a:
         a1:75:c8:ae:3f:f2:0e:38:8b:76:5a:52:b5:3b:d5:91:4c:67:
         da:8e:01:51:85:bc:5b:a4:29:c9:96:c2:1a:a1:20:dd:0e:e4:
         b3:0c:fa:97:c4:0a:a9:be:cd:8f:a9:59:d0:54:5a:ff:7a:81:
         78:b5:61:47:56:89:e3:00:f5:22:6c:c1:e5:0a:48:2f:c3:64:
         b1:3c:1d:ff:c0:3c:a2:3b:ec:d4:87:fe:1a:a6:a6:71:2e:93:
         db:63:9d:0e:d0:88:dd:96:ad:c6:77:5d:98:7a:2d:c4:f9:67:
         d3:60:98:f4:33:a7:12:9f:e5:7f:4d:33:e3:2c:d8:1c:3c:65:
         df:a9:f2:e6:9a:fc:9d:ea:72:2e:0e:5c:5a:37:c1:d9:19:64:
         d7:95:83:1a:90:03:58:3c:a4:38:81:d9:92:b0:bd:8d:fa:08:
         03:b0:3c:c5:1d:32:9b:eb:19:5d:ed:59:23:5c:b0:79:33:b8:
         77:b2:15:9e:59:13:df:0c:76:b6:db:d6:e4:7f:1d:0c:90:62:
         a0:dc:d6:2c:86:ad:8f:90:cd:90:ed:fe:21:9a:0c:c9:19:60:
         17:7e:c0:a8:78:c3:0e:6a:4f:5c:c4:b1:c2:5f:6a:fe:dd:62:
         c0:dc:b5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:48:07 2025 by rpki-client