Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/323830343a376266383a3a2f33322d3332203d3e20323731343636.roa
File:                     323830343a376266383a3a2f33322d3332203d3e20323731343636.roa (raw, json)
Hash identifier:          ZWdkDpXtTmOH3VhJfxFNlQx+wpJCZWQbw6YTRJBSN3U=
Subject key identifier:   7C:24:6E:C7:80:2C:90:3A:F5:4E:F3:A7:B5:36:3A:D8:EA:66:61:4C
Certificate issuer:       /CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
Certificate serial:       141C46FBE5503E643484F61BCAE93135EC167DFF
Authority key identifier: E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/323830343a376266383a3a2f33322d3332203d3e20323731343636.roa
Signing time:             Thu 06 Mar 2025 14:31:47 +0000
ROA not before:           Thu 06 Mar 2025 14:26:47 +0000
ROA not after:            Thu 05 Mar 2026 14:31:47 +0000
asID:                     271466
IP address blocks:        2804:7bf8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 21:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:1c:46:fb:e5:50:3e:64:34:84:f6:1b:ca:e9:31:35:ec:16:7d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
        Validity
            Not Before: Mar  6 14:26:47 2025 GMT
            Not After : Mar  5 14:31:47 2026 GMT
        Subject: CN=7C246EC7802C903AF54EF3A7B5363AD8EA66614C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d0:5c:db:51:e2:f9:83:22:55:0a:a3:40:6e:
                    06:14:8e:ce:0a:c9:10:1b:7e:f8:53:b3:21:c5:93:
                    1e:af:a2:92:14:64:06:3d:4f:ee:c8:56:bb:6a:41:
                    f7:6e:ed:7d:a1:e6:e5:db:5a:6a:dd:27:7a:5a:f8:
                    56:04:3d:1e:b1:89:f6:07:f4:1d:9f:2d:de:d8:f1:
                    c1:67:fd:4b:db:13:ee:33:c4:a3:4a:55:2c:a3:fe:
                    75:e0:15:14:ce:9a:3f:a5:44:e5:8b:a8:fb:9f:97:
                    a8:4b:bb:62:57:52:1b:41:15:e4:8c:e0:a7:3e:0e:
                    17:5c:5a:72:78:d6:6e:26:cf:65:4b:af:a5:e7:90:
                    20:d2:5b:a9:e3:23:9b:77:ff:1e:a7:2e:20:86:a6:
                    03:87:2c:fc:af:6d:92:70:35:ee:07:9c:b7:62:11:
                    67:3a:f0:e4:be:2c:f8:25:1a:c7:e8:47:b5:ca:30:
                    c2:d6:d5:7f:d1:80:8c:08:85:62:2c:39:06:e0:5c:
                    64:da:3c:bc:37:fd:d5:4b:c4:0f:b5:29:cd:a5:e8:
                    38:b4:05:50:7c:81:bf:fc:27:24:01:1e:0b:a5:ed:
                    66:fa:bc:64:31:76:07:95:04:19:15:f7:09:e3:71:
                    32:06:11:0a:2c:ea:3a:69:bf:3a:dc:87:fd:81:c5:
                    d9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:24:6E:C7:80:2C:90:3A:F5:4E:F3:A7:B5:36:3A:D8:EA:66:61:4C
            X509v3 Authority Key Identifier:
                keyid:E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/323830343a376266383a3a2f33322d3332203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bf8::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:47:dc:1a:2a:7b:5b:30:c7:60:88:bc:6f:26:2f:b0:a6:00:
         72:c7:d8:99:f6:c3:14:b5:e9:8d:8a:b1:13:f3:e6:dd:39:e3:
         18:1a:12:ff:09:9d:7a:77:11:52:3a:b2:79:2e:b3:58:e4:23:
         de:97:be:09:91:81:db:da:0b:c7:a8:e2:58:ce:24:fc:7d:d7:
         51:83:c2:3d:3f:c8:ba:de:68:6d:75:d1:af:2f:e3:9c:d0:9f:
         57:57:06:16:38:d3:3f:60:7f:70:c1:ba:22:c4:0c:ea:dd:e5:
         35:31:b9:cc:f8:88:2e:c8:17:dd:ba:73:72:2d:33:8f:c5:4f:
         7f:66:65:90:d9:6c:6a:47:d6:32:4d:f9:1c:de:74:b7:22:b8:
         18:23:09:5d:ba:ef:00:c1:fd:cb:57:29:89:a2:f6:d4:4b:17:
         a5:16:7d:9f:90:43:52:9c:d1:b4:3d:77:32:23:b2:c9:76:6e:
         16:62:7d:ea:c5:18:63:2d:43:c2:7d:ba:95:bc:ab:2b:92:e2:
         b7:c2:93:b2:57:6a:12:02:a3:06:9d:a4:33:4e:fb:7b:f5:3f:
         78:bb:67:ec:b8:41:79:fe:f4:bc:9f:07:92:1b:18:5a:38:ec:
         58:11:bd:70:25:95:f4:b9:82:cf:e2:1b:d9:2f:38:35:6d:04:
         a7:5b:15:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:48:10 2025 by rpki-client