Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a383a3a2f36342d3634203d3e203238323032.roa
File:                     323830343a3837633a383a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier:          9U/p8uAeQSUnsYustyrwv6c4gfMieYH5XFZKmAvOOJM=
Subject key identifier:   38:17:EB:72:27:F5:C0:EC:22:46:F7:DD:F5:0C:4F:46:EC:8B:AD:89
Certificate issuer:       /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial:       62BDABF1DBE7FEE260A4717059ED6D439088B5A9
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a383a3a2f36342d3634203d3e203238323032.roa
Signing time:             Mon 13 Jan 2025 13:32:24 +0000
ROA not before:           Mon 13 Jan 2025 13:27:24 +0000
ROA not after:            Mon 12 Jan 2026 13:32:24 +0000
asID:                     28202
IP address blocks:        2804:87c:8::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl
                          rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Apr 2025 16:08:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:bd:ab:f1:db:e7:fe:e2:60:a4:71:70:59:ed:6d:43:90:88:b5:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
        Validity
            Not Before: Jan 13 13:27:24 2025 GMT
            Not After : Jan 12 13:32:24 2026 GMT
        Subject: CN=3817EB7227F5C0EC2246F7DDF50C4F46EC8BAD89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:38:da:0f:1d:ca:db:dc:a4:08:38:94:f6:
                    9c:e5:db:4d:92:e7:89:ef:ae:31:7c:08:9f:98:8b:
                    ff:aa:26:f7:ec:d9:01:7a:65:b4:0f:82:27:84:53:
                    3a:2b:14:8e:49:98:f2:bf:5f:0d:3a:f4:59:86:6b:
                    8a:6f:eb:b9:19:b4:36:c8:16:7e:71:1f:f0:d9:ab:
                    cf:b0:ad:a4:2b:47:c4:a5:32:38:48:3c:f5:19:11:
                    05:08:d7:f9:fd:63:7b:5c:be:05:40:be:00:75:ff:
                    20:98:ed:0f:29:1d:70:63:5d:ae:d3:8b:cb:46:15:
                    b7:fe:a4:60:8f:62:fa:c8:dd:68:44:e5:41:ff:2d:
                    dd:4e:7c:99:f3:08:4a:4d:ff:95:af:9d:3b:08:43:
                    25:d7:d2:cd:27:f0:8d:e0:57:0c:32:3d:18:ad:1f:
                    f3:0c:cd:67:fc:c5:52:26:f3:69:49:0d:74:22:cc:
                    74:1c:77:41:13:2f:c9:0f:1f:02:70:44:c7:9d:6e:
                    29:f4:5b:43:14:2a:c9:5e:c1:e7:0f:ff:6c:77:bf:
                    97:87:cf:dd:27:1e:14:b9:0e:c1:12:7a:c3:a7:f7:
                    a8:92:76:6e:a7:a7:40:01:6c:3e:00:bb:19:1f:1d:
                    4e:72:3f:bb:ab:8e:d6:6b:77:bb:7c:46:23:5b:62:
                    35:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:17:EB:72:27:F5:C0:EC:22:46:F7:DD:F5:0C:4F:46:EC:8B:AD:89
            X509v3 Authority Key Identifier:
                keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a383a3a2f36342d3634203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87c:8::/64

    Signature Algorithm: sha256WithRSAEncryption
         98:6a:c8:77:d5:bf:9b:d0:6d:12:df:27:ec:9c:56:0e:cf:ed:
         f6:28:e5:6d:af:f9:55:7c:96:2a:e1:44:6c:20:1b:b6:64:0e:
         46:c0:91:84:94:51:10:32:71:22:60:d4:b4:b6:df:1d:29:cf:
         8c:dc:85:8b:3d:47:8b:46:8d:dc:a4:6c:14:ea:42:87:3e:c5:
         87:ab:79:91:a6:ed:ed:b9:57:7c:d4:99:c4:61:c6:aa:84:a7:
         08:e9:3b:eb:d0:b4:f8:57:b0:d7:08:24:de:4e:6f:6b:f4:1d:
         22:7e:28:b1:ed:f0:af:1b:df:53:90:79:fa:6d:8b:c9:3d:95:
         87:57:f4:94:bf:28:87:ce:8e:6a:4b:2d:20:6b:e5:bf:71:e5:
         d2:e0:87:13:31:b5:e7:24:4c:f9:f9:d1:a0:1e:e7:3e:f0:dc:
         b9:64:13:ee:89:78:a7:4f:7e:49:1f:c8:20:c4:31:15:9e:2d:
         d3:df:3b:68:d6:a8:91:4a:7f:52:e5:7c:f6:38:b6:dc:4d:61:
         74:08:d1:24:aa:9c:23:7e:2d:99:2a:c2:5b:0a:35:d7:2b:76:
         f6:e8:5c:13:99:bb:0c:09:33:4b:a3:cf:11:03:c2:a9:08:da:
         9e:52:9f:65:63:e6:9f:12:23:fa:b2:62:45:7e:eb:ad:07:c4:
         8b:04:5b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:57:40 2025 by rpki-client