Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/323830343a353133633a3a2f33322d313238203d3e20323638343339.roa
File:                     323830343a353133633a3a2f33322d313238203d3e20323638343339.roa (raw, json)
Hash identifier:          pFMF6mxEMRv/boPPsZs0JkLDcf81MT+wNIQyCcoPPr8=
Subject key identifier:   5A:50:2D:E0:D3:08:3B:1B:AB:54:8F:F2:10:9E:A5:90:40:C8:F3:C5
Certificate issuer:       /CN=97077AC340D1A4BF1F111F6568A2BDC85CB6A5CF
Certificate serial:       4F2DDE0DEAF426FC22F336B213BC5BB1F998C4EE
Authority key identifier: 97:07:7A:C3:40:D1:A4:BF:1F:11:1F:65:68:A2:BD:C8:5C:B6:A5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97077AC340D1A4BF1F111F6568A2BDC85CB6A5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/323830343a353133633a3a2f33322d313238203d3e20323638343339.roa
Signing time:             Wed 09 Apr 2025 20:38:46 +0000
ROA not before:           Wed 09 Apr 2025 20:33:46 +0000
ROA not after:            Wed 08 Apr 2026 20:38:46 +0000
asID:                     268439
IP address blocks:        2804:513c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/97077AC340D1A4BF1F111F6568A2BDC85CB6A5CF.crl
                          rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/97077AC340D1A4BF1F111F6568A2BDC85CB6A5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97077AC340D1A4BF1F111F6568A2BDC85CB6A5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 06:48:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:2d:de:0d:ea:f4:26:fc:22:f3:36:b2:13:bc:5b:b1:f9:98:c4:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97077AC340D1A4BF1F111F6568A2BDC85CB6A5CF
        Validity
            Not Before: Apr  9 20:33:46 2025 GMT
            Not After : Apr  8 20:38:46 2026 GMT
        Subject: CN=5A502DE0D3083B1BAB548FF2109EA59040C8F3C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:18:f6:cb:d4:83:4e:ae:52:16:2e:df:23:f7:
                    99:7f:af:be:e8:45:7a:b2:cd:ba:d1:9d:5b:37:3d:
                    b7:53:69:93:c6:0e:30:7b:4c:19:a2:03:ee:e8:b5:
                    71:aa:8c:2e:37:41:35:fd:0f:bd:e6:42:d2:b4:f8:
                    07:58:2a:56:8e:07:c1:c4:3e:2a:dd:6e:d8:d9:6d:
                    59:85:5f:7f:2e:6a:3b:0c:c7:c6:e9:45:d1:b3:db:
                    95:7c:4a:d2:03:cf:d7:f6:2e:3c:8b:5c:1c:17:ef:
                    b5:e5:75:af:7b:92:c7:ad:b3:11:ee:9f:72:ed:56:
                    4d:41:45:82:62:0f:66:26:7e:8f:a9:fd:33:ff:2b:
                    c6:7e:82:34:ae:8c:74:6e:40:0d:a4:87:77:d8:c8:
                    e9:9b:28:93:bb:4e:98:72:70:ac:3d:ce:42:c0:60:
                    3c:bc:3e:f5:73:46:9b:8e:cb:fa:55:85:f8:b4:4c:
                    54:20:1c:65:a3:0b:69:0d:85:c3:ae:dd:fe:22:1e:
                    80:19:34:6b:e6:54:cc:66:12:3d:ff:bf:0a:ab:4c:
                    a7:bc:d9:79:65:f6:be:a6:d2:72:9c:71:0a:4a:37:
                    1b:ea:67:8c:85:bc:7f:78:8a:6e:73:85:91:cd:e8:
                    b8:25:5e:7e:b9:ac:27:b9:f8:25:94:7f:c4:d3:02:
                    16:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:50:2D:E0:D3:08:3B:1B:AB:54:8F:F2:10:9E:A5:90:40:C8:F3:C5
            X509v3 Authority Key Identifier:
                keyid:97:07:7A:C3:40:D1:A4:BF:1F:11:1F:65:68:A2:BD:C8:5C:B6:A5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/97077AC340D1A4BF1F111F6568A2BDC85CB6A5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97077AC340D1A4BF1F111F6568A2BDC85CB6A5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/323830343a353133633a3a2f33322d313238203d3e20323638343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:513c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:3c:b3:7a:65:ba:aa:a0:4d:83:0e:f9:b7:6e:d9:e1:ac:0a:
         45:c0:bb:df:96:42:81:ef:e1:8d:ef:30:97:4d:d4:1c:e8:f4:
         41:6c:9a:2f:a6:fd:4c:60:68:65:c0:bf:56:81:0b:00:a0:19:
         de:ba:46:99:75:1d:23:83:4e:45:55:04:4e:8f:62:12:40:08:
         fe:c5:c2:d8:24:47:9a:bb:da:38:53:3f:2c:85:a8:67:c8:c5:
         91:fb:1a:d5:a1:1c:2f:fc:d5:34:85:b0:2a:a9:1a:81:bb:f5:
         03:15:79:0b:b1:d7:1a:22:2f:9d:d6:1c:8c:f4:7b:c4:dc:eb:
         3a:f4:54:c3:3e:eb:d4:bf:59:9e:34:35:6e:6b:bf:2b:75:20:
         ea:18:13:be:45:5a:fe:69:5c:4f:b9:c9:bb:a5:d1:a8:c7:73:
         a7:68:75:f7:40:95:ef:35:86:ba:bb:ed:47:68:04:79:93:a3:
         cb:c4:3f:7a:57:6f:a4:a8:b2:76:1b:53:0a:1a:85:1f:a7:12:
         e5:b1:9d:3a:f6:29:74:43:9a:08:5a:21:ab:0e:2e:69:17:85:
         04:18:9b:20:4d:d4:7d:10:39:2f:13:6b:6f:8d:af:7b:fe:0f:
         4a:37:21:16:05:7e:df:29:1f:19:1b:82:6e:11:6b:2b:0b:88:
         86:a7:2c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:28:42 2025 by rpki-client