Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/323830343a346664383a3a2f33322d313238203d3e20323638333533.roa
File:                     323830343a346664383a3a2f33322d313238203d3e20323638333533.roa (raw, json)
Hash identifier:          7bq2qN4ZwhgAVIKamUIceJpAAJYNdiGkag8n963Fznw=
Subject key identifier:   D9:43:36:3E:65:68:8B:89:FC:75:45:EB:07:CE:CE:CC:56:47:90:98
Certificate issuer:       /CN=8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028
Certificate serial:       5AEBCF932ED7A86438E22B34543D641C9E340BBE
Authority key identifier: 8D:4A:EC:19:8B:B4:EB:46:EC:70:1D:D4:AB:AF:B2:DB:87:1F:D0:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/323830343a346664383a3a2f33322d313238203d3e20323638333533.roa
Signing time:             Tue 25 Feb 2025 21:44:16 +0000
ROA not before:           Tue 25 Feb 2025 21:39:16 +0000
ROA not after:            Tue 24 Feb 2026 21:44:16 +0000
asID:                     268353
IP address blocks:        2804:4fd8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.crl
                          rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 21:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:eb:cf:93:2e:d7:a8:64:38:e2:2b:34:54:3d:64:1c:9e:34:0b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028
        Validity
            Not Before: Feb 25 21:39:16 2025 GMT
            Not After : Feb 24 21:44:16 2026 GMT
        Subject: CN=D943363E65688B89FC7545EB07CECECC56479098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e4:61:35:c5:d5:29:40:ea:22:a1:2f:ae:56:
                    6a:88:e4:7c:57:88:dc:dc:77:14:96:e7:d4:96:56:
                    54:43:d7:f2:85:20:ae:06:20:6f:b1:e2:d5:6c:8b:
                    dd:cd:ef:c4:46:c9:86:64:09:1d:f9:ce:d7:9e:1f:
                    39:4d:c7:4c:5f:9c:66:82:76:cd:2c:c5:b8:0f:44:
                    ef:56:c4:9a:88:23:e0:2e:9d:84:3c:fa:2e:b6:62:
                    98:92:a9:73:39:f6:47:08:0f:c7:cd:3d:d5:4a:49:
                    7b:24:72:1c:ed:40:bd:cc:6e:2f:f7:98:e9:e2:6f:
                    63:76:57:a9:6c:09:f6:9d:5a:bf:3b:5d:dc:18:3d:
                    77:51:16:b2:f6:da:aa:18:b8:25:c1:ef:17:06:50:
                    20:dc:51:ae:03:e1:c1:96:4d:7b:dc:d7:73:76:b8:
                    69:6b:d2:0b:56:dd:c1:83:ec:5f:ae:ad:25:0d:ce:
                    28:e5:a3:f4:23:9d:9b:c5:78:33:b1:07:14:bb:e0:
                    e2:b4:ed:3f:6a:5e:af:16:d0:09:88:d7:3d:89:7e:
                    42:c0:5a:52:2d:d4:b3:6a:e2:50:d8:ee:58:5b:db:
                    c9:60:c8:8c:ba:92:37:71:44:f9:2b:00:f1:a2:70:
                    31:52:4b:2e:07:3a:25:43:93:fd:fd:3d:74:13:aa:
                    51:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:43:36:3E:65:68:8B:89:FC:75:45:EB:07:CE:CE:CC:56:47:90:98
            X509v3 Authority Key Identifier:
                keyid:8D:4A:EC:19:8B:B4:EB:46:EC:70:1D:D4:AB:AF:B2:DB:87:1F:D0:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/323830343a346664383a3a2f33322d313238203d3e20323638333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:37:08:8d:af:a0:ff:7f:f3:a4:a3:eb:ed:12:a0:e6:9b:40:
         11:b3:96:6a:f5:05:7c:b8:e6:df:ed:4d:12:7e:17:43:a9:56:
         8b:70:d8:b5:df:fc:73:25:66:03:da:f8:b8:f2:47:8b:50:0f:
         be:b6:e7:c9:18:bf:dc:b2:bd:fb:00:9c:6b:a8:bb:40:fb:99:
         30:75:ff:31:cc:06:dc:4a:9c:17:cb:71:4b:fa:13:26:5b:ae:
         b9:26:9f:c6:90:f6:b0:bf:b2:64:7d:89:59:23:bb:df:46:df:
         f3:62:98:36:6f:02:f0:45:78:b1:34:3a:7c:25:fb:a5:69:a7:
         e9:2f:9d:ac:a5:53:0c:46:71:84:e5:7d:a1:66:2b:92:92:22:
         ca:0f:c5:cc:54:41:d1:c4:d9:86:24:0f:49:2c:ff:ee:0f:54:
         f6:32:9a:f2:a7:c3:37:67:9c:36:3a:a8:9c:f2:38:8e:73:ea:
         48:3d:66:45:42:42:ff:36:64:a7:16:2e:18:a0:78:cc:51:8e:
         ba:e0:89:38:a1:23:b7:cb:82:e1:3d:03:5e:2d:52:c4:96:3c:
         22:5c:e4:a2:16:d8:76:a8:8d:87:2a:c0:d4:d4:d7:73:23:5b:
         4f:81:21:a1:09:71:01:f9:e3:49:53:4c:bc:41:19:f8:c7:b1:
         d9:2c:3b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:37:19 2025 by rpki-client