Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/323830343a323266383a3a2f33332d3333203d3e20323634313335.roa
File:                     323830343a323266383a3a2f33332d3333203d3e20323634313335.roa (raw, json)
Hash identifier:          VdQidDMWT+c1gtyREoi/tP3tKC24Ey0pUVOS1OvS7+U=
Subject key identifier:   D4:35:8E:36:FA:81:19:90:E3:45:7F:B1:6C:F6:58:09:41:19:AA:54
Certificate issuer:       /CN=8810214D39049DAE584E4DE0958ABBECE36C9558
Certificate serial:       1B3C69A052E989B67E5F610028BC029F19825410
Authority key identifier: 88:10:21:4D:39:04:9D:AE:58:4E:4D:E0:95:8A:BB:EC:E3:6C:95:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8810214D39049DAE584E4DE0958ABBECE36C9558.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/323830343a323266383a3a2f33332d3333203d3e20323634313335.roa
Signing time:             Fri 21 Feb 2025 23:52:40 +0000
ROA not before:           Fri 21 Feb 2025 23:47:40 +0000
ROA not after:            Fri 20 Feb 2026 23:52:40 +0000
asID:                     264135
IP address blocks:        2804:22f8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/8810214D39049DAE584E4DE0958ABBECE36C9558.crl
                          rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/8810214D39049DAE584E4DE0958ABBECE36C9558.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8810214D39049DAE584E4DE0958ABBECE36C9558.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3c:69:a0:52:e9:89:b6:7e:5f:61:00:28:bc:02:9f:19:82:54:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8810214D39049DAE584E4DE0958ABBECE36C9558
        Validity
            Not Before: Feb 21 23:47:40 2025 GMT
            Not After : Feb 20 23:52:40 2026 GMT
        Subject: CN=D4358E36FA811990E3457FB16CF658094119AA54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9d:d8:d0:7e:0d:65:7a:e4:b4:bc:7c:3c:d1:
                    ae:71:7d:07:f3:91:8d:92:ad:b2:0d:f3:5f:9d:81:
                    70:33:9e:a6:f2:75:df:48:23:c9:d2:aa:99:e6:28:
                    20:53:62:4b:38:8e:f6:a5:18:e1:9c:81:e1:a9:6b:
                    66:37:66:7b:0e:3a:f3:c9:58:84:57:eb:5b:8c:80:
                    74:e6:61:6b:ed:3f:7b:02:8f:bb:34:07:0d:b6:14:
                    5b:51:a3:cb:6e:eb:1e:78:bd:6c:69:1d:b2:8e:d9:
                    8a:93:73:d5:5b:62:4f:d9:0d:5b:76:94:ad:bc:41:
                    db:e0:28:f3:cd:91:fe:15:8e:2e:ff:ac:d4:d0:95:
                    cc:5d:93:da:00:20:9e:c0:5b:5f:ff:9d:7b:40:79:
                    d2:70:d8:62:27:54:b8:95:e1:b6:9d:08:87:93:22:
                    2a:7e:e7:44:60:00:39:4e:0e:a4:4a:78:35:16:75:
                    a5:08:70:e3:c4:aa:6f:af:f4:64:8d:d3:3b:e3:e3:
                    39:a9:be:bc:af:80:44:3e:fa:27:ab:a2:22:35:7a:
                    3d:a4:04:d6:df:8e:b5:40:03:9f:06:a5:ec:67:ca:
                    fc:19:c4:10:4a:95:d2:9c:52:d7:3f:46:f7:78:30:
                    5c:97:c9:82:b8:fe:01:aa:b9:4d:5c:7b:59:8e:6a:
                    d1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:35:8E:36:FA:81:19:90:E3:45:7F:B1:6C:F6:58:09:41:19:AA:54
            X509v3 Authority Key Identifier:
                keyid:88:10:21:4D:39:04:9D:AE:58:4E:4D:E0:95:8A:BB:EC:E3:6C:95:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/8810214D39049DAE584E4DE0958ABBECE36C9558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8810214D39049DAE584E4DE0958ABBECE36C9558.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/323830343a323266383a3a2f33332d3333203d3e20323634313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22f8::/33

    Signature Algorithm: sha256WithRSAEncryption
         4f:57:1c:22:da:88:dc:58:cf:0d:cd:87:4a:85:a2:a5:d5:2b:
         25:47:4a:c6:e3:36:77:d9:78:b9:f4:41:22:0f:88:ff:b5:dc:
         6e:14:16:f8:50:96:b0:ac:78:01:bf:f6:ba:f2:70:34:33:94:
         6f:a8:4c:9f:01:d1:14:0b:3c:e6:32:86:41:e5:38:69:fe:b8:
         37:71:9a:80:1f:43:8d:cd:68:39:6c:8f:32:3c:1e:bf:8f:61:
         e5:8b:17:ed:a8:41:5d:17:1b:1e:cc:78:34:be:27:3f:6f:80:
         d4:af:17:c5:3b:da:f5:88:6d:64:59:f8:04:d2:8b:75:1a:6a:
         7a:e2:5b:5c:3e:96:61:25:69:de:56:5d:d6:62:25:fd:5f:99:
         cd:3f:9c:34:f3:f3:b2:f6:59:24:89:56:31:5e:1f:8e:38:a8:
         91:46:a6:ac:07:74:1e:b8:c1:41:11:d7:51:a4:bc:5a:b5:63:
         91:8d:ac:cd:51:b0:e6:1e:62:4b:d7:51:a5:4b:37:7c:84:1d:
         46:d2:e6:3b:88:e4:e0:35:89:23:e6:73:b2:68:37:89:9b:a2:
         97:21:87:f0:8e:f8:07:bb:e7:6b:a4:76:1d:58:9a:e1:fd:d5:
         4a:b5:dc:52:a2:18:7a:7d:f1:ad:7f:64:2b:d7:74:9b:bf:95:
         31:ec:4a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:26:35 2025 by rpki-client