Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/323830343a6464303a3a2f33322d313238203d3e203238363339.roa
File:                     323830343a6464303a3a2f33322d313238203d3e203238363339.roa (raw, json)
Hash identifier:          WQoboyImui1okPybhUmMkwRTPTqA4Wr/K4QTuEd2D6g=
Subject key identifier:   60:5F:AE:18:25:57:66:4F:39:2E:09:03:57:24:94:F0:40:03:17:D7
Certificate issuer:       /CN=8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4
Certificate serial:       4AA3BF27A19A40FEE7FE57CBAA80544431163F68
Authority key identifier: 8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/323830343a6464303a3a2f33322d313238203d3e203238363339.roa
Signing time:             Wed 05 Mar 2025 23:18:33 +0000
ROA not before:           Wed 05 Mar 2025 23:13:33 +0000
ROA not after:            Wed 04 Mar 2026 23:18:33 +0000
asID:                     28639
IP address blocks:        2804:dd0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.crl
                          rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 17:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a3:bf:27:a1:9a:40:fe:e7:fe:57:cb:aa:80:54:44:31:16:3f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4
        Validity
            Not Before: Mar  5 23:13:33 2025 GMT
            Not After : Mar  4 23:18:33 2026 GMT
        Subject: CN=605FAE182557664F392E0903572494F0400317D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:73:ea:aa:68:7e:d1:8c:3a:97:b5:ba:6c:48:
                    f5:e3:dd:24:d4:6a:dc:94:8f:ec:0c:ef:59:b0:33:
                    18:8a:3f:07:1a:86:89:b5:d7:4e:f4:ec:30:f0:25:
                    7a:87:6c:0c:77:31:15:25:8f:65:e6:42:a3:31:af:
                    d7:7f:7e:89:c5:23:1c:cd:8d:4c:22:cc:80:56:4b:
                    74:03:17:14:b7:3a:25:22:d5:21:3b:f3:66:8a:d4:
                    bc:83:e8:99:3e:ac:37:ad:84:c9:74:7c:8f:5f:87:
                    33:ad:4c:2c:b3:67:41:c0:39:74:75:5e:70:29:66:
                    3a:32:c3:46:3f:9e:67:45:26:fc:a7:e5:f4:f2:c1:
                    84:fc:06:e3:1c:23:98:d9:b8:37:c7:78:a3:b5:e6:
                    27:67:38:84:66:85:81:5c:b5:81:c7:35:33:1b:12:
                    1c:54:7f:43:f0:5d:7e:d5:89:4e:41:53:fb:c6:1b:
                    6e:99:a6:e8:89:77:80:c1:79:83:08:b9:ba:43:a1:
                    d9:3b:ca:c3:51:ed:07:5c:6b:5f:eb:ed:ef:23:0f:
                    41:c2:a0:2e:ed:b6:66:ff:b1:c9:f0:56:5e:e3:ab:
                    ce:32:a8:ae:73:5d:52:aa:5c:60:da:2b:65:30:a8:
                    f6:4f:eb:61:b1:39:64:12:f2:d9:b4:d8:0e:82:de:
                    a9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5F:AE:18:25:57:66:4F:39:2E:09:03:57:24:94:F0:40:03:17:D7
            X509v3 Authority Key Identifier:
                keyid:8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/323830343a6464303a3a2f33322d313238203d3e203238363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:84:f8:55:03:47:22:be:29:01:93:36:ae:04:ec:2e:bd:5f:
         0b:91:f0:ce:3f:cd:b2:78:c8:0a:dd:c2:c3:a3:f5:fb:07:fa:
         5a:dc:de:fb:7d:e1:20:19:fc:40:03:5a:e2:7f:b8:4b:d3:1f:
         13:8d:9e:02:ce:73:06:b5:d4:74:b7:0b:c8:dd:b3:2a:72:fc:
         ff:45:28:5f:b7:9d:7d:51:74:ec:95:86:c4:9d:4c:d4:71:6b:
         01:b1:a7:44:ab:cb:fa:3c:0f:e5:11:51:ba:7e:85:1f:c6:58:
         ab:49:95:c6:db:67:b5:de:ea:c2:55:f1:2b:e8:81:d3:08:ee:
         82:16:7e:24:ea:ec:0d:a0:f0:39:ec:86:44:20:6d:aa:6d:79:
         af:b8:8f:7f:ac:15:5d:ae:95:4c:a4:a7:bf:b4:20:d2:62:8c:
         fe:04:7b:b7:1d:39:ba:f9:da:f2:f5:98:e9:67:52:52:98:a7:
         32:f1:d3:cc:2b:af:1f:90:53:93:91:c2:1f:a6:9e:79:df:68:
         86:f9:d9:8d:2d:b3:2b:31:02:42:e5:df:5f:e3:36:1a:4c:d2:
         f0:7f:26:04:10:1c:05:07:c6:9f:95:8a:62:bb:9a:cc:c4:e3:
         78:16:82:32:e6:8d:2d:97:f0:e3:84:b3:04:d6:fb:92:b1:9c:
         c7:dc:aa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:00:44 2025 by rpki-client