Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/1/323830343a376231303a3a2f33322d3334203d3e20323731343038.roa
File:                     323830343a376231303a3a2f33322d3334203d3e20323731343038.roa (raw, json)
Hash identifier:          5tqWgzasoThL9hP/f8yiimc56Y/8u9QX/v0WiMgmA2k=
Subject key identifier:   0B:57:31:CC:74:BC:00:F2:7E:C6:98:20:A5:96:DE:0C:97:8C:4A:89
Certificate issuer:       /CN=08D5984462574247A2A9C04FCE2546B029D12882
Certificate serial:       48E1B0D8C019413DA5E075094B336B2A82A11942
Authority key identifier: 08:D5:98:44:62:57:42:47:A2:A9:C0:4F:CE:25:46:B0:29:D1:28:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08D5984462574247A2A9C04FCE2546B029D12882.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/1/323830343a376231303a3a2f33322d3334203d3e20323731343038.roa
Signing time:             Thu 06 Mar 2025 11:13:48 +0000
ROA not before:           Thu 06 Mar 2025 11:08:48 +0000
ROA not after:            Thu 05 Mar 2026 11:13:48 +0000
asID:                     271408
IP address blocks:        2804:7b10::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/1/08D5984462574247A2A9C04FCE2546B029D12882.crl
                          rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/1/08D5984462574247A2A9C04FCE2546B029D12882.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08D5984462574247A2A9C04FCE2546B029D12882.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e1:b0:d8:c0:19:41:3d:a5:e0:75:09:4b:33:6b:2a:82:a1:19:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08D5984462574247A2A9C04FCE2546B029D12882
        Validity
            Not Before: Mar  6 11:08:48 2025 GMT
            Not After : Mar  5 11:13:48 2026 GMT
        Subject: CN=0B5731CC74BC00F27EC69820A596DE0C978C4A89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c2:e7:66:16:c0:c9:15:19:0f:bb:cf:8a:68:
                    9b:01:f4:6d:a6:92:a0:32:36:0e:b5:87:0a:31:c6:
                    b4:bb:a3:fd:0b:c2:2b:7f:92:e0:1a:d6:49:be:7f:
                    92:aa:2f:b5:28:f7:c4:9d:08:f2:eb:89:a2:a5:83:
                    d9:a3:c1:cc:56:67:39:ae:5f:3e:da:e8:ea:01:4f:
                    31:93:6a:70:c2:fe:36:6c:69:af:c5:05:2c:cc:05:
                    ca:23:b4:f7:83:c1:7f:e8:de:bc:0f:af:d0:ec:54:
                    42:74:ca:73:06:56:14:67:bc:cb:fd:fd:36:d5:20:
                    22:7f:cf:45:93:b5:8d:90:17:db:44:53:25:0a:e9:
                    50:9a:0f:7a:d6:e8:68:34:f1:a6:19:3a:90:9b:64:
                    57:2d:15:70:82:b5:71:ec:f9:0c:4f:8e:50:a3:17:
                    b4:c3:f1:ee:17:70:30:2c:57:88:85:f1:a0:b6:ad:
                    ba:73:ee:05:b7:22:6b:13:03:08:f5:c7:03:34:bb:
                    37:d6:91:27:eb:a5:b1:1a:a8:04:c4:cf:c6:a5:0e:
                    dc:04:f9:2b:70:ca:00:ed:aa:bc:dc:39:0d:7c:6d:
                    c8:ff:d9:23:92:d7:5e:92:1b:a6:db:e3:2f:4e:15:
                    3c:e3:61:fb:ec:ed:20:95:bb:71:38:bc:fc:1d:d6:
                    aa:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:57:31:CC:74:BC:00:F2:7E:C6:98:20:A5:96:DE:0C:97:8C:4A:89
            X509v3 Authority Key Identifier:
                keyid:08:D5:98:44:62:57:42:47:A2:A9:C0:4F:CE:25:46:B0:29:D1:28:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/1/08D5984462574247A2A9C04FCE2546B029D12882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08D5984462574247A2A9C04FCE2546B029D12882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/1/323830343a376231303a3a2f33322d3334203d3e20323731343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b10::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:af:b5:64:04:fa:da:8c:5c:b9:d9:cc:f5:f2:4b:28:8d:15:
         01:7c:5a:a2:92:70:07:27:bd:71:b4:0a:37:27:7b:08:a6:08:
         19:b4:e2:ad:64:9b:b1:97:9e:07:dc:41:a9:4d:e1:0c:f7:05:
         fa:25:d9:5f:a7:da:26:ba:46:f2:f1:30:d1:8c:22:27:25:f8:
         b5:d0:be:9f:ac:6d:01:b3:c9:a6:d4:92:34:e0:72:67:09:71:
         34:9e:96:91:19:ac:e1:7c:d4:73:54:28:eb:c2:23:b2:e2:fa:
         e3:43:b5:df:cb:c2:7d:60:14:99:33:7b:f1:98:bc:32:6c:87:
         13:c1:8b:5c:6d:55:47:1a:8f:c3:fc:93:d4:18:18:13:7a:61:
         c2:8d:dd:4c:e9:e2:b0:2d:17:2e:8d:f8:84:83:31:3c:5b:ce:
         fc:c3:f1:c6:64:52:14:6c:45:b0:c2:03:1b:54:83:d9:e5:c5:
         5c:8d:2a:9a:78:7f:b4:bb:a5:e6:b7:19:c2:05:90:dc:82:b1:
         07:71:43:41:70:09:dd:3a:6e:ed:c7:76:09:bf:8b:b4:6c:32:
         56:6c:38:35:a7:5a:b1:d2:f6:d9:2a:70:a4:21:6c:bd:ab:21:
         7c:90:db:1c:0d:d7:6e:b0:1e:d7:90:42:06:4d:45:32:72:64:
         0f:48:eb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:06:53 2025 by rpki-client