Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a3830303a3a2f34302d3430203d3e203533303437.roa
File:                     323830343a3666303a3830303a3a2f34302d3430203d3e203533303437.roa (raw, json)
Hash identifier:          1PbaQXodvcHpH+OdyQOKNnqznZWl6CPjTssxD7s+A30=
Subject key identifier:   C7:AB:42:C3:30:87:0E:64:CA:A2:EE:4D:77:B0:4C:38:78:56:7B:29
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       2A8735BF93BF6AAD57B76705956FCC2D0345FF30
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a3830303a3a2f34302d3430203d3e203533303437.roa
Signing time:             Thu 05 Dec 2024 12:58:23 +0000
ROA not before:           Thu 05 Dec 2024 12:53:23 +0000
ROA not after:            Thu 04 Dec 2025 12:58:23 +0000
asID:                     53047
IP address blocks:        2804:6f0:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:87:35:bf:93:bf:6a:ad:57:b7:67:05:95:6f:cc:2d:03:45:ff:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Dec  5 12:53:23 2024 GMT
            Not After : Dec  4 12:58:23 2025 GMT
        Subject: CN=C7AB42C330870E64CAA2EE4D77B04C3878567B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:53:a4:ff:98:99:f5:b3:97:e8:55:4f:05:
                    a1:82:68:c7:c1:12:0e:98:c0:b0:ff:48:a2:01:bd:
                    86:9c:89:30:03:89:70:f5:aa:43:ff:02:27:79:6b:
                    6c:cc:ca:83:64:25:ed:56:cd:86:93:22:e3:89:ce:
                    aa:c7:a3:93:7d:08:d6:2d:3d:a9:30:c6:7e:fe:a1:
                    0d:0f:64:54:f7:ee:56:32:3a:85:0c:0b:90:af:b5:
                    ee:2a:b9:c5:99:44:12:dd:65:8d:bf:8d:4a:86:07:
                    d8:72:e7:ad:09:74:43:2a:60:6e:10:53:81:a6:07:
                    5b:6c:27:51:78:10:63:7e:f8:d6:b6:81:45:c9:4f:
                    1a:ab:ee:65:1a:c8:16:ec:14:0f:74:10:74:a6:f3:
                    42:66:89:66:b6:bd:88:ef:ca:42:07:cb:14:df:a8:
                    3a:fe:e6:21:f2:c6:16:b4:a7:24:78:ee:2a:d7:6f:
                    97:03:7f:7c:d4:1d:29:bd:ef:fc:ac:df:85:95:90:
                    cf:ec:d8:4c:c5:a2:62:b8:dc:79:d7:42:93:d6:b1:
                    77:28:63:8b:4a:c8:b5:87:12:cb:48:92:d6:de:25:
                    90:6c:33:5f:90:5e:14:53:3e:b2:ca:7c:12:98:37:
                    c2:56:75:09:77:fd:4c:bf:7c:c8:8b:b4:92:3b:a6:
                    bd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AB:42:C3:30:87:0E:64:CA:A2:EE:4D:77:B0:4C:38:78:56:7B:29
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a3830303a3a2f34302d3430203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f0:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         6b:4a:c6:31:64:3c:d9:1c:2b:74:18:8b:2f:4e:c0:fe:f2:52:
         99:c3:7e:6c:30:4b:b1:5c:24:3b:6e:ea:1a:49:54:40:5e:35:
         a8:e1:ab:b3:51:a0:e0:a3:36:0c:92:5b:96:c3:0b:f8:54:ce:
         cf:32:98:2a:08:bb:68:6e:f1:26:ff:bf:6c:33:b0:45:7d:9e:
         49:07:43:f0:b6:b5:c7:13:17:a2:0d:c2:b2:7e:ab:0a:1e:bb:
         57:6c:96:c2:07:82:c0:a6:37:17:2d:47:65:a1:78:13:06:01:
         32:d2:4b:98:79:94:56:55:83:1f:4d:a0:25:f4:47:90:9f:d4:
         a4:96:71:eb:cd:5d:cc:7d:f7:cb:08:3c:8d:26:d4:cd:89:12:
         13:8d:20:0f:f9:fc:2b:b4:3f:ff:d1:e4:66:91:3e:7b:5f:98:
         27:00:74:f1:b4:f8:47:0e:31:23:6c:22:9e:bf:0c:d2:4b:af:
         36:b3:c6:a0:12:bc:83:13:f6:03:b8:13:60:14:f5:9d:ba:b2:
         32:7e:27:cd:2d:eb:77:6d:2a:70:78:6a:e3:37:ce:62:ec:1b:
         2a:af:03:cf:1f:1d:0b:05:70:12:d8:16:20:4a:39:8a:7d:8a:
         df:33:aa:c4:fd:cc:24:ad:9b:26:c7:0b:bd:3b:4f:7a:62:05:
         11:c0:26:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:45 2025 by rpki-client