Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/323830343a386134383a3a2f33332d3333203d3e20323733363539.roa
File:                     323830343a386134383a3a2f33332d3333203d3e20323733363539.roa (raw, json)
Hash identifier:          3aFECrHLFXkR/JPUQ8F7dUhKpU+yNRK6AXFpHsbyi9s=
Subject key identifier:   CD:E2:1A:67:C0:FA:28:EC:7A:38:C5:8E:1A:65:13:EC:9F:35:3A:74
Certificate issuer:       /CN=A18299AB9A7616C093827EEE6A67FF105E7C632E
Certificate serial:       49540FD32803F3FE4C2034DD187CDFC0CC2E76B2
Authority key identifier: A1:82:99:AB:9A:76:16:C0:93:82:7E:EE:6A:67:FF:10:5E:7C:63:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A18299AB9A7616C093827EEE6A67FF105E7C632E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/323830343a386134383a3a2f33332d3333203d3e20323733363539.roa
Signing time:             Tue 14 Jan 2025 19:56:46 +0000
ROA not before:           Tue 14 Jan 2025 19:51:46 +0000
ROA not after:            Tue 13 Jan 2026 19:56:46 +0000
asID:                     273659
IP address blocks:        2804:8a48::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/A18299AB9A7616C093827EEE6A67FF105E7C632E.crl
                          rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/A18299AB9A7616C093827EEE6A67FF105E7C632E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A18299AB9A7616C093827EEE6A67FF105E7C632E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:54:0f:d3:28:03:f3:fe:4c:20:34:dd:18:7c:df:c0:cc:2e:76:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A18299AB9A7616C093827EEE6A67FF105E7C632E
        Validity
            Not Before: Jan 14 19:51:46 2025 GMT
            Not After : Jan 13 19:56:46 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f8:a6:a2:57:ba:e7:8d:ec:5b:08:40:45:44:
                    f0:4c:91:e8:f4:a7:89:1e:24:48:5e:67:a7:a0:04:
                    e6:bc:4e:3d:5d:75:70:9b:1d:1c:cd:00:23:bd:31:
                    bf:47:08:02:73:fd:c4:28:b5:1e:2d:80:ed:67:73:
                    7e:37:f2:dd:91:06:55:3b:13:95:56:4f:cd:29:82:
                    6a:d6:bf:31:af:4e:67:2f:f0:0e:90:74:87:29:57:
                    25:f9:c0:97:20:3e:08:a1:2a:45:6d:f3:ea:72:60:
                    98:96:25:9a:bb:fc:ad:7a:96:c5:dc:06:7d:82:e2:
                    1f:f3:3d:79:9b:8a:be:d3:09:ae:90:2b:56:e2:09:
                    41:4d:f2:bc:51:21:fa:66:73:75:2e:53:5d:27:fc:
                    72:0b:fc:7e:51:3c:6b:03:e4:dd:27:52:c8:72:8f:
                    a3:55:80:86:dd:c5:46:9d:4c:8a:3b:f0:d6:31:09:
                    a8:2e:1c:b3:68:1f:1d:6a:3c:fb:10:8e:0c:79:00:
                    b4:da:38:8e:4b:0e:8d:7f:0c:9c:88:c9:da:e4:54:
                    86:bc:df:b8:7f:62:12:c3:30:b3:1c:64:03:d9:04:
                    f1:56:11:ae:7c:93:f7:73:fc:f8:8e:55:1b:43:f6:
                    10:c6:55:ae:c8:d1:a3:df:cb:bb:98:f9:89:8a:14:
                    1a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E2:1A:67:C0:FA:28:EC:7A:38:C5:8E:1A:65:13:EC:9F:35:3A:74
            X509v3 Authority Key Identifier:
                keyid:A1:82:99:AB:9A:76:16:C0:93:82:7E:EE:6A:67:FF:10:5E:7C:63:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/A18299AB9A7616C093827EEE6A67FF105E7C632E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A18299AB9A7616C093827EEE6A67FF105E7C632E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/323830343a386134383a3a2f33332d3333203d3e20323733363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a48::/33

    Signature Algorithm: sha256WithRSAEncryption
         85:1d:7c:c2:c3:29:9a:35:d1:a4:5c:34:3a:3f:92:e8:94:16:
         5e:0e:c0:11:1c:22:56:be:d1:8f:9b:59:36:c0:cb:8a:b3:01:
         9a:3b:41:7b:58:31:d7:d0:7d:b1:08:9d:9b:b4:65:fa:e3:f5:
         38:91:90:11:0b:5a:26:13:4a:d3:64:c5:51:ce:79:32:c6:e8:
         b1:dc:d7:bd:0f:01:7f:ba:f6:ad:9f:50:e4:2e:4f:07:be:a5:
         4c:69:bd:63:08:3a:d6:f4:8c:08:dd:91:e8:60:c8:24:3e:e7:
         69:73:42:e7:f6:52:fe:d2:a8:61:46:98:a6:17:c7:db:a8:e1:
         d5:00:c9:6b:16:30:3c:ce:38:6f:c6:c0:9f:52:e1:c9:bc:63:
         de:c0:68:a2:1d:ca:0f:27:7b:cd:bc:65:57:66:b3:c2:98:3f:
         48:3f:b8:c6:90:f6:8b:3a:a8:a6:5c:c5:2c:d5:9a:de:a0:1d:
         b9:86:66:f4:19:25:af:eb:5e:2a:78:ce:b7:56:4f:78:b6:52:
         69:4c:de:ca:1d:c7:b3:56:40:45:29:85:97:f3:b6:d1:c4:12:
         90:2e:4d:cf:34:78:a8:8b:72:e0:73:b0:00:ab:da:33:fe:3f:
         0c:74:2e:0b:ab:c7:c0:80:e3:63:66:57:fc:9b:9c:f5:ec:7e:
         d9:ce:b0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:31 2025 by rpki-client