Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/323830343a386432383a313a3a2f34382d3438203d3e20323733333339.roa
File:                     323830343a386432383a313a3a2f34382d3438203d3e20323733333339.roa (raw, json)
Hash identifier:          6nAYRX+mTl3cNt6uoLVwyiPz3blsdELjYRo0zPA5iW4=
Subject key identifier:   64:97:81:77:55:42:AD:23:31:D5:44:6C:7D:55:F3:EC:E2:E3:9A:1D
Certificate issuer:       /CN=A7C3FCD410E53CBCF7F64DC367269EF9625997A7
Certificate serial:       342B3AE841EABAF726AEDA77AC36E013DE5B00DA
Authority key identifier: A7:C3:FC:D4:10:E5:3C:BC:F7:F6:4D:C3:67:26:9E:F9:62:59:97:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/323830343a386432383a313a3a2f34382d3438203d3e20323733333339.roa
Signing time:             Fri 04 Oct 2024 15:49:25 +0000
ROA not before:           Fri 04 Oct 2024 15:44:25 +0000
ROA not after:            Fri 03 Oct 2025 15:49:25 +0000
asID:                     273339
IP address blocks:        2804:8d28:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.crl
                          rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 14:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2b:3a:e8:41:ea:ba:f7:26:ae:da:77:ac:36:e0:13:de:5b:00:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7C3FCD410E53CBCF7F64DC367269EF9625997A7
        Validity
            Not Before: Oct  4 15:44:25 2024 GMT
            Not After : Oct  3 15:49:25 2025 GMT
        Subject: CN=649781775542AD2331D5446C7D55F3ECE2E39A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:16:90:79:57:f0:54:cc:e5:17:14:8d:8e:6c:
                    9f:a9:08:46:e6:8c:15:c1:c0:9d:31:04:ea:76:8a:
                    cc:53:2e:52:8b:6d:a9:28:6b:31:62:6a:59:44:dd:
                    02:06:88:15:1d:39:98:23:e1:90:0d:29:63:21:7d:
                    86:8b:09:b0:68:06:e7:7d:b8:e9:e7:30:fc:d0:c2:
                    70:83:e8:7a:c8:37:d8:49:17:d6:a2:bc:a0:73:da:
                    20:d0:b9:ec:56:89:53:88:6b:e8:6f:ee:20:09:2e:
                    82:c0:7b:eb:a5:88:db:dd:6b:64:b8:c3:48:28:51:
                    66:1a:6e:c1:85:82:b1:bc:53:a2:77:44:e1:65:89:
                    c7:64:3e:3f:e6:a2:76:08:cb:c1:a7:3b:ea:96:9d:
                    09:bb:09:2e:9e:f3:4e:f1:e3:80:3b:32:31:9d:86:
                    26:2b:00:94:35:47:ce:42:53:c2:06:fa:f9:fa:6e:
                    2a:d4:90:c3:2c:71:8c:ca:59:1a:a6:37:a1:69:1f:
                    04:26:27:bf:5a:21:8c:ee:a5:77:76:4e:04:19:de:
                    77:1d:80:90:a1:d5:4b:c9:16:99:9b:5a:dc:e7:17:
                    1a:b0:f5:65:c9:f5:8b:c3:5e:01:be:dd:bc:e4:f0:
                    0c:bf:83:e7:cb:0d:05:26:3c:34:6a:b7:d6:9d:2a:
                    d2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:97:81:77:55:42:AD:23:31:D5:44:6C:7D:55:F3:EC:E2:E3:9A:1D
            X509v3 Authority Key Identifier:
                keyid:A7:C3:FC:D4:10:E5:3C:BC:F7:F6:4D:C3:67:26:9E:F9:62:59:97:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/323830343a386432383a313a3a2f34382d3438203d3e20323733333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d28:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:f3:78:e6:b3:57:c3:ab:43:75:9f:8c:f3:32:e1:be:de:b4:
         50:d3:a9:22:9a:89:05:05:4a:6c:53:e6:3c:29:18:ae:67:ea:
         6e:a7:15:25:ff:1f:37:e0:dc:a7:53:cb:43:21:27:6e:39:5f:
         7a:aa:a0:16:6e:5f:51:c0:d6:4f:28:1e:cf:9f:c4:37:b1:2d:
         03:d9:0f:f3:85:3a:9b:5f:f4:07:b7:10:76:e9:79:75:28:9d:
         32:2c:52:00:91:91:de:57:68:46:16:48:8e:9c:e4:be:c8:de:
         ee:69:42:cd:a1:ca:50:c6:c6:23:a1:30:83:23:d1:a9:43:78:
         bb:8c:c5:24:51:e8:21:3e:d7:ca:4b:8a:24:6e:91:b1:57:ff:
         49:9e:f6:a4:d9:eb:2f:e8:f5:93:55:2c:d8:2b:06:14:c4:01:
         1d:9e:2c:50:38:18:5a:d7:8e:b1:ea:e0:17:b2:67:7d:8c:4f:
         b0:b7:ce:2a:70:4b:03:8e:1e:3b:26:7b:ab:6b:e8:71:89:a0:
         e5:5f:98:01:32:54:ee:b1:8e:05:9c:20:6c:fc:02:48:e6:39:
         38:e3:0b:dd:98:d5:a8:db:1a:4b:65:84:68:96:5e:c2:45:2e:
         b1:32:b9:1a:2a:71:91:ce:c7:74:f9:8a:72:e7:18:7b:49:f1:
         cf:6b:d4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:10:39 2025 by rpki-client