Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/323830343a383030303a3a2f33322d3332203d3e20323731373233.roa
File:                     323830343a383030303a3a2f33322d3332203d3e20323731373233.roa (raw, json)
Hash identifier:          4vEt+l2GQTQPmWrMzCQGwRhNf0gWt17ABwjlhCETwKw=
Subject key identifier:   08:DD:84:19:6F:A3:0A:82:83:AD:2F:6C:4F:60:08:7C:39:5B:05:CF
Certificate issuer:       /CN=C5FAC883F52999ACF758B4E2B97F23641E0B1141
Certificate serial:       0EA3E82C7CCF5CB368831C21A49F5E3F41536910
Authority key identifier: C5:FA:C8:83:F5:29:99:AC:F7:58:B4:E2:B9:7F:23:64:1E:0B:11:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5FAC883F52999ACF758B4E2B97F23641E0B1141.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/323830343a383030303a3a2f33322d3332203d3e20323731373233.roa
Signing time:             Fri 14 Jun 2024 13:21:19 +0000
ROA not before:           Fri 14 Jun 2024 13:16:19 +0000
ROA not after:            Fri 13 Jun 2025 13:21:19 +0000
asID:                     271723
IP address blocks:        2804:8000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.crl
                          rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5FAC883F52999ACF758B4E2B97F23641E0B1141.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Mar 2025 00:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a3:e8:2c:7c:cf:5c:b3:68:83:1c:21:a4:9f:5e:3f:41:53:69:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5FAC883F52999ACF758B4E2B97F23641E0B1141
        Validity
            Not Before: Jun 14 13:16:19 2024 GMT
            Not After : Jun 13 13:21:19 2025 GMT
        Subject: CN=08DD84196FA30A8283AD2F6C4F60087C395B05CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a1:df:c7:0f:81:58:02:a1:cc:21:f3:9c:79:
                    c4:47:73:95:f9:3b:01:9e:41:61:a7:c8:6e:f4:83:
                    50:d5:97:7c:0d:aa:d6:ea:90:e6:43:ff:d6:c2:06:
                    11:10:51:6c:42:96:ee:d7:1e:d5:6c:fc:40:ff:dc:
                    19:82:25:2b:59:26:82:d1:2e:33:5b:7b:58:07:b5:
                    5f:c8:2b:da:24:85:41:81:fd:e4:0c:72:83:75:d4:
                    17:50:0b:ea:62:19:32:8d:dc:80:c3:a0:fd:ff:e1:
                    b9:2a:37:d0:01:76:51:5e:ef:11:b4:b4:d7:6f:72:
                    11:1d:85:df:65:95:36:f0:7f:ea:e5:93:95:1e:38:
                    c9:e8:ca:10:70:3d:bd:30:78:3a:cd:42:90:80:66:
                    db:75:77:d0:3b:7e:96:7a:6b:7f:13:1c:7f:b2:da:
                    f8:5d:b7:ea:41:01:22:65:85:24:c8:95:21:fd:13:
                    5c:7c:2f:6e:6f:b9:45:b8:21:d7:3e:6d:b2:f6:8d:
                    50:2c:ac:07:a9:56:e8:11:6e:37:9a:e3:ac:96:7f:
                    27:9a:e5:63:00:3d:69:bc:5e:09:1d:8f:33:e7:82:
                    63:45:fd:b8:63:18:ec:75:20:0e:38:22:cd:a4:ad:
                    a1:4f:8c:a7:68:4a:1a:a8:fa:af:86:8f:f1:1a:04:
                    ac:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DD:84:19:6F:A3:0A:82:83:AD:2F:6C:4F:60:08:7C:39:5B:05:CF
            X509v3 Authority Key Identifier:
                keyid:C5:FA:C8:83:F5:29:99:AC:F7:58:B4:E2:B9:7F:23:64:1E:0B:11:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5FAC883F52999ACF758B4E2B97F23641E0B1141.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/323830343a383030303a3a2f33322d3332203d3e20323731373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8000::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:78:4f:a5:af:0d:a4:e1:fc:2e:e5:ec:be:8a:0e:5d:0a:97:
         fa:bb:8a:6f:16:48:69:d0:ad:03:75:c6:bc:93:fe:11:a1:c4:
         41:46:bd:95:0e:83:57:a7:a5:93:a1:10:dc:9b:13:e3:01:23:
         b8:a6:be:a4:67:2b:be:14:a5:bf:79:00:35:46:76:1b:a7:47:
         26:22:57:05:45:79:a8:ca:ae:31:a8:b8:61:d4:4f:a3:d9:1f:
         bc:ed:07:14:13:d8:7a:1c:41:ef:f5:f1:66:22:58:62:60:0a:
         88:fd:fc:f9:37:76:28:59:41:8d:fb:4f:88:49:67:e7:f3:ab:
         62:5c:c0:bd:2e:82:b3:96:38:74:d1:e9:c6:f8:56:53:6b:d4:
         38:21:1f:3d:2d:7a:87:5a:59:76:aa:92:d1:f4:1a:8c:fe:6f:
         2b:45:6b:12:59:73:19:c1:b5:d3:d5:ea:68:c8:4c:3a:c8:61:
         28:61:a5:8c:1e:4f:2b:ef:d0:e5:0b:67:46:55:6f:b5:08:89:
         5e:9b:a6:b4:14:4c:c2:86:1b:75:a5:11:7e:bd:5b:f1:b8:5c:
         aa:5f:3c:ee:c8:12:c6:b4:2b:b0:ee:20:d2:bc:32:43:09:b5:
         ec:c0:1f:6d:10:b7:92:9c:6a:64:2e:29:d1:f9:88:3b:6e:8e:
         5d:b7:e3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:46:04 2025 by rpki-client