Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/323830343a363061383a3a2f33322d3438203d3e20323639313832.roa
File:                     323830343a363061383a3a2f33322d3438203d3e20323639313832.roa (raw, json)
Hash identifier:          +MFfocnlzyKe14fsbYL+9hVWnRUHCe5h6aDFNebdK0Q=
Subject key identifier:   7A:18:61:40:44:98:8B:F2:1F:F4:55:75:0F:A7:B9:47:2A:42:C8:02
Certificate issuer:       /CN=882B21105A1E81CA39CEBB697647A9DF2F3E25C4
Certificate serial:       75FC4C33261454F10F669124F16216914F6DD521
Authority key identifier: 88:2B:21:10:5A:1E:81:CA:39:CE:BB:69:76:47:A9:DF:2F:3E:25:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/323830343a363061383a3a2f33322d3438203d3e20323639313832.roa
Signing time:             Mon 17 Mar 2025 14:52:24 +0000
ROA not before:           Mon 17 Mar 2025 14:47:24 +0000
ROA not after:            Mon 16 Mar 2026 14:52:24 +0000
asID:                     269182
IP address blocks:        2804:60a8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.crl
                          rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 22:19:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fc:4c:33:26:14:54:f1:0f:66:91:24:f1:62:16:91:4f:6d:d5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882B21105A1E81CA39CEBB697647A9DF2F3E25C4
        Validity
            Not Before: Mar 17 14:47:24 2025 GMT
            Not After : Mar 16 14:52:24 2026 GMT
        Subject: CN=7A18614044988BF21FF455750FA7B9472A42C802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:1c:03:0a:b5:a7:05:46:37:60:e2:14:e5:a5:
                    e8:43:32:1e:ae:55:f5:a8:9c:cc:3e:1c:fc:a6:bf:
                    d1:f0:c7:ac:2f:71:ca:d2:5b:c8:2d:87:8e:47:a4:
                    be:72:83:e4:6e:9b:35:bc:1b:65:37:d1:2c:d0:38:
                    b2:f6:6f:cf:5a:53:85:1f:d1:29:db:b0:3a:63:df:
                    63:d6:ff:f5:ff:13:4f:fa:a6:98:1a:76:ef:38:e1:
                    4f:07:c7:55:72:ec:94:56:07:3c:65:2b:7a:38:61:
                    9e:01:f7:8f:12:cb:e7:d7:dc:1b:9d:43:dd:97:f2:
                    8f:0e:3e:d8:cb:3b:d4:c0:f9:c2:71:6c:92:2a:8a:
                    cd:10:ea:bf:ee:d4:dc:0e:85:50:e8:10:2e:70:4e:
                    e9:86:ce:1e:72:24:e1:6d:14:da:26:e5:99:50:e4:
                    ea:cd:c4:f2:22:22:e9:5a:32:38:03:bc:6a:37:49:
                    1e:4f:47:e4:f4:ca:5e:ea:ed:88:20:fa:ce:ff:e6:
                    78:d9:c9:75:ba:c1:d0:d9:a1:71:ef:71:d5:5f:7f:
                    12:56:06:4b:f9:95:a2:e9:eb:05:82:e3:e0:1a:68:
                    cd:a2:56:00:60:c9:4d:0a:9e:ae:24:b6:fd:01:19:
                    67:c4:c2:64:97:92:40:8f:fe:4f:e2:65:73:76:64:
                    30:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:18:61:40:44:98:8B:F2:1F:F4:55:75:0F:A7:B9:47:2A:42:C8:02
            X509v3 Authority Key Identifier:
                keyid:88:2B:21:10:5A:1E:81:CA:39:CE:BB:69:76:47:A9:DF:2F:3E:25:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/323830343a363061383a3a2f33322d3438203d3e20323639313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:12:19:39:12:77:8e:ab:9f:4c:f6:bf:61:db:67:f1:68:bf:
         91:22:fc:7d:a6:ed:54:02:18:3b:c6:bd:a0:5d:52:6f:1f:ec:
         a7:64:13:17:59:f1:e8:9f:64:1c:03:eb:6a:3f:90:4a:c9:2d:
         3f:6d:e9:58:fb:66:7d:21:64:da:5b:b4:72:9a:17:1a:c6:8d:
         95:e2:01:87:10:dc:e6:1c:c2:f8:21:14:f0:b9:4c:1e:dd:19:
         7a:52:3c:26:f9:75:e8:6e:26:03:59:d4:15:bf:93:4d:d4:bb:
         80:c0:12:fc:a0:25:25:4c:ab:69:1c:6e:c5:d5:b9:f0:6b:fd:
         47:64:23:93:1c:d3:36:c5:11:f8:8a:77:29:10:f6:b1:24:5b:
         0e:0c:14:40:72:79:ee:f5:b2:85:dd:09:28:fc:f5:f3:aa:d9:
         06:63:ba:5a:53:fc:cd:0b:8f:ab:c6:73:06:5a:a7:ca:ec:75:
         f0:4c:21:f9:1d:26:51:2f:98:41:d5:7e:37:6f:84:a9:02:95:
         d7:76:16:0d:eb:c9:9b:40:ae:9e:c2:10:af:ae:56:46:cb:87:
         08:d2:d9:98:ed:8d:d4:76:c1:df:d4:72:d6:db:3c:12:dd:e6:
         1e:3c:ce:01:0c:4a:83:b4:33:54:72:92:8b:13:b3:59:67:93:
         d1:39:e5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:39 2025 by rpki-client