Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/323830343a363630343a3a2f33332d3333203d3e20323639353238.roa
File:                     323830343a363630343a3a2f33332d3333203d3e20323639353238.roa (raw, json)
Hash identifier:          hyDQZK29E+iKuOEQuGkCku98QPjq+YBU349/02+dXzo=
Subject key identifier:   86:54:12:E7:8C:0E:65:A0:BE:3C:84:5F:D1:4E:FC:2C:79:1E:3C:04
Certificate issuer:       /CN=4CFDB632C8A3E9C823323B2E5907A9238E6B8554
Certificate serial:       19FE32EEBE833DD9504F731E68EB34CCD888236E
Authority key identifier: 4C:FD:B6:32:C8:A3:E9:C8:23:32:3B:2E:59:07:A9:23:8E:6B:85:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/323830343a363630343a3a2f33332d3333203d3e20323639353238.roa
Signing time:             Mon 03 Mar 2025 12:30:02 +0000
ROA not before:           Mon 03 Mar 2025 12:25:02 +0000
ROA not after:            Mon 02 Mar 2026 12:30:02 +0000
asID:                     269528
IP address blocks:        2804:6604::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.crl
                          rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 02:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:fe:32:ee:be:83:3d:d9:50:4f:73:1e:68:eb:34:cc:d8:88:23:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CFDB632C8A3E9C823323B2E5907A9238E6B8554
        Validity
            Not Before: Mar  3 12:25:02 2025 GMT
            Not After : Mar  2 12:30:02 2026 GMT
        Subject: CN=865412E78C0E65A0BE3C845FD14EFC2C791E3C04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4a:06:09:07:e5:37:c9:dd:15:ff:d5:9d:3a:
                    e2:c8:b3:de:78:8c:f2:bd:9c:cb:90:1c:a3:d4:ef:
                    c9:d9:cb:ce:0f:d4:49:4a:8f:0b:49:16:4f:80:45:
                    aa:4e:20:b3:5a:25:8a:1f:e5:a3:66:ed:8d:d4:7d:
                    78:db:86:85:b3:68:dc:12:a6:21:cd:93:e8:56:78:
                    c0:f8:27:f5:bd:c8:4f:23:77:26:2b:95:b6:b7:5d:
                    a0:27:58:ca:f8:2d:70:d3:35:56:96:56:a1:8a:69:
                    74:24:25:5e:04:f6:d0:67:e8:15:9a:67:04:73:6e:
                    7a:4e:f3:f9:b4:ee:44:22:a1:eb:0f:c2:38:21:aa:
                    47:37:74:ba:9d:4a:3b:1a:49:f8:6e:0f:9a:04:20:
                    1e:97:a9:9c:77:2b:df:b1:6f:ec:8a:71:62:fc:21:
                    4e:62:1c:f3:9d:01:a7:39:f1:c2:fc:57:ff:91:6f:
                    fe:54:69:29:46:88:14:a3:b7:f2:a8:59:eb:84:3b:
                    92:e8:67:72:c6:e9:14:86:ae:87:d8:98:3a:bb:d5:
                    b3:cf:5a:36:ff:16:84:6c:aa:ab:38:44:37:df:1b:
                    e3:7d:41:9f:2e:36:bc:7b:83:27:97:78:fd:7e:3b:
                    5e:56:54:f8:bb:48:80:a6:5c:df:0e:6a:b5:46:48:
                    23:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:54:12:E7:8C:0E:65:A0:BE:3C:84:5F:D1:4E:FC:2C:79:1E:3C:04
            X509v3 Authority Key Identifier:
                keyid:4C:FD:B6:32:C8:A3:E9:C8:23:32:3B:2E:59:07:A9:23:8E:6B:85:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/323830343a363630343a3a2f33332d3333203d3e20323639353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6604::/33

    Signature Algorithm: sha256WithRSAEncryption
         15:a3:4c:19:95:6a:0f:63:f1:07:a6:44:15:ae:4d:a3:b5:bd:
         a8:08:37:e1:cd:ed:18:85:05:88:be:29:69:39:d6:42:a5:0b:
         ad:24:4e:62:a7:93:1c:6d:10:95:c8:37:b2:16:63:28:59:d8:
         b1:fc:87:f7:dc:36:14:44:d6:ba:e2:f0:f0:2d:b8:e6:7c:e0:
         4f:5e:d5:57:ff:20:bd:97:a5:cb:1f:c8:9f:fe:2e:07:db:0d:
         13:21:6d:91:2f:83:3b:55:92:64:70:5c:04:6e:77:5c:ea:13:
         52:93:d5:ac:3a:32:fd:0a:c7:ed:5b:33:3b:79:8e:f8:bd:79:
         19:74:3e:fb:33:33:65:2a:b5:66:fd:b1:4b:ce:26:d2:39:f5:
         55:6c:9e:28:ff:52:5d:fa:04:37:3d:d7:cb:47:88:66:5a:37:
         ea:82:dc:f2:ed:fb:8c:2e:0a:58:61:2b:2d:3c:bf:b9:09:8b:
         a8:e7:9c:80:f0:ff:de:3c:f4:43:f3:66:7a:c9:89:f4:e1:d0:
         97:b3:84:06:75:72:be:d7:8d:e9:c3:c3:7a:9f:90:7c:34:e6:
         1d:ad:6a:73:b4:12:52:16:e2:df:6e:0c:2b:49:1e:bd:2e:15:
         f7:94:53:1b:75:d2:d0:ae:36:cb:48:5c:2a:13:10:b4:22:bc:
         19:28:ed:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:59:05 2025 by rpki-client