Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/323830343a326230303a3a2f33322d3438203d3e20323635313330.roa
File:                     323830343a326230303a3a2f33322d3438203d3e20323635313330.roa (raw, json)
Hash identifier:          UsWejOOCDjzWAjfZwATeBQ9OCHwks0W/3Hb3XHFxTWk=
Subject key identifier:   D2:FD:09:02:1D:A7:BE:E8:6E:AF:0F:C6:DA:95:5F:0C:5F:5C:62:16
Certificate issuer:       /CN=B4F02299A2EDE5BDF53F6DECAC529C29F6E92881
Certificate serial:       06AFDE13BA86573095FA082A1BA42840E59324D0
Authority key identifier: B4:F0:22:99:A2:ED:E5:BD:F5:3F:6D:EC:AC:52:9C:29:F6:E9:28:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/323830343a326230303a3a2f33322d3438203d3e20323635313330.roa
Signing time:             Thu 06 Mar 2025 05:51:52 +0000
ROA not before:           Thu 06 Mar 2025 05:46:52 +0000
ROA not after:            Thu 05 Mar 2026 05:51:52 +0000
asID:                     265130
IP address blocks:        2804:2b00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.crl
                          rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 04:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:af:de:13:ba:86:57:30:95:fa:08:2a:1b:a4:28:40:e5:93:24:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4F02299A2EDE5BDF53F6DECAC529C29F6E92881
        Validity
            Not Before: Mar  6 05:46:52 2025 GMT
            Not After : Mar  5 05:51:52 2026 GMT
        Subject: CN=D2FD09021DA7BEE86EAF0FC6DA955F0C5F5C6216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:60:50:13:a9:0b:fa:41:b6:32:7d:26:32:5e:
                    af:5c:6a:3b:8d:5c:6d:cb:d4:c6:c4:09:3a:ad:dd:
                    72:74:38:89:16:13:dd:94:28:55:b6:01:80:ff:29:
                    81:30:13:18:9f:cf:5c:41:3d:fd:aa:35:c3:c0:fd:
                    3c:f1:22:20:fa:b7:70:23:e2:ec:16:cb:26:04:5e:
                    78:13:58:5b:45:14:0b:fc:e1:39:4b:6a:6f:15:93:
                    20:b5:a2:8b:0b:40:94:34:19:3c:ae:41:e8:16:db:
                    68:d1:9f:26:d9:fd:e7:63:99:fe:1b:4f:bd:09:8c:
                    5d:bd:ae:6e:fe:db:28:86:6e:89:81:bf:0e:91:54:
                    ab:42:de:5b:66:78:72:20:7b:c4:7f:71:d0:3f:7e:
                    7d:59:1c:17:be:27:41:c8:b5:fd:9e:42:95:d3:66:
                    4a:a9:ad:ab:02:ae:81:3e:e6:f1:34:08:d8:da:02:
                    7a:b9:a1:bc:b0:81:1a:bb:0e:86:b0:be:53:31:35:
                    d9:b7:c2:1d:3b:dc:93:ff:2c:c9:58:a3:1f:bf:22:
                    78:02:c5:f7:cf:72:45:2f:32:01:6a:ba:b9:b7:62:
                    42:54:5d:21:6a:2f:75:31:51:f5:9a:93:db:19:3c:
                    fb:ec:d9:5e:9d:f2:ba:ba:0c:ee:ce:05:35:c1:15:
                    e3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FD:09:02:1D:A7:BE:E8:6E:AF:0F:C6:DA:95:5F:0C:5F:5C:62:16
            X509v3 Authority Key Identifier:
                keyid:B4:F0:22:99:A2:ED:E5:BD:F5:3F:6D:EC:AC:52:9C:29:F6:E9:28:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/323830343a326230303a3a2f33322d3438203d3e20323635313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:f4:15:aa:84:dd:47:79:d9:0f:f7:12:39:ed:d9:6a:d2:d3:
         13:b5:52:63:9c:85:2f:0b:f3:39:47:f0:88:ef:51:d1:5b:13:
         b1:01:d6:3c:6d:07:d6:f8:b1:3a:b6:67:ab:1d:69:3a:e1:44:
         e5:a8:1e:83:8c:50:5e:50:61:e7:27:e4:b2:3f:79:45:e5:52:
         fc:9e:74:c0:1b:31:7b:88:f9:9b:3c:4f:f0:ad:fe:f7:62:6e:
         15:6d:ec:aa:53:7a:4c:ba:cf:a8:af:b4:6b:29:7d:28:b5:50:
         9f:1f:4c:76:a8:23:96:17:3c:97:0a:c6:a9:c4:c7:4c:e0:e7:
         61:91:89:5c:64:f7:74:3f:0e:53:86:98:f7:43:87:6a:cb:4d:
         a9:4f:c5:cd:68:32:5b:6e:a8:23:b6:d1:42:e6:35:ed:8a:59:
         f2:76:31:6e:0d:10:20:37:5c:a5:3a:4f:2d:dc:d5:0e:4a:75:
         f9:1f:9f:24:6c:e0:03:84:df:9b:7a:be:59:e4:52:57:e8:fd:
         ca:b0:aa:8d:ae:33:ce:90:08:b0:d6:36:7e:51:68:c7:c4:c1:
         59:e7:12:c0:4e:47:df:44:51:cc:01:79:62:cf:4b:fa:77:d4:
         77:69:cb:2e:fe:a5:02:ac:f3:4a:96:19:cb:a6:43:3f:f4:ca:
         06:88:10:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 18:44:04 2025 by rpki-client