Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a393230303a3a2f34302d3430203d3e20323632353033.roa
File:                     323830343a326265303a393230303a3a2f34302d3430203d3e20323632353033.roa (raw, json)
Hash identifier:          Y1Cwa2pBTZe1/jUMfPcwvFQYbcv9dBJoeF9v0FO8b6k=
Subject key identifier:   82:F5:3E:9A:DD:0B:66:00:4F:72:A9:89:7E:80:CA:E6:C9:D8:4C:86
Certificate issuer:       /CN=910C13ACE16F58034FB65130B4A6FFAA2E062704
Certificate serial:       51020195EA46CB6796B262E915B8A42190CA60F0
Authority key identifier: 91:0C:13:AC:E1:6F:58:03:4F:B6:51:30:B4:A6:FF:AA:2E:06:27:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a393230303a3a2f34302d3430203d3e20323632353033.roa
Signing time:             Tue 01 Apr 2025 15:15:59 +0000
ROA not before:           Tue 01 Apr 2025 15:10:59 +0000
ROA not after:            Tue 31 Mar 2026 15:15:59 +0000
asID:                     262503
IP address blocks:        2804:2be0:9200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/910C13ACE16F58034FB65130B4A6FFAA2E062704.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/910C13ACE16F58034FB65130B4A6FFAA2E062704.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 10:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:02:01:95:ea:46:cb:67:96:b2:62:e9:15:b8:a4:21:90:ca:60:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910C13ACE16F58034FB65130B4A6FFAA2E062704
        Validity
            Not Before: Apr  1 15:10:59 2025 GMT
            Not After : Mar 31 15:15:59 2026 GMT
        Subject: CN=82F53E9ADD0B66004F72A9897E80CAE6C9D84C86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:17:62:f4:ae:5c:a0:db:30:81:61:bc:42:df:
                    19:36:ba:31:13:6d:ad:81:b8:3b:f5:49:cf:ff:fa:
                    4e:a0:66:a3:fd:de:7e:68:30:5e:b2:ac:a9:e4:d1:
                    83:12:58:94:cf:b7:06:f3:d9:33:e4:25:af:14:13:
                    4a:35:ea:52:7e:46:00:01:e9:94:8a:fb:26:0d:ae:
                    49:ba:3a:db:45:35:a5:52:ef:fe:c6:19:8a:a3:24:
                    91:cb:dc:7e:10:3a:51:60:0f:56:b2:36:92:70:9e:
                    fd:51:46:63:86:c2:43:92:2b:0e:1d:7a:79:08:90:
                    68:61:4b:2b:47:00:9f:62:a7:bf:3e:10:f3:fc:64:
                    86:a1:bb:10:7e:06:4b:25:26:9f:c7:cd:b5:f7:b6:
                    00:3d:fd:f1:a0:41:1a:72:99:97:22:4d:bc:79:82:
                    69:9f:34:23:f9:41:6f:6f:54:b5:cb:2b:a3:ea:47:
                    8a:3b:35:74:6b:6b:19:74:92:32:a2:cf:32:2c:bc:
                    84:6a:dd:ea:3a:4a:32:92:7d:06:62:a0:95:ed:2b:
                    e2:65:32:f1:cc:99:dc:de:fb:32:dd:88:14:e2:34:
                    1e:96:83:14:9d:a4:a1:56:43:64:46:03:ca:67:a1:
                    8f:2f:72:39:7f:60:7c:d9:7c:18:50:ec:9b:c0:63:
                    e0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F5:3E:9A:DD:0B:66:00:4F:72:A9:89:7E:80:CA:E6:C9:D8:4C:86
            X509v3 Authority Key Identifier:
                keyid:91:0C:13:AC:E1:6F:58:03:4F:B6:51:30:B4:A6:FF:AA:2E:06:27:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/910C13ACE16F58034FB65130B4A6FFAA2E062704.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a393230303a3a2f34302d3430203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2be0:9200::/40

    Signature Algorithm: sha256WithRSAEncryption
         29:ee:f9:ae:bd:64:a1:80:94:4f:6a:7c:6a:93:0c:5b:bc:a5:
         ad:f2:02:89:69:0e:30:67:91:20:a8:3f:1e:30:41:14:bf:d8:
         2a:3f:ec:89:2a:a7:1f:59:02:a1:b2:b2:89:22:8d:6f:2d:61:
         b0:61:64:2a:5c:72:b5:48:7b:e6:8f:2f:e8:2c:68:0b:d6:b9:
         cf:30:5b:25:fe:3b:21:33:d2:bb:77:7f:a9:07:87:b5:b2:48:
         06:1b:2a:bd:ef:41:73:a4:60:a1:ad:92:41:a1:10:3d:c7:73:
         bb:32:96:a2:20:b7:73:6a:09:bf:e2:59:ba:1b:90:fe:52:77:
         fb:02:ff:f5:09:4d:b1:98:1c:5b:13:66:3d:3a:f0:67:cd:94:
         c6:d9:d6:fc:0a:0d:ad:65:07:98:b1:b8:48:ce:da:8d:d4:7a:
         be:dd:e4:cf:6a:c0:7e:d9:79:39:e7:93:d7:56:2e:6f:15:02:
         dc:c0:69:59:3f:2d:6a:a6:3b:71:4d:d9:8b:82:56:d9:6e:54:
         08:a3:37:34:7d:d2:79:ca:64:c2:09:b5:0b:73:7b:d3:ec:05:
         4f:e5:f5:e7:09:d0:72:77:e4:64:fd:67:6e:f0:14:7e:de:46:
         cb:f7:97:c8:07:f3:fd:28:98:26:ab:05:19:c5:31:20:37:81:
         cb:40:57:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:58:50 2025 by rpki-client