Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/323830343a373732633a3a2f33332d3333203d3e20323731313630.roa
File:                     323830343a373732633a3a2f33332d3333203d3e20323731313630.roa (raw, json)
Hash identifier:          7qbfjGwinlfawR0X//sZeHGiCnVc4qfkZRjUARdD6XY=
Subject key identifier:   F4:01:5E:10:AA:29:AB:54:49:19:AB:F8:7A:DC:F1:73:F3:82:7D:4D
Certificate issuer:       /CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
Certificate serial:       02AE72A503C418B738CFD4ECD6DA95966AAFFB88
Authority key identifier: D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/323830343a373732633a3a2f33332d3333203d3e20323731313630.roa
Signing time:             Mon 14 Apr 2025 19:04:35 +0000
ROA not before:           Mon 14 Apr 2025 18:59:35 +0000
ROA not after:            Mon 13 Apr 2026 19:04:35 +0000
asID:                     271160
IP address blocks:        2804:772c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl
                          rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 01:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ae:72:a5:03:c4:18:b7:38:cf:d4:ec:d6:da:95:96:6a:af:fb:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
        Validity
            Not Before: Apr 14 18:59:35 2025 GMT
            Not After : Apr 13 19:04:35 2026 GMT
        Subject: CN=F4015E10AA29AB544919ABF87ADCF173F3827D4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ff:48:b0:7c:a1:f5:05:a0:57:b2:e6:2c:3d:
                    5e:f5:f4:d2:2d:22:67:90:33:bb:ef:85:8a:6b:53:
                    3b:3e:b8:d5:70:9d:57:d2:f9:f1:6c:a5:37:4d:f0:
                    02:14:98:dc:57:00:a7:1f:95:92:a5:08:07:e4:2c:
                    26:8e:25:ef:38:bf:70:38:cf:0c:44:5c:43:0c:ef:
                    d9:84:e4:7b:38:8b:92:d6:0f:6e:e8:d8:99:41:5e:
                    47:92:25:d4:d1:c4:73:46:9d:85:49:d1:e9:57:aa:
                    56:89:fe:19:ab:c3:88:27:84:4a:18:57:6b:69:41:
                    81:dc:3a:52:13:0b:6f:a1:b9:3a:a2:99:60:e8:90:
                    70:5d:b9:82:20:14:b4:8d:ed:66:12:1e:34:95:ab:
                    2f:91:8c:29:5c:30:4d:93:4d:2e:82:41:4a:ce:f6:
                    a5:85:0f:59:21:74:44:dd:76:70:d6:1a:96:34:d3:
                    6a:7d:9d:65:ad:9a:3d:c0:d5:fa:cc:c5:fa:14:ff:
                    69:1d:1e:f1:0d:03:ca:47:52:16:9a:ba:9f:9e:5c:
                    bb:10:41:0c:5d:4c:72:3b:81:e0:ab:09:d5:61:65:
                    52:cf:99:35:e1:23:23:4f:0e:e0:36:06:08:7c:80:
                    58:82:02:4f:c2:52:4c:75:5b:16:96:df:e5:ac:22:
                    34:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:01:5E:10:AA:29:AB:54:49:19:AB:F8:7A:DC:F1:73:F3:82:7D:4D
            X509v3 Authority Key Identifier:
                keyid:D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/323830343a373732633a3a2f33332d3333203d3e20323731313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:772c::/33

    Signature Algorithm: sha256WithRSAEncryption
         33:a6:a8:54:5e:93:61:6d:35:98:66:cd:6e:5b:0a:5c:e5:84:
         eb:59:7b:be:5d:99:af:24:bc:67:53:3d:5f:a8:62:04:90:0b:
         22:e8:be:44:e1:80:e5:8e:81:b7:b6:85:02:24:e8:7e:a3:ea:
         2d:b9:26:65:df:6c:c6:c9:29:54:78:c0:a1:cc:59:8a:dc:a6:
         87:43:23:c5:ac:64:ab:9c:80:4f:63:70:d9:22:f5:e5:ac:3c:
         6a:e5:9e:3d:e1:32:a4:e6:75:6a:27:02:ba:fa:8d:ba:11:39:
         d1:a1:e2:0c:2e:c3:e0:84:e9:3f:6e:df:24:b8:0f:08:b0:c9:
         e6:38:f9:ae:68:89:b1:89:89:07:8e:05:03:44:89:14:4d:81:
         0b:48:dc:9a:bb:2f:33:0f:49:bb:4a:43:b8:76:4c:57:c9:6c:
         8c:db:81:6e:02:9b:7a:1f:aa:91:41:51:d9:49:87:5f:dd:fd:
         05:cc:2b:0e:80:87:58:23:8a:19:8c:b3:93:3c:bb:67:f9:10:
         da:68:40:ea:0f:33:3f:38:4c:10:c8:67:fd:24:5c:1c:20:5d:
         e6:5d:f6:3d:c4:3f:b5:c2:28:b9:3e:70:77:e2:36:86:72:27:
         d9:51:b8:80:5e:0f:10:01:b0:8e:96:34:d7:fc:31:f7:48:28:
         91:42:3f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:55:06 2025 by rpki-client