Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/323830343a346136303a3a2f33322d3438203d3e20323637323336.roa
File:                     323830343a346136303a3a2f33322d3438203d3e20323637323336.roa (raw, json)
Hash identifier:          HXHsYhUdByPYxba36KCh/OEG0vVpZrXEtjG/lzDILwA=
Subject key identifier:   F8:B7:27:F0:CF:03:9C:E5:E1:F6:75:97:96:06:31:97:40:7F:BD:E1
Certificate issuer:       /CN=CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7
Certificate serial:       669A93AC33BD0553A630C5C16B13F9D8F20C4915
Authority key identifier: CC:EF:2D:3E:A5:BD:18:7C:45:EA:6D:3A:8F:AF:71:CD:15:F7:D2:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/323830343a346136303a3a2f33322d3438203d3e20323637323336.roa
Signing time:             Fri 07 Mar 2025 04:40:35 +0000
ROA not before:           Fri 07 Mar 2025 04:35:35 +0000
ROA not after:            Fri 06 Mar 2026 04:40:35 +0000
asID:                     267236
IP address blocks:        2804:4a60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl
                          rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:9a:93:ac:33:bd:05:53:a6:30:c5:c1:6b:13:f9:d8:f2:0c:49:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7
        Validity
            Not Before: Mar  7 04:35:35 2025 GMT
            Not After : Mar  6 04:40:35 2026 GMT
        Subject: CN=F8B727F0CF039CE5E1F6759796063197407FBDE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:56:f8:2c:67:5d:6d:3f:16:69:73:ea:80:42:
                    51:cd:06:3e:c6:fa:07:c3:b8:4f:55:74:f3:1a:83:
                    d0:6a:86:dd:a8:97:c7:d7:1f:5f:9f:f5:ee:36:a2:
                    bd:ac:80:19:4b:08:36:c0:cd:a8:d9:cf:16:b6:e4:
                    a9:a8:32:17:23:f6:f2:93:48:f5:8f:cc:9d:b8:44:
                    e5:4e:cb:39:d2:a6:94:f6:2c:be:10:9b:55:bf:ff:
                    1f:f2:d7:df:57:a4:36:6d:65:83:ae:ef:9a:d3:cf:
                    31:ba:82:d8:7b:15:3e:0d:be:f6:32:63:70:bc:0e:
                    b9:9b:3f:b1:ff:da:8b:f9:6c:a7:63:07:35:d7:6d:
                    3c:87:33:d1:db:09:f2:3c:3b:46:80:84:33:9c:46:
                    c4:b9:71:1c:21:22:7f:c8:b9:1e:25:a7:5e:a0:ca:
                    27:0e:33:0c:27:ba:20:c0:dc:a9:66:8a:c5:90:ce:
                    d3:6b:42:31:40:5e:d1:e9:35:9a:7e:32:c4:e4:d7:
                    ec:dc:97:66:0f:80:eb:e9:74:ae:d6:84:19:31:dd:
                    84:19:68:2f:e4:ad:05:96:39:57:28:20:b6:19:ca:
                    16:47:4e:c5:05:93:ca:df:fb:a5:0f:b6:e7:ee:31:
                    e6:0e:a3:ca:74:3d:eb:a1:77:c6:67:4f:bd:fd:37:
                    0c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B7:27:F0:CF:03:9C:E5:E1:F6:75:97:96:06:31:97:40:7F:BD:E1
            X509v3 Authority Key Identifier:
                keyid:CC:EF:2D:3E:A5:BD:18:7C:45:EA:6D:3A:8F:AF:71:CD:15:F7:D2:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/323830343a346136303a3a2f33322d3438203d3e20323637323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:9f:43:b5:35:36:0f:31:16:bf:04:06:28:00:ef:55:ec:16:
         dc:fd:dc:2e:14:60:0b:2d:ef:e8:ea:93:5c:16:cc:a0:ed:c0:
         7c:23:5b:7a:7e:26:0c:7d:ed:30:a9:aa:e1:1f:9c:d7:78:1e:
         0f:70:d6:84:aa:e6:64:ff:c6:1e:0d:12:c6:c7:aa:ac:94:b9:
         0a:c7:f7:94:24:c9:04:87:c6:57:89:d3:95:91:a6:b4:cd:8f:
         04:b8:84:69:13:6b:99:22:df:26:da:13:d3:5c:15:ac:81:2b:
         67:9a:ad:ea:2b:a3:21:cc:55:17:09:47:36:93:e8:6b:b6:8a:
         06:22:5a:e7:e4:d2:51:57:13:35:ea:65:58:05:be:3a:67:c4:
         c8:45:e4:ee:42:a1:f0:7a:44:82:64:aa:b1:4b:fe:d8:1d:14:
         ff:d9:e2:88:a7:7c:9c:dc:6d:2f:08:03:af:cb:d9:d4:93:9d:
         16:97:a8:19:59:3c:b6:e9:6f:4e:9d:d0:3e:0d:19:db:da:04:
         97:e0:45:d7:e4:f7:0e:a3:87:66:c6:a7:dd:8c:2d:c9:aa:23:
         f1:5f:63:13:80:6d:50:00:6f:ae:99:49:91:5c:c2:d3:ef:d4:
         ce:86:48:2f:4f:f9:e9:99:e8:c9:e4:0c:4d:10:90:87:52:e2:
         63:b7:e3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:11:34 2025 by rpki-client