Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e20323633303039.roa
File:                     323830343a6636633a3a2f33322d3438203d3e20323633303039.roa (raw, json)
Hash identifier:          7Dpp1J1E+Mv8pAQQi8IhxFpstsBWSzxz11HNCcDIioY=
Subject key identifier:   9E:FE:76:39:C3:90:A3:B0:16:53:F2:92:17:5F:32:13:6A:02:A7:CF
Certificate issuer:       /CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
Certificate serial:       4E4D5C31C6F86424DC357AC3E2E34DA5CE3B11A7
Authority key identifier: 1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e20323633303039.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     263009
IP address blocks:        2804:f6c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:4d:5c:31:c6:f8:64:24:dc:35:7a:c3:e2:e3:4d:a5:ce:3b:11:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:60:bd:83:11:a6:f6:c2:d2:da:f8:cf:ef:25:
                    7d:2d:ac:3c:62:c7:fa:22:d9:b4:18:ca:aa:f7:e5:
                    ca:dc:c3:dd:9a:42:85:95:d0:fa:fe:0e:14:2b:5e:
                    a0:b9:08:b2:5e:a9:6c:8b:62:9d:b6:96:a3:59:5e:
                    7a:18:10:99:48:75:b1:f6:28:ab:09:c9:82:b8:21:
                    e8:0c:93:97:80:f7:25:c4:51:46:de:8a:c9:d7:d2:
                    b6:67:ef:d7:e7:7c:83:49:d1:3c:ed:f3:0c:bd:78:
                    50:14:9e:e2:56:a9:c2:11:8d:12:20:e1:36:99:42:
                    9d:8e:15:14:d7:24:f1:3f:61:af:11:95:a0:17:d1:
                    09:2d:33:88:3e:ba:6e:32:5f:4f:64:ea:e6:ac:df:
                    0f:da:e4:a8:e8:73:9d:e2:43:9a:b2:1c:6a:47:5c:
                    d6:d2:b6:99:be:2a:72:77:7c:ba:7d:8c:48:fc:cb:
                    2c:68:34:ad:ec:17:e1:c3:ef:29:70:60:46:b2:d2:
                    28:a3:e5:bb:e8:af:b1:61:55:1f:12:63:d5:a7:9d:
                    41:41:50:46:cb:13:9a:77:fb:91:1c:5e:c8:45:0a:
                    ab:24:50:2a:a1:24:ec:a4:90:17:e5:d2:95:fe:5d:
                    e6:02:b0:63:19:89:27:10:46:1c:d2:38:07:f2:5d:
                    d6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FE:76:39:C3:90:A3:B0:16:53:F2:92:17:5F:32:13:6A:02:A7:CF
            X509v3 Authority Key Identifier:
                keyid:1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e20323633303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:09:be:be:4f:d5:7d:59:1c:9d:5e:ef:0a:dc:b1:10:4b:16:
         b9:b9:50:d0:a7:e0:bb:5a:ff:84:9b:bd:f0:d8:de:1c:d1:74:
         e9:1d:5e:d3:d9:52:3b:02:2d:73:a4:bf:de:a8:8f:29:0d:bc:
         93:dc:67:a5:7c:d9:65:f3:0a:44:7e:a0:33:25:ef:19:d2:b7:
         8b:25:7d:d6:6b:6e:cb:1c:af:2e:70:51:f6:e0:7e:d2:0e:74:
         c9:ba:c3:a4:df:a0:da:94:73:5a:50:99:44:c8:59:a5:71:db:
         c4:fd:72:17:99:ca:4d:30:50:95:34:a7:e7:07:d8:0f:69:87:
         2a:00:8d:c2:13:a5:14:be:a2:f5:42:a2:f5:79:4f:e3:5d:29:
         2c:ba:87:c0:4e:21:7c:01:27:72:41:e8:25:db:26:c3:d8:04:
         fc:c8:19:d1:8b:c6:51:c0:d7:46:9c:33:cd:96:c5:49:2a:55:
         00:1d:91:9c:da:0a:31:ef:d1:88:32:e4:a0:17:7a:6e:b4:a3:
         22:04:ca:33:2c:5d:da:86:fa:5d:fa:0b:b7:a3:53:7e:33:15:
         1b:dd:0a:db:3a:fa:7a:93:2b:fc:b1:ea:a8:36:49:88:48:9c:
         9e:87:5f:74:5f:53:76:f6:56:4f:c9:ab:e4:a1:8f:2c:19:7b:
         b8:36:4f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:31 2025 by rpki-client