Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e203238323130.roa
File:                     323830343a6636633a3a2f33322d3438203d3e203238323130.roa (raw, json)
Hash identifier:          GY3SADhX4Yy+DQL3TvQqP6F9yubDL13SzVoXTUatqv0=
Subject key identifier:   E7:1A:8E:E9:0F:E7:5F:CB:11:D0:0C:55:99:C3:04:E7:6B:F0:3D:0A
Certificate issuer:       /CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
Certificate serial:       5CDCF49544B49F9C06BD4EE79E4A62EF767D0843
Authority key identifier: 1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e203238323130.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     28210
IP address blocks:        2804:f6c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:dc:f4:95:44:b4:9f:9c:06:bd:4e:e7:9e:4a:62:ef:76:7d:08:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0e:e2:51:0a:ff:6e:7d:ed:8d:50:40:7d:1c:
                    f1:01:75:6e:c9:59:fc:a5:a7:e4:5e:2b:75:19:aa:
                    79:1c:2a:21:46:09:db:d2:22:48:0e:87:b9:66:53:
                    95:1b:9a:1d:b4:5a:17:4d:25:d6:96:13:64:46:d0:
                    c7:14:76:b7:3d:24:57:da:e1:aa:0b:bb:11:b9:a8:
                    ec:55:76:51:91:da:d5:35:58:13:6b:82:79:b8:af:
                    3a:8e:0a:85:46:f0:36:09:0a:53:de:fe:5e:dd:35:
                    25:aa:a8:0e:0b:ef:a5:e3:06:48:13:4b:b0:fa:39:
                    bb:2c:f1:21:b7:e0:99:77:fa:fb:bf:af:07:ef:65:
                    a7:5f:36:dd:dc:5d:4c:3c:be:fb:02:4b:5c:c0:19:
                    9f:ac:f1:46:e9:20:10:01:ff:cf:8d:c9:87:4d:f2:
                    e8:54:69:d3:29:24:15:c5:ac:4f:5c:48:fc:d1:6e:
                    13:e6:60:c7:78:73:37:d9:ca:c8:c1:aa:22:9f:42:
                    af:4e:f0:1b:bf:ec:08:6e:0e:87:ea:86:a5:67:ef:
                    0c:40:ff:03:94:a7:56:79:ca:11:5a:e4:f1:99:a2:
                    dc:89:c2:bc:c5:f6:f7:ef:bf:63:ee:5f:62:a3:6d:
                    13:03:63:9d:ab:15:3b:f1:9b:38:e3:16:73:51:1a:
                    e8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1A:8E:E9:0F:E7:5F:CB:11:D0:0C:55:99:C3:04:E7:6B:F0:3D:0A
            X509v3 Authority Key Identifier:
                keyid:1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:54:84:3c:7b:fb:f3:54:8e:a6:40:8e:b1:b2:ce:e2:cd:72:
         a1:1a:4b:17:5a:4a:21:51:30:64:b4:be:9e:4a:33:b5:97:21:
         38:88:eb:11:94:18:7f:2a:d1:82:92:90:e8:fa:80:1b:d9:94:
         e7:2b:2d:22:3c:89:db:b9:17:aa:ce:09:99:7d:57:76:b3:79:
         e6:ff:fb:36:d8:68:21:b5:49:0d:ec:c2:8f:de:20:54:ac:a2:
         71:52:f1:0b:37:12:39:3d:38:38:4b:07:ab:54:7a:fd:77:7f:
         a1:98:53:86:31:9a:d6:09:5f:9d:89:10:03:d4:fc:e9:bb:26:
         8c:87:20:e7:d5:cb:07:16:23:c3:6e:32:c9:4d:1a:d0:4f:c1:
         7a:a3:1e:06:4e:c9:a8:63:bb:c7:e8:eb:86:6f:04:8d:8a:b3:
         80:25:28:f6:10:b4:73:0e:07:18:47:d1:e1:a6:a5:a7:bc:c6:
         59:b2:0a:94:24:50:b1:b2:75:8c:f8:f4:1c:e7:7e:37:c4:c3:
         11:95:86:c4:4c:46:9a:ec:10:79:a7:ec:c5:24:98:b9:d6:57:
         67:7a:45:03:bc:c9:93:38:94:a9:4e:70:f6:03:09:40:09:40:
         f4:2a:67:06:8c:ba:63:1c:2e:09:9e:3c:ab:0a:ba:68:e9:33:
         4a:1c:46:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:04:42 2025 by rpki-client