Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a3a2f33332d3333203d3e20323635343931.roa
File:                     323830343a333466343a3a2f33332d3333203d3e20323635343931.roa (raw, json)
Hash identifier:          SRxvhr2xcmNoIC59sS+mUASuRE4j/0w17hB70qAVYO0=
Subject key identifier:   48:D6:4D:61:9B:FA:B0:8D:0F:9B:F8:F8:A2:DD:DD:E2:54:C8:C1:4B
Certificate issuer:       /CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46
Certificate serial:       6DAB719978253894F268C4A0FD4D73544B627678
Authority key identifier: 96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a3a2f33332d3333203d3e20323635343931.roa
Signing time:             Tue 25 Feb 2025 19:17:27 +0000
ROA not before:           Tue 25 Feb 2025 19:12:27 +0000
ROA not after:            Tue 24 Feb 2026 19:17:27 +0000
asID:                     265491
IP address blocks:        2804:34f4::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.crl
                          rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 12:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ab:71:99:78:25:38:94:f2:68:c4:a0:fd:4d:73:54:4b:62:76:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46
        Validity
            Not Before: Feb 25 19:12:27 2025 GMT
            Not After : Feb 24 19:17:27 2026 GMT
        Subject: CN=48D64D619BFAB08D0F9BF8F8A2DDDDE254C8C14B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:30:87:5c:de:53:f4:87:a3:00:2d:5f:6d:b7:
                    ce:e5:6c:a2:1d:be:f0:e0:08:6d:80:d6:4b:e1:d1:
                    23:b6:35:70:c6:4f:a1:9e:c8:f4:1b:b7:94:af:45:
                    0e:68:c1:9b:bb:36:a9:82:2a:1f:c1:fc:10:59:32:
                    04:3e:d3:69:59:08:01:6c:4d:36:bd:d8:c7:ec:0e:
                    1b:3f:96:28:19:8b:dd:29:97:71:ea:bb:16:cf:d9:
                    f0:72:7f:3b:86:6e:76:c3:05:40:19:39:e1:91:b0:
                    97:ca:81:37:f6:8b:75:e0:78:c8:9d:89:c0:25:2b:
                    db:c9:68:f9:4a:97:94:2f:95:ab:a8:2d:5b:f0:4c:
                    93:90:5d:50:fe:0d:e0:65:02:f7:9d:38:76:c2:00:
                    16:6d:47:56:4a:fd:d7:6d:c0:cb:e3:92:c1:9e:61:
                    50:db:31:5e:c5:42:18:90:88:5a:b5:73:3f:60:21:
                    11:48:a3:f9:80:d5:14:4e:96:63:95:b6:3b:ec:82:
                    5f:cc:b5:5a:6d:03:bb:76:c8:fc:a1:e2:21:88:e0:
                    1a:f7:83:8d:ba:cf:cb:4a:8d:f9:cf:55:06:d0:20:
                    22:74:6c:65:5f:27:90:54:cd:41:dd:a9:b5:2c:86:
                    ab:00:22:6c:7e:a0:ce:a0:a0:5e:11:35:a7:15:8e:
                    a8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D6:4D:61:9B:FA:B0:8D:0F:9B:F8:F8:A2:DD:DD:E2:54:C8:C1:4B
            X509v3 Authority Key Identifier:
                keyid:96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a3a2f33332d3333203d3e20323635343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34f4::/33

    Signature Algorithm: sha256WithRSAEncryption
         70:be:08:5d:ea:3a:55:13:cb:78:52:89:08:d2:22:63:ba:9b:
         5c:b9:b3:46:31:3a:a9:48:d6:02:3a:bc:b3:c7:90:f3:57:47:
         3b:5e:b4:d2:68:7a:d4:51:53:29:af:ed:fc:f2:9a:d7:9b:6a:
         68:b9:f0:53:4f:98:b0:c1:92:08:bb:f8:be:a1:04:9c:62:19:
         d6:bb:5a:7f:ab:d7:dd:6c:79:7b:71:fa:56:23:b6:9c:09:77:
         aa:37:2c:f6:97:f2:b1:69:ee:21:94:8c:eb:f4:93:6f:75:7e:
         e1:3c:de:ad:7e:b9:5c:c1:1a:8f:39:71:39:26:21:3c:98:8f:
         29:c0:27:89:a5:5f:e9:9a:a7:9f:22:8d:3c:5f:8a:de:ab:ca:
         64:83:54:40:94:f5:f6:be:64:e0:36:70:19:17:3f:43:48:cb:
         aa:b8:91:2e:94:13:02:41:0b:19:33:bd:73:6b:89:db:15:66:
         03:b6:7f:04:4a:8c:77:51:4e:fd:e3:b3:b9:af:44:21:4d:73:
         3f:01:eb:bf:86:f4:20:a7:25:22:7c:41:86:9d:b9:7e:4b:09:
         47:a9:d7:a5:9c:8f:fb:00:0c:8b:af:bb:aa:d8:19:be:6d:ff:
         fa:47:af:71:57:ae:18:31:e0:b0:c3:a7:34:48:2e:d3:c1:2a:
         aa:4f:71:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:39:28 2025 by rpki-client