Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/323830343a316363383a3a2f33322d3332203d3e203631363735.roa
File:                     323830343a316363383a3a2f33322d3332203d3e203631363735.roa (raw, json)
Hash identifier:          h0sAlKSBteG5e9UspnLUj4TrJvUGL24yn03JgzFpoR0=
Subject key identifier:   16:0B:95:A2:AA:E8:84:64:26:A7:AF:67:6A:30:B8:8A:64:48:E7:CD
Certificate issuer:       /CN=117560A27F42885C52E66148007C2989B0339DAD
Certificate serial:       2E88D9F6B96FDD29B0A5C29A940100FAB5479FBD
Authority key identifier: 11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/323830343a316363383a3a2f33322d3332203d3e203631363735.roa
Signing time:             Sat 25 Jan 2025 16:15:23 +0000
ROA not before:           Sat 25 Jan 2025 16:10:23 +0000
ROA not after:            Sat 24 Jan 2026 16:15:23 +0000
asID:                     61675
IP address blocks:        2804:1cc8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.crl
                          rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 01:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:88:d9:f6:b9:6f:dd:29:b0:a5:c2:9a:94:01:00:fa:b5:47:9f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117560A27F42885C52E66148007C2989B0339DAD
        Validity
            Not Before: Jan 25 16:10:23 2025 GMT
            Not After : Jan 24 16:15:23 2026 GMT
        Subject: CN=160B95A2AAE8846426A7AF676A30B88A6448E7CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b1:d5:bf:05:cf:47:0e:06:79:37:3e:e4:bf:
                    c9:3c:20:e7:39:40:f3:9a:d3:36:50:4a:58:67:59:
                    b5:7c:93:6e:d8:ad:53:26:c0:44:a3:3d:cf:b7:fc:
                    c6:42:4a:d1:49:ee:91:ad:54:c7:ca:94:52:d3:a2:
                    33:c3:8d:c5:71:c5:b3:7b:36:d5:94:25:53:07:3f:
                    9f:0e:5c:0e:b3:ac:da:8b:02:4a:67:e4:38:9d:b0:
                    6a:24:e4:02:40:96:b0:6b:6d:63:f2:93:71:52:4a:
                    8a:8b:a2:ff:07:59:b2:5d:79:16:19:82:a3:6f:f3:
                    22:be:c8:ee:b3:84:99:7c:7b:38:a1:1f:7c:37:e8:
                    86:c6:00:3f:d9:6e:d6:51:59:78:a5:02:14:f6:36:
                    76:b7:8c:7b:49:3e:69:24:3a:09:41:f2:c3:ec:d0:
                    42:72:16:62:76:bd:11:10:f5:98:4d:31:d1:2c:9c:
                    f3:f8:7f:82:3f:0d:4d:bc:29:68:e1:b2:e6:bc:d9:
                    8b:29:be:03:2b:78:c3:b4:c5:9a:f2:3e:0b:e2:0a:
                    fd:21:33:a5:30:3a:28:c9:c5:a4:80:17:fc:02:6c:
                    e2:2a:42:3b:73:a2:21:bb:25:98:3c:f3:ae:e4:33:
                    68:15:3d:30:ca:b8:96:53:71:bf:7f:22:8f:fd:79:
                    28:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0B:95:A2:AA:E8:84:64:26:A7:AF:67:6A:30:B8:8A:64:48:E7:CD
            X509v3 Authority Key Identifier:
                keyid:11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/323830343a316363383a3a2f33322d3332203d3e203631363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:89:30:95:94:6a:6a:e3:78:c6:64:21:e3:b2:a6:65:30:91:
         29:75:ee:b5:c0:a1:cf:ab:34:8e:fa:97:9e:92:1a:a0:63:c5:
         fb:db:9b:29:19:81:f4:c4:87:d5:8d:05:3d:26:9b:8f:51:f6:
         3e:34:15:c4:69:ae:7b:16:f4:d4:e5:14:1b:87:ab:de:49:7b:
         33:29:e9:a5:f5:9e:c1:96:26:38:63:47:c6:73:3b:a9:ab:97:
         57:eb:ee:9b:9a:23:66:23:1f:54:e9:55:d4:1c:6a:e7:c7:65:
         75:a6:b7:39:e7:1d:9a:6f:ff:88:d8:03:8e:96:65:db:48:5c:
         e9:b2:f3:3f:60:0f:a0:6f:c7:3f:be:56:46:0a:34:a6:92:5d:
         dc:af:6a:97:39:1c:8e:be:20:79:36:97:cb:34:85:71:c7:84:
         f8:47:db:65:6b:cf:b6:9c:3a:27:74:b6:67:19:17:c7:75:2e:
         03:78:2e:cf:e0:35:9b:58:e7:c9:2d:0c:fe:d1:0b:90:95:5b:
         71:1a:c9:ec:b7:55:3e:13:a0:c9:37:f4:76:ad:71:f2:71:ae:
         53:cd:a2:71:19:84:a8:c5:6e:aa:09:ce:2e:a3:50:54:eb:a6:
         b6:37:10:8f:97:89:6f:b1:85:d7:1e:88:56:89:cf:5c:b0:30:
         53:99:95:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:30 2025 by rpki-client