Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/323830343a343031343a3a2f33322d313238203d3e20323635393333.roa
File:                     323830343a343031343a3a2f33322d313238203d3e20323635393333.roa (raw, json)
Hash identifier:          s5G6Z9jrVoevflU84bZ+yzQEF2Gyexpuwo5a+N4Yd7w=
Subject key identifier:   28:86:59:B0:B5:B2:59:02:49:5D:E6:B3:88:21:F9:53:45:96:5C:5C
Certificate issuer:       /CN=11CAB655737FE08C031052B869B67F7F82CCE9CC
Certificate serial:       48A205C7F7C54978688B6E298CFDD1CE37DF0579
Authority key identifier: 11:CA:B6:55:73:7F:E0:8C:03:10:52:B8:69:B6:7F:7F:82:CC:E9:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/323830343a343031343a3a2f33322d313238203d3e20323635393333.roa
Signing time:             Wed 22 Jan 2025 14:57:08 +0000
ROA not before:           Wed 22 Jan 2025 14:52:08 +0000
ROA not after:            Wed 21 Jan 2026 14:57:08 +0000
asID:                     265933
IP address blocks:        2804:4014::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.crl
                          rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Mar 2025 02:47:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a2:05:c7:f7:c5:49:78:68:8b:6e:29:8c:fd:d1:ce:37:df:05:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11CAB655737FE08C031052B869B67F7F82CCE9CC
        Validity
            Not Before: Jan 22 14:52:08 2025 GMT
            Not After : Jan 21 14:57:08 2026 GMT
        Subject: CN=288659B0B5B25902495DE6B38821F95345965C5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5e:62:8b:a4:ab:7c:e0:e5:aa:46:da:37:1d:
                    e4:bc:65:14:90:4e:14:4a:5b:53:9e:c8:6c:60:73:
                    9c:79:35:4d:12:89:70:dc:48:2a:ca:3f:6e:5d:28:
                    31:b4:68:55:2a:69:89:06:5b:2c:07:b2:ce:c6:13:
                    af:4a:5f:f2:bc:a9:b5:5f:d3:bd:2f:6e:7b:19:2c:
                    70:dc:69:58:d7:50:85:92:96:1d:6e:df:18:ea:60:
                    4b:e3:03:10:1a:8c:d9:82:39:4e:2e:62:4d:c2:33:
                    21:70:08:fe:0d:c9:e2:d4:9d:43:1f:bb:b4:5b:39:
                    eb:30:66:33:97:30:9c:7b:6f:b2:3f:da:b2:f9:7d:
                    3d:8e:ed:97:2d:df:9b:ba:54:b0:9a:ef:d7:98:e2:
                    02:16:b0:11:9f:d5:5b:74:a6:27:1f:04:cd:0b:ff:
                    77:4a:ea:e5:22:e5:a0:ca:c2:67:df:e5:17:04:87:
                    48:a9:51:8d:c2:dc:4c:c3:52:f9:c7:7e:0c:95:d1:
                    34:fa:db:04:08:d7:99:5a:e7:bc:da:28:3e:6f:dd:
                    28:15:e1:ad:a2:e3:aa:70:d9:02:fc:de:b2:f8:f7:
                    36:d3:7c:b8:5e:b5:4e:93:f8:4c:8f:bc:09:ab:04:
                    ba:a1:1e:b4:1a:0d:37:da:58:ba:e3:08:51:be:59:
                    b7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:86:59:B0:B5:B2:59:02:49:5D:E6:B3:88:21:F9:53:45:96:5C:5C
            X509v3 Authority Key Identifier:
                keyid:11:CA:B6:55:73:7F:E0:8C:03:10:52:B8:69:B6:7F:7F:82:CC:E9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/323830343a343031343a3a2f33322d313238203d3e20323635393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4014::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:46:d6:7a:4c:7e:dd:7e:bd:24:ae:e1:4a:b1:d5:65:b4:75:
         d0:a8:e3:05:a8:a9:aa:9e:43:8b:b9:ee:34:f5:2e:aa:2b:41:
         4c:53:a9:5a:a6:00:a4:25:fd:e7:08:33:af:0e:70:66:a9:87:
         72:a2:49:05:a6:bc:89:de:30:eb:5f:c5:70:6e:73:b8:fd:8c:
         86:a6:28:61:44:ec:fd:45:6f:b1:ad:ab:c2:b6:20:55:48:c1:
         95:2e:4a:56:32:73:c1:9d:aa:21:42:b9:68:9c:5b:0e:c8:88:
         3a:55:06:5f:d6:64:5f:07:fd:b5:b3:23:70:1c:82:81:92:91:
         65:65:86:dc:ac:91:dc:e8:d4:78:3e:f0:8d:a0:be:42:3f:7a:
         a1:66:d5:fb:dd:1c:4d:46:1d:90:4e:70:36:9b:c3:8f:92:b8:
         17:da:31:4f:46:1d:d8:e7:95:35:da:26:d8:b1:04:e0:c3:cc:
         e7:5f:41:aa:01:22:60:33:d9:99:c2:83:de:c1:ef:fb:41:7b:
         bb:77:3d:1d:3a:07:5d:7f:19:0e:9d:dd:60:bd:23:05:ef:80:
         34:19:46:9e:13:d2:6e:23:f4:ac:b7:60:63:e9:b0:a8:9b:ff:
         1c:e8:9f:14:30:d8:d0:9a:7c:15:4d:9e:73:0a:70:c5:98:de:
         19:80:de:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:39:02 2025 by rpki-client