Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/323830343a343763633a3a2f33322d313238203d3e20323637303737.roa
File:                     323830343a343763633a3a2f33322d313238203d3e20323637303737.roa (raw, json)
Hash identifier:          dkpJZLKLeBytps3Up49qq07UK1hz89fSi2OnQGUwLpw=
Subject key identifier:   0B:80:1A:F2:1C:D7:06:77:83:BA:B1:1B:B4:A4:45:DB:B5:14:7B:C8
Certificate issuer:       /CN=4800594127A75EA9390E9268E09C074EF25FE80E
Certificate serial:       7A6136E07A0B73E979F9AD8E10D773375150B597
Authority key identifier: 48:00:59:41:27:A7:5E:A9:39:0E:92:68:E0:9C:07:4E:F2:5F:E8:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4800594127A75EA9390E9268E09C074EF25FE80E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/323830343a343763633a3a2f33322d313238203d3e20323637303737.roa
Signing time:             Thu 15 May 2025 09:48:58 +0000
ROA not before:           Thu 15 May 2025 09:43:58 +0000
ROA not after:            Thu 14 May 2026 09:48:58 +0000
asID:                     267077
IP address blocks:        2804:47cc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/4800594127A75EA9390E9268E09C074EF25FE80E.crl
                          rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/4800594127A75EA9390E9268E09C074EF25FE80E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4800594127A75EA9390E9268E09C074EF25FE80E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 18:27:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:61:36:e0:7a:0b:73:e9:79:f9:ad:8e:10:d7:73:37:51:50:b5:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4800594127A75EA9390E9268E09C074EF25FE80E
        Validity
            Not Before: May 15 09:43:58 2025 GMT
            Not After : May 14 09:48:58 2026 GMT
        Subject: CN=0B801AF21CD7067783BAB11BB4A445DBB5147BC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e1:37:0f:f0:26:2d:75:08:d5:3f:de:bb:94:
                    3c:65:ee:f4:93:6d:48:34:75:b2:c5:ad:ae:2f:60:
                    01:4d:50:8b:d4:5f:d9:f1:ce:a3:be:d5:d6:49:37:
                    79:51:9c:0c:df:94:7a:74:28:55:78:39:71:ba:e7:
                    3e:e0:c6:ee:f0:96:6b:10:2c:8c:d9:38:71:8f:4e:
                    d2:33:36:6b:31:3f:9f:3f:2b:05:57:3d:4e:4d:a3:
                    fa:27:bd:c0:0b:a9:14:20:4a:fd:05:eb:f9:68:da:
                    f3:66:86:ae:80:1f:bc:6e:8a:8d:a7:7a:ba:2e:bf:
                    64:56:bb:6d:d9:ad:b7:48:c8:7e:cf:f4:02:c5:e1:
                    9c:b9:7e:c9:0c:36:68:a4:be:63:84:7a:75:26:53:
                    e8:98:a0:bc:9c:8c:77:15:90:40:6f:83:5d:99:25:
                    d1:9c:19:40:3f:fa:f3:bc:c4:76:be:9d:c1:16:17:
                    31:77:20:d0:ab:9e:c5:0b:de:40:21:e1:73:01:84:
                    67:18:c3:46:29:19:00:90:5b:b3:ed:45:e4:e9:b1:
                    88:f2:ad:41:4d:26:a3:ca:4b:85:d0:14:b3:c5:0e:
                    ac:26:81:6c:22:e6:e6:2e:14:73:60:d0:a0:c7:fe:
                    d4:94:41:1c:a9:4b:82:a1:50:a4:32:5d:85:06:bb:
                    f6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:80:1A:F2:1C:D7:06:77:83:BA:B1:1B:B4:A4:45:DB:B5:14:7B:C8
            X509v3 Authority Key Identifier:
                keyid:48:00:59:41:27:A7:5E:A9:39:0E:92:68:E0:9C:07:4E:F2:5F:E8:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/4800594127A75EA9390E9268E09C074EF25FE80E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4800594127A75EA9390E9268E09C074EF25FE80E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/323830343a343763633a3a2f33322d313238203d3e20323637303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:e5:0e:ab:16:65:62:bd:01:9e:d1:50:b5:25:d2:42:c0:12:
         a0:f3:45:ff:0b:98:0d:4c:b8:f7:42:22:0b:83:70:96:2f:e3:
         77:e8:24:fd:15:a4:3e:f3:e4:78:f8:c3:a2:c8:35:2a:e3:3f:
         e5:da:fc:9c:b3:ca:c7:9c:59:a1:5e:66:a4:fb:6b:29:71:c2:
         48:92:03:28:71:54:0e:c6:3c:a8:1e:e4:79:73:40:30:11:9c:
         57:87:89:d3:ed:04:de:60:a7:cd:5e:75:cf:fa:7b:0a:8e:87:
         81:8a:29:2c:91:a3:90:81:18:d4:3b:41:dc:5b:c8:10:4b:bc:
         09:0f:82:17:40:34:eb:98:94:77:5f:d0:a7:ef:3f:4b:02:61:
         0d:b6:e1:e1:a4:8e:a3:9f:a0:bc:ed:a6:98:32:0e:22:fd:9c:
         21:f3:80:0a:c9:5b:ce:96:a7:3c:e8:16:45:94:9c:55:d1:29:
         67:ff:45:cb:21:39:1c:6f:09:71:8b:b1:1e:a1:75:c3:72:4e:
         a0:74:06:87:9b:45:38:bb:9f:7a:2a:3d:4b:ff:2c:62:91:fd:
         4e:c9:76:74:b1:72:04:53:83:4d:e3:5c:7c:89:16:b2:a1:2c:
         1e:60:0d:7e:c5:96:e0:c9:ed:cf:d2:56:ce:93:5d:6a:4d:e8:
         b8:47:34:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 02:17:51 2025 by rpki-client