Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gzEn8NVkNzYoPjPySGayx3LQ3rN6RdhRDVKvDEkAQ84/0/323830343a393263633a3a2f33322d313238203d3e20323734373334.roa
File:                     323830343a393263633a3a2f33322d313238203d3e20323734373334.roa (raw, json)
Hash identifier:          22L9n39ASS/36UAbCLY23FLRx2TP2CF5DSZDdDOpozU=
Subject key identifier:   FB:C5:71:F2:1D:AB:64:71:B6:80:6A:63:7C:4C:6A:74:EC:27:85:A8
Certificate issuer:       /CN=006590398F4D26A9E4F3110825291E8032AAF2BB
Certificate serial:       7DB6AB223842232DE6A20C70C8608C8FB9F9ECF6
Authority key identifier: 00:65:90:39:8F:4D:26:A9:E4:F3:11:08:25:29:1E:80:32:AA:F2:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006590398F4D26A9E4F3110825291E8032AAF2BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzEn8NVkNzYoPjPySGayx3LQ3rN6RdhRDVKvDEkAQ84/0/323830343a393263633a3a2f33322d313238203d3e20323734373334.roa
Signing time:             Mon 17 Feb 2025 19:50:42 +0000
ROA not before:           Mon 17 Feb 2025 19:45:42 +0000
ROA not after:            Mon 16 Feb 2026 19:50:42 +0000
asID:                     274734
IP address blocks:        2804:92cc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8gzEn8NVkNzYoPjPySGayx3LQ3rN6RdhRDVKvDEkAQ84/0/006590398F4D26A9E4F3110825291E8032AAF2BB.crl
                          rsync://rpki-repo.registro.br/repo/8gzEn8NVkNzYoPjPySGayx3LQ3rN6RdhRDVKvDEkAQ84/0/006590398F4D26A9E4F3110825291E8032AAF2BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006590398F4D26A9E4F3110825291E8032AAF2BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 14:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b6:ab:22:38:42:23:2d:e6:a2:0c:70:c8:60:8c:8f:b9:f9:ec:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006590398F4D26A9E4F3110825291E8032AAF2BB
        Validity
            Not Before: Feb 17 19:45:42 2025 GMT
            Not After : Feb 16 19:50:42 2026 GMT
        Subject: CN=FBC571F21DAB6471B6806A637C4C6A74EC2785A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:03:90:07:21:c7:f2:3c:37:d2:5a:c5:2b:71:
                    4f:56:dc:88:77:4d:de:3c:07:60:a6:cc:11:65:48:
                    f8:e0:fa:3d:0a:41:f0:11:41:1e:09:2e:17:07:77:
                    a5:4c:1e:64:a2:f1:67:dc:ca:0d:c3:87:b0:39:f8:
                    a0:7d:dc:78:ba:df:0c:f2:e6:43:0c:f4:8e:98:30:
                    73:31:b8:d3:aa:e7:89:f5:ad:f2:da:3e:13:7a:0a:
                    89:a4:ca:3a:16:68:d9:af:4a:1c:7f:07:6f:2a:95:
                    88:b6:4b:d3:08:fe:57:ca:73:f8:13:3a:92:67:0c:
                    8c:25:83:26:c4:cb:7d:a6:04:f0:47:a1:ad:af:f7:
                    00:2f:21:67:ad:af:86:17:4b:20:5d:12:73:85:51:
                    ef:7c:db:02:95:be:56:ca:b2:aa:33:ce:7d:c0:be:
                    7a:30:cc:61:16:ec:9d:e2:79:03:5b:18:c5:e1:5f:
                    66:90:ad:a3:87:af:bd:1b:bb:90:16:71:fb:12:6a:
                    ab:07:36:4d:b8:5e:70:fa:a5:de:03:63:8e:da:2e:
                    50:57:30:0f:f6:44:b5:92:3a:09:4a:8a:f4:19:e2:
                    e5:02:5c:b2:d8:fa:02:d6:b5:d0:f4:d7:a1:1c:5d:
                    31:56:8e:e7:02:4f:cc:b8:77:18:51:a1:bf:7c:cc:
                    56:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C5:71:F2:1D:AB:64:71:B6:80:6A:63:7C:4C:6A:74:EC:27:85:A8
            X509v3 Authority Key Identifier:
                keyid:00:65:90:39:8F:4D:26:A9:E4:F3:11:08:25:29:1E:80:32:AA:F2:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzEn8NVkNzYoPjPySGayx3LQ3rN6RdhRDVKvDEkAQ84/0/006590398F4D26A9E4F3110825291E8032AAF2BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006590398F4D26A9E4F3110825291E8032AAF2BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzEn8NVkNzYoPjPySGayx3LQ3rN6RdhRDVKvDEkAQ84/0/323830343a393263633a3a2f33322d313238203d3e20323734373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:91:d8:42:4e:b5:15:bb:fc:91:dc:eb:28:d5:b2:bc:d8:b2:
         e1:b8:2e:ae:67:3f:47:e4:31:27:84:1b:95:77:64:66:74:cd:
         28:1c:a4:03:a6:21:2e:6a:ac:52:77:91:1a:24:c0:6e:00:13:
         71:f3:d3:d8:70:37:38:e3:d1:ed:39:88:81:b8:e6:99:9f:06:
         c2:5f:3d:14:2a:28:af:60:08:1e:36:ff:39:a1:c9:14:b9:92:
         c5:f6:de:f5:b5:79:e8:45:35:d7:bc:c3:3d:e4:87:58:39:ba:
         b8:fc:3e:fb:fe:a1:46:8b:bc:6b:b1:be:f0:b0:6f:7e:77:2d:
         be:67:29:03:05:62:8c:0e:72:2c:93:06:31:a0:85:10:ba:53:
         54:b0:87:c4:1e:9d:34:4e:8a:d6:1d:2b:9e:f9:5c:fc:2e:da:
         56:02:9e:24:41:ee:0b:84:fd:f5:1d:6d:5b:2e:86:27:4e:94:
         77:5a:3a:db:ce:fc:7d:dd:44:46:9f:41:ad:72:0e:71:33:ac:
         41:88:72:81:6e:7a:fe:8f:87:f2:ec:c3:a8:d9:12:17:64:77:
         e0:0d:cb:e5:01:5e:09:8a:24:05:c7:e6:72:9b:7d:2a:94:b4:
         fd:c5:f4:f4:a7:12:26:b6:33:35:1d:a8:65:27:6a:a7:e4:48:
         ad:3a:d2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:41:36 2025 by rpki-client