Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/323830343a383034303a3a2f33322d3332203d3e20323731373339.roa
File:                     323830343a383034303a3a2f33322d3332203d3e20323731373339.roa (raw, json)
Hash identifier:          k8/Tw+SgoiL84ZsrYLWHWBEWIwVDj1v9BVLZaSH4bik=
Subject key identifier:   80:B0:CA:03:63:49:CB:E1:9E:8F:D3:7F:81:54:70:7E:4A:32:F9:E1
Certificate issuer:       /CN=484CAFED17D02C4555E5D45869F30ECAA7E1E5E3
Certificate serial:       57DA081FC67823BE5BBDF002CA23A0B1CFC5F3E5
Authority key identifier: 48:4C:AF:ED:17:D0:2C:45:55:E5:D4:58:69:F3:0E:CA:A7:E1:E5:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/323830343a383034303a3a2f33322d3332203d3e20323731373339.roa
Signing time:             Thu 06 Mar 2025 09:33:13 +0000
ROA not before:           Thu 06 Mar 2025 09:28:13 +0000
ROA not after:            Thu 05 Mar 2026 09:33:13 +0000
asID:                     271739
IP address blocks:        2804:8040::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl
                          rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 06:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:da:08:1f:c6:78:23:be:5b:bd:f0:02:ca:23:a0:b1:cf:c5:f3:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484CAFED17D02C4555E5D45869F30ECAA7E1E5E3
        Validity
            Not Before: Mar  6 09:28:13 2025 GMT
            Not After : Mar  5 09:33:13 2026 GMT
        Subject: CN=80B0CA036349CBE19E8FD37F8154707E4A32F9E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a9:cb:b2:f2:e8:20:26:65:5b:ce:ea:2e:4e:
                    92:41:71:f6:2e:9f:82:a6:20:cc:9a:44:6c:9e:1b:
                    67:ba:16:72:85:c7:15:25:b1:c7:6c:bf:5c:4b:89:
                    8e:1a:a9:c9:1f:8e:63:5c:0f:42:eb:17:b1:b9:4b:
                    19:e8:51:de:aa:80:72:f9:05:c1:fe:1d:40:75:61:
                    fa:04:80:ab:19:d5:79:49:34:44:3b:e3:93:5f:17:
                    6c:aa:08:25:f5:9f:af:f7:51:b1:a3:d3:5f:07:1e:
                    c7:c6:fc:ac:d6:89:60:63:00:94:b2:aa:75:af:c3:
                    d8:d4:17:59:9e:27:ab:63:62:44:2f:43:77:74:54:
                    14:72:8a:2d:40:7f:2e:23:26:73:3e:db:54:bb:99:
                    ec:c5:cf:c7:7a:6c:a8:ff:d6:56:ee:de:77:ac:9f:
                    9c:d5:68:d9:dc:cc:91:08:ac:e7:d3:5a:90:a3:e3:
                    99:35:41:e4:d7:bb:8c:bd:bb:58:f1:8e:65:45:f9:
                    07:9b:bf:0a:ca:56:cb:24:fe:c0:89:0f:82:15:cb:
                    7b:30:f7:64:78:19:01:c5:67:a6:94:12:f9:b8:d4:
                    47:f8:98:aa:dc:a3:cb:91:57:f0:4c:15:52:60:2b:
                    11:39:01:50:cc:4a:0a:8d:f7:03:14:0f:eb:7f:8d:
                    a1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B0:CA:03:63:49:CB:E1:9E:8F:D3:7F:81:54:70:7E:4A:32:F9:E1
            X509v3 Authority Key Identifier:
                keyid:48:4C:AF:ED:17:D0:2C:45:55:E5:D4:58:69:F3:0E:CA:A7:E1:E5:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/323830343a383034303a3a2f33322d3332203d3e20323731373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8040::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:58:74:ff:ae:de:b3:ff:be:23:02:06:ed:76:14:6f:49:8f:
         5d:49:cf:12:d6:84:b6:05:65:dd:b0:3b:54:a4:62:c5:b2:cf:
         a6:bf:d2:18:61:1d:0c:ef:c3:b1:6d:b5:e0:26:33:e7:16:d5:
         43:d8:23:67:41:30:25:e9:ff:38:97:1c:0d:4d:cb:0a:8f:1d:
         8f:a6:1e:a0:ed:69:ea:2e:7a:10:85:1d:f4:52:cd:95:3a:5d:
         ca:de:67:d7:d9:ad:03:8c:76:9a:43:a1:05:61:58:d2:02:7c:
         60:8f:e7:5d:eb:d8:3a:c5:52:fc:57:b9:d7:42:bc:89:82:76:
         b4:fc:3f:2f:3d:6f:16:0d:11:50:79:27:1f:2e:87:b1:c7:e0:
         dc:a4:f1:c1:b8:d4:9d:0e:c9:b3:95:a6:4b:52:1b:9e:70:c8:
         4a:4e:b5:84:33:67:e1:ca:bb:25:ac:b6:0d:39:15:25:a6:e1:
         97:3a:52:23:d7:66:03:b2:f8:a0:66:96:00:5e:8c:06:e0:29:
         bf:4a:58:b1:86:ed:60:3b:7e:c5:47:a3:d3:59:1b:92:ef:a3:
         2c:c0:c1:70:49:ce:09:45:68:14:c2:4f:54:7f:8e:64:78:b2:
         f6:cc:65:62:d7:11:64:b7:0f:59:44:8e:84:dc:09:23:b4:77:
         ab:a8:b4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:05:44 2025 by rpki-client