Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/323830343a346331633a3a2f33342d3334203d3e20323637333530.roa
File:                     323830343a346331633a3a2f33342d3334203d3e20323637333530.roa (raw, json)
Hash identifier:          Fa9gWEiWLTT6SFYEUo59T3AAta59JjEgc+JwpovaYxw=
Subject key identifier:   04:9E:8F:EF:DB:6D:D0:65:87:35:F8:76:38:22:EE:47:1F:C5:37:49
Certificate issuer:       /CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
Certificate serial:       6AFD9396A912C53B605A953B8A004B1E64183372
Authority key identifier: D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/323830343a346331633a3a2f33342d3334203d3e20323637333530.roa
Signing time:             Sat 06 Jul 2024 01:42:26 +0000
ROA not before:           Sat 06 Jul 2024 01:37:26 +0000
ROA not after:            Sat 05 Jul 2025 01:42:26 +0000
asID:                     267350
IP address blocks:        2804:4c1c::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl
                          rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 04:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fd:93:96:a9:12:c5:3b:60:5a:95:3b:8a:00:4b:1e:64:18:33:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
        Validity
            Not Before: Jul  6 01:37:26 2024 GMT
            Not After : Jul  5 01:42:26 2025 GMT
        Subject: CN=049E8FEFDB6DD0658735F8763822EE471FC53749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d1:b5:fb:73:52:df:fa:5a:1a:db:da:ab:76:
                    87:3d:f4:a3:16:0a:50:1a:c2:4f:85:01:8d:21:6b:
                    78:8e:dd:11:8c:c7:53:3a:46:24:6a:53:56:51:5b:
                    bb:a7:18:68:f2:f1:ed:92:31:53:65:9c:f8:32:55:
                    76:da:51:f8:07:cd:ce:3a:c1:d6:9e:73:8f:a8:fb:
                    24:0e:41:20:ec:d4:be:35:f8:2f:f0:c3:c7:8c:d2:
                    f0:9a:91:8c:27:68:67:04:28:76:81:d0:ef:6e:64:
                    d3:16:a7:92:54:ae:74:14:6c:48:bf:d7:94:53:7b:
                    7f:09:b4:54:fe:ec:e2:e2:26:5b:82:38:af:c8:48:
                    e3:fe:df:7f:93:33:8e:07:cc:a9:62:65:7a:fb:5d:
                    b0:04:65:f1:66:da:98:10:bb:2d:14:66:5d:61:0c:
                    9b:fb:d3:cd:3f:c6:1b:d7:c2:31:87:ce:84:2a:42:
                    40:48:b3:93:84:32:0c:21:cf:75:8a:f9:91:b8:71:
                    6d:6f:96:6d:de:83:79:df:c9:fd:2a:80:6e:8c:5b:
                    9a:d9:6b:90:92:2e:93:6f:b2:7f:1f:07:99:1a:b8:
                    9a:f5:b1:03:d9:32:e3:da:0c:5e:39:41:50:7f:b1:
                    03:48:dd:d3:97:db:cd:4a:8e:0d:33:1b:f8:49:bd:
                    8d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9E:8F:EF:DB:6D:D0:65:87:35:F8:76:38:22:EE:47:1F:C5:37:49
            X509v3 Authority Key Identifier:
                keyid:D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/323830343a346331633a3a2f33342d3334203d3e20323637333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c1c::/34

    Signature Algorithm: sha256WithRSAEncryption
         77:f4:06:17:01:ed:b6:0d:c1:bd:5c:fc:2f:80:76:08:be:fb:
         70:53:4d:94:e1:94:51:2d:b7:c2:97:98:d2:27:ed:93:98:a1:
         37:fd:59:83:e8:25:f0:69:f1:58:c0:52:6f:cc:44:ed:b2:c0:
         45:2e:0f:27:cb:ff:97:35:0a:bf:2d:f0:ff:86:ab:e2:90:94:
         92:ea:0f:ce:2c:a6:d5:8c:1c:44:f7:b6:fb:3c:c6:94:30:26:
         ba:6d:3f:a2:c5:6c:d5:b5:ca:c1:e0:fd:1a:ec:ca:46:6d:64:
         07:c9:bc:5c:2e:df:1e:17:99:33:7d:e0:b7:a4:38:6e:5e:2a:
         88:63:06:8c:4a:e8:15:cd:54:4c:32:6a:4d:a7:fa:f0:7a:86:
         0f:7b:dd:15:91:a3:50:87:fb:ef:10:97:2d:31:4f:6c:26:34:
         78:2c:fc:91:4d:fb:7c:50:0e:fb:0b:0b:d4:fa:23:ea:47:73:
         90:7a:19:20:9a:b4:54:5f:6d:43:0a:5b:3b:c7:46:9e:84:30:
         fd:60:10:e5:59:c6:da:31:08:df:86:34:af:b2:04:53:46:28:
         8e:32:34:b4:70:f1:34:99:ae:64:1a:b1:fb:15:22:ca:42:3f:
         16:fe:7a:96:a6:4d:71:1a:03:30:7f:aa:bc:ae:f6:25:8d:b1:
         3d:b2:f8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:36 2025 by rpki-client