Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a633030303a3a2f33342d3334203d3e20323733353536.roa
File:                     323830343a393038303a633030303a3a2f33342d3334203d3e20323733353536.roa (raw, json)
Hash identifier:          lJut7sXxWBRa9HIYr+NJVZsIUQUIPmuWbX7RypmHs9M=
Subject key identifier:   B0:32:AC:66:33:2F:14:57:8C:08:49:6C:48:54:1A:57:75:14:09:A9
Certificate issuer:       /CN=949059A6CFC6D8D4784BD4699906DA66C2271CD9
Certificate serial:       16CD42E13A22EF4CEA2DF1A79BBB68DC0F94E538
Authority key identifier: 94:90:59:A6:CF:C6:D8:D4:78:4B:D4:69:99:06:DA:66:C2:27:1C:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a633030303a3a2f33342d3334203d3e20323733353536.roa
Signing time:             Sun 22 Dec 2024 12:39:20 +0000
ROA not before:           Sun 22 Dec 2024 12:34:20 +0000
ROA not after:            Sun 21 Dec 2025 12:39:20 +0000
asID:                     273556
IP address blocks:        2804:9080:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.crl
                          rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 02:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:cd:42:e1:3a:22:ef:4c:ea:2d:f1:a7:9b:bb:68:dc:0f:94:e5:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949059A6CFC6D8D4784BD4699906DA66C2271CD9
        Validity
            Not Before: Dec 22 12:34:20 2024 GMT
            Not After : Dec 21 12:39:20 2025 GMT
        Subject: CN=B032AC66332F14578C08496C48541A57751409A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cd:25:73:fd:1e:55:9b:db:c6:81:c5:4c:4c:
                    a7:67:14:46:c0:3a:9d:e3:f6:76:c8:91:fe:6f:c0:
                    7d:6f:2d:a7:55:ce:85:e4:58:66:8e:6d:9d:58:01:
                    e9:28:89:d4:71:36:fb:6b:8e:00:19:7d:3e:07:8b:
                    2a:c1:27:31:c4:fb:2d:6b:ea:fe:ec:de:3c:6e:68:
                    52:b2:ca:02:0e:94:5c:85:43:dd:bc:c3:8c:d6:df:
                    6c:f4:07:3f:86:a4:27:bc:9b:28:ff:32:4f:6c:46:
                    ba:91:6b:26:ab:5a:b2:63:69:45:3e:53:11:b4:d7:
                    39:b3:7d:42:39:1d:82:c9:bd:27:40:c7:34:d4:75:
                    44:65:5f:94:b3:d6:37:e2:93:7a:03:19:54:ca:a5:
                    11:0b:ec:4f:e2:6d:88:f6:f4:16:f3:10:e5:28:50:
                    cd:2f:d0:b4:6d:9e:cf:02:78:7d:bc:4a:bd:f5:52:
                    97:94:50:cd:cf:48:38:48:31:4c:28:4c:c8:9b:c1:
                    f2:5d:62:4f:3f:c5:b6:65:d9:f4:32:0c:20:9f:8e:
                    52:5c:79:01:d2:d6:7e:4b:17:97:be:84:3f:39:a5:
                    91:cb:62:ad:19:57:69:4a:22:b3:a1:03:13:6c:06:
                    ba:a7:d9:09:a4:da:fe:7b:bd:d1:f1:33:ad:83:ad:
                    d0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:32:AC:66:33:2F:14:57:8C:08:49:6C:48:54:1A:57:75:14:09:A9
            X509v3 Authority Key Identifier:
                keyid:94:90:59:A6:CF:C6:D8:D4:78:4B:D4:69:99:06:DA:66:C2:27:1C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a633030303a3a2f33342d3334203d3e20323733353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9080:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8c:eb:96:56:45:25:3e:f9:5c:27:e3:8f:08:b3:12:9a:8a:69:
         e6:49:ba:13:fd:00:2a:6c:8c:5e:95:59:01:e5:a0:9d:aa:40:
         b2:e4:76:ba:70:fe:0c:42:48:bf:fa:09:06:33:b9:96:07:d0:
         3f:b1:73:b6:1d:cf:bf:4d:cf:45:a9:ce:a9:10:50:b9:39:3e:
         d8:3c:c5:4d:f5:3c:94:f5:54:0d:61:cd:26:5e:f2:58:bc:59:
         ac:72:0a:d7:ff:4f:69:a3:be:94:e1:7a:6e:05:85:e8:56:68:
         06:19:d3:d1:b3:61:1f:e0:c4:71:bb:fb:1f:7c:fe:48:f2:83:
         9e:14:9a:4c:0c:f0:18:d1:f9:9a:fe:66:81:8b:a4:ed:a2:39:
         54:b1:10:65:b4:51:e3:b3:59:ac:f7:f5:fb:a7:52:84:b4:28:
         86:a9:03:f3:fa:85:6b:15:ef:75:f8:cd:b2:c5:40:60:e3:c3:
         aa:f6:a8:da:e8:3b:a4:cc:10:75:0c:81:8c:e7:a6:59:29:5b:
         ea:a1:63:08:3c:a3:37:df:51:71:10:5b:6c:17:c5:d8:e0:0b:
         49:f4:62:c0:7b:55:1c:0d:2d:ae:a7:30:af:22:f2:55:04:4d:
         27:b1:ee:8e:a8:f9:d2:41:ad:6f:37:14:e8:e9:7a:5c:8b:83:
         6e:a8:4d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:34:42 2025 by rpki-client