Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8xBoBDpk4muRyxxLa4oZqcTzg3MNZJcVhwegqn5TDUa4/1/323830343a326632633a3a2f33322d3438203d3e20323634383736.roa
File:                     323830343a326632633a3a2f33322d3438203d3e20323634383736.roa (raw, json)
Hash identifier:          RSTwNwgB6MANoyYpC/ng4FckJEgGFynDDxO/T+8E8xo=
Subject key identifier:   BB:EA:88:94:E0:2E:B8:40:7C:88:DA:24:EB:65:37:E9:B2:D4:EE:5B
Certificate issuer:       /CN=01BE770C878B9D4B6C5F729CF1FD4CA769B68676
Certificate serial:       5383F0671F4E3EF971317258F601493C3D98DE
Authority key identifier: 01:BE:77:0C:87:8B:9D:4B:6C:5F:72:9C:F1:FD:4C:A7:69:B6:86:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01BE770C878B9D4B6C5F729CF1FD4CA769B68676.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xBoBDpk4muRyxxLa4oZqcTzg3MNZJcVhwegqn5TDUa4/1/323830343a326632633a3a2f33322d3438203d3e20323634383736.roa
Signing time:             Thu 06 Mar 2025 15:17:00 +0000
ROA not before:           Thu 06 Mar 2025 15:12:00 +0000
ROA not after:            Thu 05 Mar 2026 15:17:00 +0000
asID:                     264876
IP address blocks:        2804:2f2c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8xBoBDpk4muRyxxLa4oZqcTzg3MNZJcVhwegqn5TDUa4/1/01BE770C878B9D4B6C5F729CF1FD4CA769B68676.crl
                          rsync://rpki-repo.registro.br/repo/8xBoBDpk4muRyxxLa4oZqcTzg3MNZJcVhwegqn5TDUa4/1/01BE770C878B9D4B6C5F729CF1FD4CA769B68676.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01BE770C878B9D4B6C5F729CF1FD4CA769B68676.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Apr 2025 10:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:83:f0:67:1f:4e:3e:f9:71:31:72:58:f6:01:49:3c:3d:98:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01BE770C878B9D4B6C5F729CF1FD4CA769B68676
        Validity
            Not Before: Mar  6 15:12:00 2025 GMT
            Not After : Mar  5 15:17:00 2026 GMT
        Subject: CN=BBEA8894E02EB8407C88DA24EB6537E9B2D4EE5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:24:e1:aa:0a:65:a0:99:8e:41:d1:60:c5:fb:
                    ba:0b:ed:cf:79:f0:6b:67:59:cf:a0:a3:13:56:54:
                    eb:67:42:05:c5:97:8e:e2:ac:ae:ad:7c:e8:f9:b9:
                    50:a4:0c:c8:1a:77:01:0c:d1:42:0a:86:ac:97:af:
                    2c:1d:cf:64:53:0d:c3:3d:21:e4:77:6f:22:31:d6:
                    f7:02:aa:0f:f6:4e:fa:e5:dd:17:70:4e:a3:25:1a:
                    8e:8f:37:ae:93:50:f9:6d:b5:57:34:e1:31:7b:4e:
                    fb:cf:b2:82:30:14:80:ac:8a:de:78:7b:73:07:81:
                    9f:40:dd:51:b4:0f:78:7a:4f:48:58:24:01:f2:8d:
                    8d:5c:3c:bd:ef:25:62:27:cb:13:c2:aa:41:8b:d3:
                    cd:0a:7c:44:e9:8a:63:7c:91:1a:ab:ae:cc:c2:0f:
                    f5:44:ca:1b:5f:2f:8a:de:4f:eb:70:0c:6b:28:cd:
                    0e:fb:4e:01:19:bc:37:7d:58:a6:01:fd:c2:42:c7:
                    73:27:d5:8e:6d:97:90:24:e5:cd:36:9f:e5:17:cc:
                    26:59:9a:d5:51:38:ba:66:c6:90:9b:80:74:70:36:
                    30:7d:48:06:52:12:87:60:64:6a:45:58:73:65:78:
                    c8:9f:4b:37:58:20:9a:06:c1:8d:74:d7:dd:32:d7:
                    a6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:EA:88:94:E0:2E:B8:40:7C:88:DA:24:EB:65:37:E9:B2:D4:EE:5B
            X509v3 Authority Key Identifier:
                keyid:01:BE:77:0C:87:8B:9D:4B:6C:5F:72:9C:F1:FD:4C:A7:69:B6:86:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xBoBDpk4muRyxxLa4oZqcTzg3MNZJcVhwegqn5TDUa4/1/01BE770C878B9D4B6C5F729CF1FD4CA769B68676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01BE770C878B9D4B6C5F729CF1FD4CA769B68676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xBoBDpk4muRyxxLa4oZqcTzg3MNZJcVhwegqn5TDUa4/1/323830343a326632633a3a2f33322d3438203d3e20323634383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:15:c1:29:dd:2c:38:e4:f3:c8:74:1d:ca:48:0f:05:9c:29:
         76:dd:20:86:83:76:97:74:e6:d1:56:65:b6:b7:78:bd:74:54:
         21:b1:14:cf:fb:0b:94:eb:d1:2c:e6:e7:1c:11:2e:fd:e0:51:
         c8:60:f7:a2:91:f9:b9:2c:7f:96:10:9c:b7:f2:47:1f:bd:d1:
         7f:62:ff:5c:1a:41:04:95:1e:be:37:db:1a:c0:e2:53:37:88:
         d7:b0:5e:a2:23:30:09:ba:cb:70:be:e1:7b:f9:39:61:21:25:
         80:29:d6:00:fb:36:e5:83:ef:c0:19:e3:09:42:34:36:dd:aa:
         1e:c2:0d:f5:4d:22:e4:cb:4e:68:cb:3f:85:d0:f5:a0:5b:f8:
         51:20:6c:c5:dc:23:59:a4:2a:be:5b:0e:7a:82:5d:f6:14:44:
         00:1b:04:bc:7e:3d:c0:af:f4:bf:2e:ea:34:ba:6b:e5:67:ed:
         9c:70:ab:9a:dc:93:f1:49:78:83:0c:e7:e0:61:d2:77:dc:0f:
         df:32:f2:3e:43:47:25:ff:64:36:58:6b:a1:1f:e7:02:1e:ef:
         99:82:27:59:48:16:dd:d0:30:a2:47:48:e6:d7:6f:42:73:8f:
         0f:99:25:54:8c:e6:ef:b6:20:34:6e:a2:43:4f:d1:44:51:b1:
         37:19:a8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 15:01:01 2025 by rpki-client