Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/1/323830343a336463383a3a2f33322d313238203d3e20323636353533.roa
File:                     323830343a336463383a3a2f33322d313238203d3e20323636353533.roa (raw, json)
Hash identifier:          8tKOH8snAqAG/F+2/80SW3L8TR+/ScCj81m8cT5+ukc=
Subject key identifier:   C0:A7:9C:15:63:58:FF:B9:AD:5D:45:05:CD:CE:B0:6D:C4:81:45:5E
Certificate issuer:       /CN=14F766039A22FDF037ECF0775453B10B73542821
Certificate serial:       67A424E4B6B688024139F1782F458177AC5DF0E2
Authority key identifier: 14:F7:66:03:9A:22:FD:F0:37:EC:F0:77:54:53:B1:0B:73:54:28:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F766039A22FDF037ECF0775453B10B73542821.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/1/323830343a336463383a3a2f33322d313238203d3e20323636353533.roa
Signing time:             Thu 06 Mar 2025 10:54:47 +0000
ROA not before:           Thu 06 Mar 2025 10:49:47 +0000
ROA not after:            Thu 05 Mar 2026 10:54:47 +0000
asID:                     266553
IP address blocks:        2804:3dc8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/1/14F766039A22FDF037ECF0775453B10B73542821.crl
                          rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/1/14F766039A22FDF037ECF0775453B10B73542821.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F766039A22FDF037ECF0775453B10B73542821.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 09:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a4:24:e4:b6:b6:88:02:41:39:f1:78:2f:45:81:77:ac:5d:f0:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14F766039A22FDF037ECF0775453B10B73542821
        Validity
            Not Before: Mar  6 10:49:47 2025 GMT
            Not After : Mar  5 10:54:47 2026 GMT
        Subject: CN=C0A79C156358FFB9AD5D4505CDCEB06DC481455E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:50:94:4e:60:cd:9e:c6:8f:b7:f6:70:62:41:
                    bf:80:22:67:94:44:f4:f5:d2:e1:71:ac:bb:4c:47:
                    d2:91:70:f4:d4:a8:7c:64:34:7f:6a:4a:13:57:48:
                    07:26:22:af:2f:e8:da:5b:07:10:51:61:40:1e:b6:
                    c1:71:1d:1d:22:15:80:1f:6a:d2:73:22:ab:18:e1:
                    03:51:48:c1:f0:74:bf:d9:8a:32:15:36:e6:f6:2a:
                    7b:b9:15:8f:9c:cd:54:3c:4d:19:09:c4:e7:fd:dc:
                    e9:2f:2d:ba:44:34:ea:6c:b4:fa:cc:e5:24:2e:a3:
                    3e:0c:0c:8b:a4:1a:61:0c:4d:d8:0d:e1:8b:7f:e0:
                    ad:81:45:67:a3:6b:15:4a:8f:64:79:43:36:40:73:
                    43:df:70:63:f3:83:cf:2f:2d:1f:92:53:e7:4e:83:
                    38:61:a2:0b:77:b4:a5:f8:ec:60:89:bc:10:c2:6b:
                    fd:c7:58:56:6d:ab:c5:41:cf:ec:81:07:27:41:d2:
                    5a:38:94:e2:a3:13:bf:ce:98:c4:85:7c:48:b9:9b:
                    c3:e8:40:93:28:c2:c0:54:ad:6f:4b:48:a7:d2:78:
                    b4:cc:7e:05:13:82:39:72:78:60:ad:93:54:cf:55:
                    49:1c:4f:8e:d5:11:f7:c1:d7:e0:5f:8d:d2:c3:dc:
                    00:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A7:9C:15:63:58:FF:B9:AD:5D:45:05:CD:CE:B0:6D:C4:81:45:5E
            X509v3 Authority Key Identifier:
                keyid:14:F7:66:03:9A:22:FD:F0:37:EC:F0:77:54:53:B1:0B:73:54:28:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/1/14F766039A22FDF037ECF0775453B10B73542821.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F766039A22FDF037ECF0775453B10B73542821.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/1/323830343a336463383a3a2f33322d313238203d3e20323636353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:09:89:58:6a:88:7c:81:e7:8a:d1:6a:db:69:de:ab:1b:75:
         dc:bc:47:75:cd:d5:2a:71:dd:eb:2d:c1:d6:ee:ae:53:e3:31:
         38:2a:3d:b1:f7:0c:0f:d8:c8:9e:d4:40:2c:24:2d:79:b4:40:
         81:6f:6d:bb:ea:14:14:45:5e:34:12:6e:72:b1:ee:b1:7d:cf:
         a7:86:fc:6c:3e:70:fb:d5:fc:8f:b2:d4:34:3c:b9:eb:5a:ea:
         c5:15:f1:dc:2b:22:9b:86:4f:80:a8:d4:71:e4:d1:fe:ec:0f:
         b0:e9:a7:af:1f:07:b4:42:1f:fd:b7:3c:68:ee:07:5f:6c:d5:
         cd:51:8f:09:91:e4:e6:b2:3d:b9:2e:fc:70:02:07:2d:6c:ad:
         ce:d9:5a:40:e5:12:ab:8d:6b:f6:9b:ca:ab:ec:a8:e9:dc:fc:
         a6:d2:bd:9f:5c:b9:83:16:73:fb:ea:c5:30:ff:10:bb:fc:4b:
         ee:1b:f2:50:8f:ed:81:19:23:2d:2f:ab:a2:44:e1:2e:b5:d7:
         94:a7:f0:f1:ff:94:8e:87:b6:39:0c:52:ec:60:0c:f2:cf:35:
         60:c9:2c:99:b4:7e:95:8a:4b:f8:ce:04:1c:6c:e9:37:40:01:
         b4:34:09:e3:3c:40:e1:33:3e:56:8e:ac:7e:4c:61:54:00:74:
         05:7a:b3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:38:08 2025 by rpki-client