Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/323830343a313336383a3a2f33322d3333203d3e20323632383038.roa
File:                     323830343a313336383a3a2f33322d3333203d3e20323632383038.roa (raw, json)
Hash identifier:          wY7IBJilVxaHaAeWBXuRTTzn6Jn64HvP56jBgIU/mNo=
Subject key identifier:   FE:E2:42:85:B8:58:C1:C4:ED:58:EB:53:6C:1F:1B:95:6E:13:39:C4
Certificate issuer:       /CN=38A763EAA2F5787E010A7BEF5E69D86D7DF1D702
Certificate serial:       6C3BEAFE520B700265F27C9B2D8FEC4518E0C0B4
Authority key identifier: 38:A7:63:EA:A2:F5:78:7E:01:0A:7B:EF:5E:69:D8:6D:7D:F1:D7:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/323830343a313336383a3a2f33322d3333203d3e20323632383038.roa
Signing time:             Wed 22 Jan 2025 18:53:02 +0000
ROA not before:           Wed 22 Jan 2025 18:48:02 +0000
ROA not after:            Wed 21 Jan 2026 18:53:02 +0000
asID:                     262808
IP address blocks:        2804:1368::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.crl
                          rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:3b:ea:fe:52:0b:70:02:65:f2:7c:9b:2d:8f:ec:45:18:e0:c0:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38A763EAA2F5787E010A7BEF5E69D86D7DF1D702
        Validity
            Not Before: Jan 22 18:48:02 2025 GMT
            Not After : Jan 21 18:53:02 2026 GMT
        Subject: CN=FEE24285B858C1C4ED58EB536C1F1B956E1339C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:34:50:4b:3f:28:fe:5b:79:cd:ad:39:d3:27:
                    25:f2:db:b7:f4:6e:7a:88:b0:e9:e7:55:7e:76:1a:
                    b2:5c:1f:5a:d9:10:a1:d7:c8:09:73:8a:13:f1:12:
                    7e:a8:fe:c2:3c:b1:b0:6f:77:1c:39:0f:ca:5a:c5:
                    67:18:1b:bc:d0:c9:4d:18:f0:8b:fc:ae:47:78:fb:
                    7c:14:6f:84:3d:f5:26:80:af:6f:68:f2:bc:35:5c:
                    83:f4:32:59:c1:b8:33:4f:6b:34:7a:18:24:62:ee:
                    bd:d4:8e:22:50:33:72:26:e1:15:53:9b:c5:b6:6d:
                    b9:75:64:4b:64:18:bb:0a:eb:a9:99:6d:ad:11:0d:
                    ca:60:00:54:ef:26:8d:7b:15:77:83:c1:69:16:79:
                    d2:0e:42:33:29:c1:65:b7:b9:bd:74:d8:d5:5d:04:
                    d0:db:49:e8:15:9b:de:a5:12:be:08:a7:11:50:0b:
                    bf:34:d1:de:f1:5f:0a:e4:7f:04:2b:9b:c7:f2:19:
                    bf:ec:6e:d5:81:c4:74:8a:99:98:49:8c:dd:60:05:
                    f7:fc:77:a2:67:00:90:e4:94:08:c3:25:58:4d:f5:
                    b7:75:97:18:d3:0b:9a:2a:27:94:68:49:8f:ae:0f:
                    eb:d7:86:33:a5:b2:a1:77:ea:42:41:c6:e3:7a:fb:
                    a4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E2:42:85:B8:58:C1:C4:ED:58:EB:53:6C:1F:1B:95:6E:13:39:C4
            X509v3 Authority Key Identifier:
                keyid:38:A7:63:EA:A2:F5:78:7E:01:0A:7B:EF:5E:69:D8:6D:7D:F1:D7:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/323830343a313336383a3a2f33322d3333203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1368::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:d8:15:02:87:a0:68:cb:12:1d:a6:57:6f:62:d7:90:d8:d1:
         cf:04:d5:71:0a:73:6a:cf:27:65:96:48:10:0a:2a:de:8c:80:
         33:a8:5f:b6:f7:eb:bd:84:a3:f9:2c:5f:1c:7b:24:a9:ab:74:
         96:59:1f:3b:1b:5a:6d:85:36:2a:63:87:87:73:db:80:62:2c:
         90:85:16:1c:41:64:24:1d:14:f3:9a:18:1f:9d:e0:ec:30:b9:
         fa:78:45:67:4e:5c:aa:d8:5c:93:b4:fa:b1:fd:22:83:36:be:
         94:c7:c9:c2:75:72:fd:da:2f:42:45:99:99:29:f7:51:0a:f0:
         60:8a:3a:28:13:4a:cb:92:83:1b:ff:62:c1:d4:5d:95:d3:fd:
         01:b1:d2:6b:60:c2:53:bf:d5:0a:0a:8c:a9:42:c9:9e:51:8f:
         b0:26:c3:92:ce:b5:ff:65:67:1c:10:c9:39:ee:c4:8c:5d:f0:
         65:98:1e:a4:ba:8f:75:e2:78:38:02:ea:2e:d6:a1:3b:90:5f:
         b7:c3:9a:2e:45:8e:a2:d1:3d:b1:2e:5d:a6:08:03:f5:bd:5c:
         52:16:fd:b3:cb:33:9d:9b:97:ed:1c:c8:ea:4a:0f:49:22:5a:
         1e:3b:74:22:70:f3:40:1e:5e:cc:69:e7:9d:14:30:ad:0e:8f:
         4c:a0:b2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:48:18 2025 by rpki-client