Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A92rSfS48eq3y879gTR343BJ4qJooPpqXoDWJwfSYV6s/1/323830343a383062633a3a2f33332d3333203d3e20323731373730.roa
File:                     323830343a383062633a3a2f33332d3333203d3e20323731373730.roa (raw, json)
Hash identifier:          qDPJFuM+pSp5FGbWbfd9jHt3GxkwfbRqTJke5Cr3NlU=
Subject key identifier:   BD:24:35:E3:B7:5D:01:1A:C4:46:4B:ED:FB:A8:19:D8:EF:7F:34:F3
Certificate issuer:       /CN=EFB048E3392805E6F983E13D03B2FDEC67F98ADC
Certificate serial:       446F911B2DCF33DB7007F20150690253282E78A8
Authority key identifier: EF:B0:48:E3:39:28:05:E6:F9:83:E1:3D:03:B2:FD:EC:67:F9:8A:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFB048E3392805E6F983E13D03B2FDEC67F98ADC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A92rSfS48eq3y879gTR343BJ4qJooPpqXoDWJwfSYV6s/1/323830343a383062633a3a2f33332d3333203d3e20323731373730.roa
Signing time:             Fri 07 Mar 2025 02:01:23 +0000
ROA not before:           Fri 07 Mar 2025 01:56:23 +0000
ROA not after:            Fri 06 Mar 2026 02:01:23 +0000
asID:                     271770
IP address blocks:        2804:80bc::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A92rSfS48eq3y879gTR343BJ4qJooPpqXoDWJwfSYV6s/1/EFB048E3392805E6F983E13D03B2FDEC67F98ADC.crl
                          rsync://rpki-repo.registro.br/repo/A92rSfS48eq3y879gTR343BJ4qJooPpqXoDWJwfSYV6s/1/EFB048E3392805E6F983E13D03B2FDEC67F98ADC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFB048E3392805E6F983E13D03B2FDEC67F98ADC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:23:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6f:91:1b:2d:cf:33:db:70:07:f2:01:50:69:02:53:28:2e:78:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFB048E3392805E6F983E13D03B2FDEC67F98ADC
        Validity
            Not Before: Mar  7 01:56:23 2025 GMT
            Not After : Mar  6 02:01:23 2026 GMT
        Subject: CN=BD2435E3B75D011AC4464BEDFBA819D8EF7F34F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fa:39:16:4e:04:36:33:01:fd:34:7b:26:48:
                    94:36:74:31:d1:a6:a1:7a:69:b3:0f:d2:eb:cb:4f:
                    0e:7f:bd:1f:a7:10:a9:ae:85:f5:7a:0d:fe:21:24:
                    1a:c6:aa:33:c3:f6:20:1e:52:d8:63:38:1e:bc:53:
                    53:9a:d3:e6:e4:53:2c:5e:83:7f:aa:48:6e:cd:d8:
                    05:56:5b:78:bd:31:4e:e4:dd:51:ed:ba:03:0a:8a:
                    db:a3:3b:38:34:d4:53:e2:71:02:e7:a5:35:7e:09:
                    e4:01:25:26:44:b1:1a:b4:bb:91:2d:3f:a8:09:40:
                    2c:4c:ff:3f:e9:9c:1a:5b:7c:c1:69:dc:9e:e0:09:
                    0b:d3:db:f0:e4:41:61:f3:57:e4:9c:6a:e3:67:6c:
                    c4:cb:93:2f:60:4f:51:aa:00:ef:4c:f9:44:c7:45:
                    ac:e8:18:1e:5a:c1:9e:a9:5b:20:b8:a6:2d:3b:7f:
                    aa:44:d8:40:e9:63:f2:28:ed:35:c3:38:c0:2e:be:
                    38:32:0f:2e:92:d8:ec:23:e9:41:02:ab:4f:22:84:
                    8d:a8:e8:e5:4c:01:fd:e0:c6:4c:ea:e7:eb:e6:2c:
                    05:7b:de:fe:cd:19:75:d8:47:1b:c5:50:dc:7e:c5:
                    92:76:74:bc:38:59:4f:70:a7:b6:36:a0:9a:4a:39:
                    90:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:24:35:E3:B7:5D:01:1A:C4:46:4B:ED:FB:A8:19:D8:EF:7F:34:F3
            X509v3 Authority Key Identifier:
                keyid:EF:B0:48:E3:39:28:05:E6:F9:83:E1:3D:03:B2:FD:EC:67:F9:8A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A92rSfS48eq3y879gTR343BJ4qJooPpqXoDWJwfSYV6s/1/EFB048E3392805E6F983E13D03B2FDEC67F98ADC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFB048E3392805E6F983E13D03B2FDEC67F98ADC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A92rSfS48eq3y879gTR343BJ4qJooPpqXoDWJwfSYV6s/1/323830343a383062633a3a2f33332d3333203d3e20323731373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80bc::/33

    Signature Algorithm: sha256WithRSAEncryption
         4f:45:1c:25:2e:38:f1:bd:cb:89:79:e1:65:74:90:7a:6b:e8:
         cc:11:35:76:97:3a:33:dc:39:79:48:68:b7:3d:cf:6e:5f:54:
         bb:89:ca:df:47:d9:8d:38:79:f0:cd:94:61:64:65:e2:b0:ba:
         59:f1:f5:09:cc:a3:1c:ff:17:51:b6:78:d5:76:49:37:65:f6:
         2d:3a:26:39:6f:a6:c0:bd:4b:fb:c8:dc:d5:46:98:59:7d:da:
         74:e8:be:d3:72:b0:c2:26:67:23:bc:4a:ed:8f:91:2f:77:ba:
         cc:9f:28:8f:13:58:dd:9b:f4:07:db:10:55:19:97:75:fa:69:
         4f:0c:1a:f1:f1:c1:54:cc:8e:6d:82:8a:a0:75:92:66:31:37:
         b7:ad:06:d3:5a:3e:7b:a1:4d:27:bb:91:93:b7:c9:32:55:f3:
         40:03:aa:84:d0:96:da:79:fc:8a:2b:9f:c4:5b:58:a3:a9:cd:
         b2:08:4a:88:4d:36:31:47:f7:4c:b5:ef:53:0f:b1:0c:38:38:
         1d:a1:20:a2:7f:7b:b3:eb:bf:74:b7:7a:4b:b3:87:18:38:fd:
         56:03:65:6d:c1:91:36:d5:03:7e:aa:37:cb:03:de:17:8b:26:
         60:3c:1d:7f:c9:dc:ef:89:91:87:f0:4e:16:97:9b:ce:25:65:
         1c:8f:c4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:16:51 2025 by rpki-client