Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/323830343a336236633a3a2f33322d3334203d3e20323636313438.roa
File:                     323830343a336236633a3a2f33322d3334203d3e20323636313438.roa (raw, json)
Hash identifier:          KAutkZH9VHWjf13lnYX42SsX+MDAX9ODpDVQTCh0IHI=
Subject key identifier:   D9:DD:78:20:4C:8B:11:94:E1:56:B8:C8:FA:3D:25:F5:2D:68:1E:36
Certificate issuer:       /CN=8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D
Certificate serial:       5D7A03DE07F7E40FADC318DC500E20F19862FCAA
Authority key identifier: 8C:2E:92:E0:BA:D0:2E:89:BA:E6:DB:B5:B2:3B:67:4A:2D:57:7A:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/323830343a336236633a3a2f33322d3334203d3e20323636313438.roa
Signing time:             Thu 06 Mar 2025 08:01:21 +0000
ROA not before:           Thu 06 Mar 2025 07:56:21 +0000
ROA not after:            Thu 05 Mar 2026 08:01:21 +0000
asID:                     266148
IP address blocks:        2804:3b6c::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.crl
                          rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 05:40:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:7a:03:de:07:f7:e4:0f:ad:c3:18:dc:50:0e:20:f1:98:62:fc:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D
        Validity
            Not Before: Mar  6 07:56:21 2025 GMT
            Not After : Mar  5 08:01:21 2026 GMT
        Subject: CN=D9DD78204C8B1194E156B8C8FA3D25F52D681E36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c8:31:7d:e2:4b:dd:a9:0d:39:df:05:c4:d9:
                    24:7c:80:68:16:3f:2f:3e:c5:bf:4d:bc:3c:95:c6:
                    db:6d:ed:eb:70:9e:8f:c1:8d:33:fe:64:46:29:52:
                    cc:c9:c6:8d:bf:03:42:6e:7b:bc:5c:7c:3e:99:3e:
                    98:9a:8d:b1:7d:a9:4d:19:3c:18:b2:c8:8b:c8:af:
                    0d:8d:71:fd:b0:b4:5d:0e:89:95:fd:4c:91:58:7d:
                    28:8a:4e:28:cc:84:61:d8:7a:22:44:fe:cf:3c:05:
                    43:82:29:89:55:c0:b7:cb:f2:ef:e3:8d:75:6b:d0:
                    88:b7:96:33:11:ea:16:a4:07:63:fd:69:2d:a6:16:
                    56:cd:7f:3e:53:32:d3:4f:db:b9:8d:e6:5e:de:f4:
                    e6:64:e5:a2:04:f4:98:2e:64:31:42:29:a9:dd:2a:
                    b6:54:87:b9:47:f6:38:7e:40:bb:fb:55:78:1c:5b:
                    d6:48:fe:82:2f:eb:2a:82:26:0e:25:27:cf:45:90:
                    6d:1c:2d:36:18:55:9e:1c:2a:7a:cf:f1:cd:1b:0a:
                    17:da:e3:45:51:46:d3:84:44:af:a5:91:b2:ad:11:
                    15:67:9b:3e:7f:53:26:b8:6f:f6:09:25:d2:f4:81:
                    cc:0f:c9:26:2b:ab:f4:05:32:cb:26:fa:0a:87:1c:
                    20:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DD:78:20:4C:8B:11:94:E1:56:B8:C8:FA:3D:25:F5:2D:68:1E:36
            X509v3 Authority Key Identifier:
                keyid:8C:2E:92:E0:BA:D0:2E:89:BA:E6:DB:B5:B2:3B:67:4A:2D:57:7A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/323830343a336236633a3a2f33322d3334203d3e20323636313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:ef:7e:90:a0:89:da:35:d8:ed:05:c8:78:69:a1:b6:73:36:
         fa:6d:81:15:c7:57:6e:24:52:5c:b4:49:98:74:00:82:5b:5f:
         34:6a:62:ac:a6:5d:b3:c7:97:2e:77:48:4e:24:67:06:27:3a:
         52:b6:9c:bd:45:dd:25:c4:83:bb:fd:b1:ab:75:c2:f6:b7:32:
         20:89:6c:69:19:f9:ab:d5:72:78:7e:a0:57:0d:70:16:a8:63:
         df:0c:f3:14:3f:60:1f:84:4d:c8:89:76:c3:4c:77:71:05:26:
         1c:49:6b:11:e3:cb:6e:8f:8e:41:02:32:30:91:4d:8c:8a:24:
         12:4f:78:65:73:14:f8:88:5e:eb:b1:d6:da:12:07:d2:42:d6:
         6e:e8:de:37:03:5a:1b:10:cf:49:21:9d:33:d5:7a:51:87:53:
         d1:de:46:37:91:01:8e:60:df:1b:28:a2:1a:26:37:e9:c1:d9:
         16:4a:9f:03:0e:ec:fa:19:47:7b:08:4f:05:4a:c0:03:4e:01:
         53:d7:57:a6:3e:fc:55:a2:bc:70:f9:fc:e4:a2:e4:58:dc:d9:
         ce:04:3f:cf:62:66:c8:78:28:ee:65:90:9e:91:8b:e0:44:1a:
         ab:a1:f4:0d:e8:a6:fe:26:e3:5e:7a:71:6a:64:c7:b8:7e:13:
         7d:65:29:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:31:59 2025 by rpki-client