Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/323830343a313066383a3a2f33322d313238203d3e203532373833.roa
File:                     323830343a313066383a3a2f33322d313238203d3e203532373833.roa (raw, json)
Hash identifier:          PhIag7pRzkC7Bapt79fBidxwqlMO2tX8xdTGP14BVts=
Subject key identifier:   ED:45:85:A5:64:BD:D0:BF:32:06:58:EE:7E:A1:E2:13:05:A4:58:94
Certificate issuer:       /CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
Certificate serial:       6AF06B45DBFEE73CD8221A4844CD12EB25C12B8C
Authority key identifier: 3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/323830343a313066383a3a2f33322d313238203d3e203532373833.roa
Signing time:             Thu 06 Mar 2025 22:51:14 +0000
ROA not before:           Thu 06 Mar 2025 22:46:14 +0000
ROA not after:            Thu 05 Mar 2026 22:51:14 +0000
asID:                     52783
IP address blocks:        2804:10f8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl
                          rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 10:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f0:6b:45:db:fe:e7:3c:d8:22:1a:48:44:cd:12:eb:25:c1:2b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
        Validity
            Not Before: Mar  6 22:46:14 2025 GMT
            Not After : Mar  5 22:51:14 2026 GMT
        Subject: CN=ED4585A564BDD0BF320658EE7EA1E21305A45894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:da:ec:0d:05:c2:0f:64:84:3d:4f:c3:ed:87:
                    e1:86:23:e8:25:e5:a8:46:b1:fc:32:48:6e:df:6b:
                    3d:1d:3b:3d:13:69:e2:fc:5a:b5:b5:f5:79:f9:d8:
                    e7:4f:55:59:29:1d:3b:bc:db:a1:f7:f8:4e:1d:9d:
                    b8:35:da:fa:05:67:be:55:70:08:63:26:94:27:59:
                    27:9f:80:42:6b:be:99:9d:5c:5d:c0:66:07:d5:35:
                    a1:5c:90:b6:d4:12:38:41:67:13:d8:37:e2:45:15:
                    49:d8:4c:f9:ae:57:bf:9e:fa:5d:10:3d:1b:0a:24:
                    bd:4a:b4:70:fe:16:7b:0d:ba:4f:5a:f8:e2:59:a3:
                    c2:8f:47:76:cd:1f:5c:18:dc:10:58:49:3f:e7:d1:
                    a8:6f:2a:29:ea:7c:9b:ff:79:cf:a3:4b:b9:84:29:
                    74:d6:da:3c:87:a4:aa:d7:c7:55:88:76:7d:6f:b6:
                    63:d1:1e:86:b3:ce:33:da:6b:34:21:4e:13:db:63:
                    8a:4d:d5:3b:a3:85:10:be:24:d2:17:d3:8f:23:ca:
                    80:9a:b7:3b:de:0e:d6:c4:e8:3e:75:2a:73:d7:09:
                    a8:b8:83:cd:50:fd:63:ef:12:75:6b:99:d3:9d:64:
                    dd:45:12:9a:38:95:46:01:b1:db:d2:d4:01:6a:cc:
                    f3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:45:85:A5:64:BD:D0:BF:32:06:58:EE:7E:A1:E2:13:05:A4:58:94
            X509v3 Authority Key Identifier:
                keyid:3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/323830343a313066383a3a2f33322d313238203d3e203532373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:41:1b:9c:55:28:77:00:5c:03:ef:28:f0:a7:81:1e:3f:62:
         84:f6:62:2f:bd:be:b7:cb:43:94:03:b9:a1:25:75:b4:eb:6f:
         13:3f:ea:49:f3:8c:d7:90:48:18:44:7a:43:66:cd:22:89:97:
         b1:d3:5f:5f:85:2c:53:77:49:a2:e3:3d:97:5d:d9:55:69:f2:
         b6:74:ea:c4:a1:52:b2:e0:e4:25:39:e8:bd:c6:1e:5c:71:72:
         25:7b:2f:14:50:ba:fc:50:f8:2d:34:40:38:05:5a:54:b7:82:
         66:30:73:c6:03:73:46:e5:3f:00:38:bf:3c:05:3c:f7:c0:4f:
         52:35:c8:af:fe:a4:e7:dc:70:86:d3:78:bd:c9:40:53:3a:8d:
         9a:6c:8c:44:47:3c:ed:93:a7:b1:94:87:cf:b8:29:02:27:4a:
         28:21:29:e3:4a:6f:60:7f:de:42:43:10:fc:ed:15:fb:43:1b:
         d3:02:53:8c:7a:13:3f:d9:6a:9e:ca:3c:9c:a3:75:ad:48:0c:
         a8:df:17:16:23:80:30:c8:b8:16:18:42:91:6f:a7:ab:64:8f:
         87:53:a2:b7:c3:30:77:96:f0:51:cb:fa:85:b5:4c:cb:6f:3b:
         51:cf:57:ec:73:23:ca:15:01:68:ad:61:a2:73:3f:07:c4:bf:
         2f:42:bf:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:11:48 2025 by rpki-client