Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/1/323830343a353864633a3a2f33322d313238203d3e20323638313534.roa
File:                     323830343a353864633a3a2f33322d313238203d3e20323638313534.roa (raw, json)
Hash identifier:          EfQFpxGQEhszpkGA/TOFTOGWj0CByT0VXHQy1X6N9BE=
Subject key identifier:   EA:B8:D7:8F:7C:5A:BF:C2:B3:C4:BC:4D:4C:D8:D6:E1:A5:86:0B:6D
Certificate issuer:       /CN=A82DD96719E370BD78BE6F421B9E292F589B4A4D
Certificate serial:       0C6B0ACCBFEC69F23CAE3F012C725615312ED97F
Authority key identifier: A8:2D:D9:67:19:E3:70:BD:78:BE:6F:42:1B:9E:29:2F:58:9B:4A:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A82DD96719E370BD78BE6F421B9E292F589B4A4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/1/323830343a353864633a3a2f33322d313238203d3e20323638313534.roa
Signing time:             Thu 06 Mar 2025 18:22:11 +0000
ROA not before:           Thu 06 Mar 2025 18:17:11 +0000
ROA not after:            Thu 05 Mar 2026 18:22:11 +0000
asID:                     268154
IP address blocks:        2804:58dc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/1/A82DD96719E370BD78BE6F421B9E292F589B4A4D.crl
                          rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/1/A82DD96719E370BD78BE6F421B9E292F589B4A4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A82DD96719E370BD78BE6F421B9E292F589B4A4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 20:42:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6b:0a:cc:bf:ec:69:f2:3c:ae:3f:01:2c:72:56:15:31:2e:d9:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A82DD96719E370BD78BE6F421B9E292F589B4A4D
        Validity
            Not Before: Mar  6 18:17:11 2025 GMT
            Not After : Mar  5 18:22:11 2026 GMT
        Subject: CN=EAB8D78F7C5ABFC2B3C4BC4D4CD8D6E1A5860B6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:40:c6:ac:28:20:88:2b:60:ef:66:0c:67:71:
                    67:21:93:b1:7b:61:7b:1d:d9:30:0a:ee:a7:72:8f:
                    2a:9e:99:28:0f:60:24:05:4d:7e:7d:5f:0c:fc:6d:
                    3a:e9:e5:f9:46:fa:0b:d3:be:9e:96:7a:5c:ba:6f:
                    83:03:43:77:10:1b:ca:1c:da:6b:2c:0f:97:29:92:
                    2e:8b:c1:12:67:0c:d3:96:01:68:2c:28:09:dd:82:
                    f9:42:52:a6:b3:d4:e0:51:b7:6e:b9:a5:e0:eb:42:
                    bc:a4:70:28:b9:05:16:9c:f4:cf:00:e0:2d:0e:57:
                    a6:5a:f7:f7:84:bf:97:f1:9b:e0:1a:9d:c7:55:07:
                    d3:a6:2c:f5:65:1e:68:5d:b8:44:95:70:5d:d5:68:
                    4d:1c:df:2a:1f:bc:f9:2a:5e:0a:4b:05:36:07:ca:
                    ff:e8:ef:34:1c:17:5d:96:05:7d:27:ae:a8:a7:ac:
                    88:12:26:90:ba:af:b0:a9:c1:6a:80:08:8c:7e:5c:
                    6e:d1:8a:09:0d:af:3c:ed:bf:ab:32:83:92:10:91:
                    b7:2f:23:86:f8:cc:c8:31:7a:01:01:3c:8b:e4:96:
                    44:85:c7:f0:78:5a:a1:12:5c:54:90:06:50:09:c2:
                    7e:23:08:54:b2:54:62:d2:f1:7f:a6:19:5d:ce:31:
                    08:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B8:D7:8F:7C:5A:BF:C2:B3:C4:BC:4D:4C:D8:D6:E1:A5:86:0B:6D
            X509v3 Authority Key Identifier:
                keyid:A8:2D:D9:67:19:E3:70:BD:78:BE:6F:42:1B:9E:29:2F:58:9B:4A:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/1/A82DD96719E370BD78BE6F421B9E292F589B4A4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A82DD96719E370BD78BE6F421B9E292F589B4A4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/1/323830343a353864633a3a2f33322d313238203d3e20323638313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:b3:c0:c5:d6:03:42:d1:cf:5c:ea:f3:32:a3:8c:93:c0:36:
         60:86:a4:23:2a:05:99:8a:c0:4a:08:b9:3a:2c:4d:7f:2b:80:
         fa:50:6c:6f:66:c9:f5:53:f4:dc:2e:07:e8:ee:26:3b:cf:c1:
         9f:5f:63:ed:43:bd:48:e8:cf:11:7f:2a:fc:62:91:cf:b5:ce:
         e0:5d:58:88:00:52:a2:a5:2e:aa:72:ae:95:02:08:b3:8b:f9:
         ad:bf:d5:75:5f:4f:76:ce:d2:15:f2:cc:5e:5e:c1:6e:fa:fe:
         40:27:c9:eb:74:62:37:28:02:9d:8a:d5:b6:35:76:97:a4:68:
         a6:d4:ff:49:59:f3:d0:a3:f1:df:57:59:8b:fa:b9:68:6b:28:
         42:9b:5d:80:c1:70:72:14:61:15:12:51:64:a6:02:13:2c:03:
         ee:10:05:df:6a:45:37:25:50:7f:66:d9:81:d9:fd:47:10:1e:
         b8:d7:54:dd:45:a4:57:0a:1d:60:f7:38:98:0f:7e:ff:fa:c3:
         78:9b:af:12:51:b7:1c:6c:30:54:1b:7b:97:25:10:ff:94:dc:
         e2:c0:ca:97:da:db:df:8d:12:7d:3f:60:1f:cb:13:76:ca:fa:
         e3:37:10:8f:8c:6a:65:bb:21:98:28:e9:cf:52:7f:c5:d8:ea:
         13:92:0c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:19:43 2025 by rpki-client