Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/323830343a346534343a3a2f33322d3438203d3e20323638323530.roa
File:                     323830343a346534343a3a2f33322d3438203d3e20323638323530.roa (raw, json)
Hash identifier:          rnBtBtw8dRR3PHifJZfpt/2LJwnMPKg26paI1h0nEEo=
Subject key identifier:   C1:13:2A:E9:57:5A:89:1D:B8:5B:F5:69:A2:4C:E8:91:6D:DF:93:A7
Certificate issuer:       /CN=82564553AE299B22FAC12CA23483B4453FF22D0A
Certificate serial:       4B0D1A03E7621990939C28461A3ED8773E916F14
Authority key identifier: 82:56:45:53:AE:29:9B:22:FA:C1:2C:A2:34:83:B4:45:3F:F2:2D:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82564553AE299B22FAC12CA23483B4453FF22D0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/323830343a346534343a3a2f33322d3438203d3e20323638323530.roa
Signing time:             Thu 06 Mar 2025 12:45:52 +0000
ROA not before:           Thu 06 Mar 2025 12:40:52 +0000
ROA not after:            Thu 05 Mar 2026 12:45:52 +0000
asID:                     268250
IP address blocks:        2804:4e44::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.crl
                          rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82564553AE299B22FAC12CA23483B4453FF22D0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 23:12:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:0d:1a:03:e7:62:19:90:93:9c:28:46:1a:3e:d8:77:3e:91:6f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82564553AE299B22FAC12CA23483B4453FF22D0A
        Validity
            Not Before: Mar  6 12:40:52 2025 GMT
            Not After : Mar  5 12:45:52 2026 GMT
        Subject: CN=C1132AE9575A891DB85BF569A24CE8916DDF93A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d2:98:5b:d1:da:3f:d5:1f:7a:cc:d4:4e:de:
                    05:4d:fb:46:b2:01:29:a9:56:20:28:b5:f0:c2:c2:
                    29:75:56:4a:11:00:73:e8:63:7d:06:e8:1d:ad:f9:
                    2c:36:68:28:01:f0:65:f3:b1:10:19:bd:ce:e1:47:
                    13:f5:d3:ac:2c:ab:97:bd:7f:f3:f6:00:02:01:e5:
                    fe:66:75:92:e5:28:a8:ec:a4:81:aa:47:66:ce:21:
                    6c:25:10:bd:5d:5e:15:8f:ee:0e:52:ca:ee:e9:4f:
                    8b:db:b6:fd:8b:5f:bb:be:c3:06:48:dc:94:17:7b:
                    c2:1f:0c:c4:7d:c9:75:40:c1:82:ab:57:b6:36:e3:
                    b5:98:ba:d4:98:f7:fc:0c:73:2e:f6:9e:7d:2f:e3:
                    86:40:45:73:10:1e:96:34:12:5e:e1:4d:77:3f:9e:
                    58:be:4e:3f:81:84:ee:c4:96:74:97:78:8c:ba:0b:
                    e9:41:50:98:d1:1e:06:f7:b7:92:ed:44:48:43:2c:
                    e0:6d:a1:97:49:e9:b5:20:51:f6:47:7a:c9:d0:e1:
                    dc:63:2f:97:4b:92:9b:b9:49:dd:15:ac:48:62:86:
                    25:1d:f9:c0:c0:bf:59:47:b3:3d:3c:cf:a6:ba:55:
                    84:3d:3b:03:c0:a1:a4:6b:a0:f2:4e:a5:96:a2:63:
                    cd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:13:2A:E9:57:5A:89:1D:B8:5B:F5:69:A2:4C:E8:91:6D:DF:93:A7
            X509v3 Authority Key Identifier:
                keyid:82:56:45:53:AE:29:9B:22:FA:C1:2C:A2:34:83:B4:45:3F:F2:2D:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82564553AE299B22FAC12CA23483B4453FF22D0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/323830343a346534343a3a2f33322d3438203d3e20323638323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e44::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:56:6b:73:b2:fc:ae:f6:7c:ee:2d:c5:28:2d:ea:a7:62:e0:
         51:93:8d:15:03:d4:34:0b:37:96:0a:8b:b6:e7:05:82:02:af:
         c1:49:a8:36:aa:4c:36:51:44:f9:34:d5:ad:4c:14:93:de:91:
         d9:7c:4d:5b:18:f7:85:ed:8a:01:11:77:3c:15:10:88:7b:d9:
         f9:87:4e:c9:0a:46:0f:2d:7d:86:58:d3:a1:bc:ed:ac:db:80:
         2b:83:20:74:48:9e:2c:24:b2:80:e9:2e:ae:2e:1a:df:bd:8f:
         f2:00:a3:39:81:ad:a0:81:80:bd:91:c4:99:0b:40:cf:02:c7:
         7a:73:67:19:d1:92:bf:de:29:fd:56:53:35:75:38:74:fb:c2:
         75:e0:2b:ef:d9:b1:f8:3b:c7:15:fa:d5:56:16:cb:2f:54:82:
         02:44:53:e1:f4:aa:80:81:e6:05:77:2b:b0:b0:78:f1:68:c3:
         45:2f:23:33:77:86:5f:7d:24:a3:92:fb:55:0a:af:da:15:be:
         32:26:26:c0:86:f3:bf:d8:7a:c7:2b:82:35:bf:50:99:b1:cb:
         fe:52:71:20:d6:f1:12:60:3c:b2:b1:5b:0a:eb:6b:5a:61:38:
         59:7c:40:fb:e1:bc:61:48:b3:74:a8:11:e1:00:bb:77:5f:37:
         4e:e5:0f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:13:06 2025 by rpki-client