Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a3a2f33332d3333203d3e20323731373534.roa
File:                     323830343a383038303a3a2f33332d3333203d3e20323731373534.roa (raw, json)
Hash identifier:          vp7GIr1AuxnLNDmVxonw4f1fVMYDa+c0mmvcWA0dXNE=
Subject key identifier:   2D:60:60:86:D3:18:7C:DE:F4:DF:B9:86:E2:4F:26:F6:9A:F8:75:4E
Certificate issuer:       /CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
Certificate serial:       6CBEB4862F37D8496BF1DE532D15E4BE7A59E538
Authority key identifier: A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a3a2f33332d3333203d3e20323731373534.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     271754
IP address blocks:        2804:8080::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl
                          rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:be:b4:86:2f:37:d8:49:6b:f1:de:53:2d:15:e4:be:7a:59:e5:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:fc:26:4f:fe:de:f3:e3:c6:48:2b:e8:2c:
                    e0:26:a4:7d:f3:c4:a0:a0:90:2f:74:a4:e8:e2:7a:
                    24:8b:6e:68:7f:34:6f:d4:bc:14:7c:81:58:0a:50:
                    71:0e:f8:95:90:18:58:5d:7a:65:8f:45:66:3e:36:
                    ed:87:d3:6c:f8:ba:14:39:5a:7c:54:d0:cd:90:00:
                    bb:17:00:ce:62:51:22:23:c8:72:0a:63:75:4b:1a:
                    d1:76:e6:67:d5:30:39:02:a5:d9:dd:f7:a7:f9:b2:
                    9e:79:58:b0:fd:3c:7f:72:12:53:84:05:25:98:41:
                    29:07:58:d2:cf:9c:cf:de:14:9f:bd:dd:3e:3c:46:
                    fe:1d:5a:59:b9:4a:11:45:3d:f5:74:66:73:30:be:
                    52:e1:ff:24:ff:18:62:9c:6c:2a:a9:28:3a:9e:36:
                    5d:c8:c4:f7:1e:22:bb:ab:d9:72:82:20:31:1f:ec:
                    fe:2b:59:b7:70:e0:f1:a1:4e:f6:52:90:81:69:0d:
                    0d:e3:b1:6d:56:97:fb:0a:48:6b:bb:cd:45:fe:55:
                    dd:9e:fe:5b:64:cb:84:67:70:c1:a0:97:f7:d1:6b:
                    b0:41:2e:39:a9:8b:ff:ae:49:f1:4e:0f:40:f3:e0:
                    37:17:9a:8a:0a:b4:23:a7:3c:a3:ba:46:3b:a3:2e:
                    d5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:60:60:86:D3:18:7C:DE:F4:DF:B9:86:E2:4F:26:F6:9A:F8:75:4E
            X509v3 Authority Key Identifier:
                keyid:A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a3a2f33332d3333203d3e20323731373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8080::/33

    Signature Algorithm: sha256WithRSAEncryption
         4d:2f:11:61:04:1d:66:4d:25:ed:20:cc:59:13:f2:c5:5c:b7:
         1f:d7:df:d2:9d:8c:d4:40:0b:46:32:0a:4c:63:e1:2a:14:3d:
         00:2b:0d:8d:e8:2b:05:83:1c:ec:6b:91:73:29:43:c9:7b:1b:
         71:f8:e4:17:f2:0a:78:1d:80:7d:ff:3c:ae:d6:f9:51:2c:46:
         5f:c6:6c:2c:45:3a:45:33:6f:07:2b:4f:f9:4c:a9:43:a8:d4:
         51:ec:7c:88:ad:1a:d6:32:1c:1c:47:42:51:a8:40:60:7a:15:
         3a:e8:03:bd:67:c0:6b:fb:0f:16:97:1c:19:6c:34:01:b4:57:
         ba:fa:cd:f4:99:b9:b2:4d:6d:75:a4:d4:1f:16:91:e8:ce:57:
         94:bd:f4:97:31:28:9f:bb:ef:a7:0a:ae:40:04:b8:e3:79:4e:
         da:5b:d9:ce:46:09:64:42:39:ef:18:ef:94:e8:fe:4a:7a:4f:
         eb:d7:91:6a:e4:f4:27:3a:83:2c:50:e7:44:a8:c0:21:db:16:
         36:86:82:f9:1a:2b:eb:36:65:b8:b2:fb:77:27:57:72:0a:74:
         d1:5e:ba:27:f2:bc:be:91:30:b4:d2:11:52:4a:66:7a:86:e9:
         40:59:01:0d:04:1b:0a:dd:8a:30:19:08:dd:ed:a8:1c:aa:48:
         e8:ba:f0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:28:34 2025 by rpki-client