Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a3a2f33342d3334203d3e20323731373534.roa
File:                     323830343a383038303a3a2f33342d3334203d3e20323731373534.roa (raw, json)
Hash identifier:          3ovTN9AIasCdTWBoskIU4oqlsI0dbT3aXe4z4ef17zk=
Subject key identifier:   7D:3A:E6:6B:B5:18:70:B4:AF:B8:4B:74:0C:42:FA:64:9F:9B:ED:78
Certificate issuer:       /CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
Certificate serial:       12A312836BD958D12349567CB8A54D0CA1DD20C0
Authority key identifier: A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a3a2f33342d3334203d3e20323731373534.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     271754
IP address blocks:        2804:8080::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl
                          rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a3:12:83:6b:d9:58:d1:23:49:56:7c:b8:a5:4d:0c:a1:dd:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7a:cd:0e:c8:ca:e6:21:48:45:4c:dc:06:96:
                    cd:59:f1:86:b1:c7:96:f6:cd:65:ec:a9:35:53:e8:
                    26:9f:67:cb:92:66:a3:d0:54:1a:13:9a:9f:18:d4:
                    55:8f:e1:5f:34:d8:89:ea:f1:f1:d2:f0:b5:8b:44:
                    1b:15:40:9c:ea:6e:9c:8e:94:59:95:c7:51:2a:d0:
                    50:ea:ef:ad:17:18:f5:35:e6:b5:04:22:86:d9:6c:
                    5c:39:0a:4e:b3:ac:b6:d3:bd:cf:47:96:8a:30:8f:
                    ef:8d:55:1a:b1:ad:e5:1d:e8:75:16:29:03:2a:c5:
                    d9:b1:7e:84:3c:4c:c3:78:5e:6e:b4:66:e4:4b:76:
                    93:24:6c:58:c1:50:0e:df:93:2c:47:49:f0:84:e6:
                    0b:10:5c:96:d8:c6:bc:ba:1d:ad:3a:4d:16:88:94:
                    b2:ba:99:fd:ed:19:1f:cb:5c:af:9e:ea:9d:87:a3:
                    19:e0:e7:a5:67:e6:e8:2a:0e:4b:94:38:ee:93:ff:
                    e7:c5:31:5e:64:65:4f:24:3c:f7:79:b0:eb:3c:54:
                    81:dd:f6:c2:d0:b2:0f:5b:dd:25:a8:80:82:dc:11:
                    c2:7f:f8:18:10:49:e3:60:3a:53:6a:c8:5c:0f:4b:
                    c9:25:1f:b9:c1:a9:74:49:b4:34:12:c2:e5:90:21:
                    79:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3A:E6:6B:B5:18:70:B4:AF:B8:4B:74:0C:42:FA:64:9F:9B:ED:78
            X509v3 Authority Key Identifier:
                keyid:A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a3a2f33342d3334203d3e20323731373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8080::/34

    Signature Algorithm: sha256WithRSAEncryption
         80:df:be:b6:99:a8:ad:d7:43:54:8b:22:e7:98:ae:f2:ac:af:
         b8:cf:ce:34:92:fe:cb:c7:1f:96:e4:2d:59:98:2b:ee:5c:e7:
         c0:9b:f0:b8:ed:54:47:83:c7:46:9b:52:50:10:45:1c:03:ac:
         82:7f:9b:62:c9:b6:b6:3e:91:c0:61:c5:d4:65:df:e8:73:41:
         87:9c:aa:68:5d:1e:c0:73:7e:cb:62:ee:c1:32:de:38:29:51:
         9d:f2:e9:b3:8a:c0:0a:33:31:3b:f7:4a:38:18:9f:0f:bd:50:
         d6:ea:4f:de:11:16:67:ca:d5:ca:1a:dd:14:1d:2e:d1:80:17:
         2a:19:41:6e:5d:b0:90:d6:ef:60:1c:ad:e0:d0:fa:5e:30:a6:
         04:a2:4e:a0:98:a5:a7:58:3c:fe:53:73:31:ca:8c:81:4f:70:
         16:1f:28:f6:da:a3:11:b5:f3:1b:78:6b:55:74:13:72:5f:63:
         16:43:eb:00:66:fd:7a:54:db:5e:c3:ce:41:47:4c:06:f0:c6:
         1f:8e:62:c0:1d:e7:06:8f:a6:c8:ea:30:87:af:e9:8f:ba:be:
         89:c6:6a:ae:94:1a:fa:fd:60:bd:cb:03:75:f4:4c:47:37:85:
         fc:83:b3:73:f4:65:b7:c3:b1:72:c2:90:fb:f2:30:dc:c6:cb:
         82:33:5f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:27:30 2025 by rpki-client