Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/323830343a346636303a3a2f33322d313238203d3e20323638333233.roa
File:                     323830343a346636303a3a2f33322d313238203d3e20323638333233.roa (raw, json)
Hash identifier:          kMEsIsALKKeUQ/kyS9ZYrQhiwDhIgH0vQDcsl0N86gQ=
Subject key identifier:   8B:01:BB:F2:13:DB:8F:3D:AE:F3:19:DA:72:AC:BE:43:0A:D6:75:B6
Certificate issuer:       /CN=CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8
Certificate serial:       0716CEEBB245ADD0AEB9E007402BB0B9D7C60CEC
Authority key identifier: CC:1E:CC:FA:C7:A6:BB:A6:B9:3A:63:2D:D1:C6:10:06:86:34:4B:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/323830343a346636303a3a2f33322d313238203d3e20323638333233.roa
Signing time:             Thu 06 Mar 2025 04:01:08 +0000
ROA not before:           Thu 06 Mar 2025 03:56:08 +0000
ROA not after:            Thu 05 Mar 2026 04:01:08 +0000
asID:                     268323
IP address blocks:        2804:4f60::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.crl
                          rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 15:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:16:ce:eb:b2:45:ad:d0:ae:b9:e0:07:40:2b:b0:b9:d7:c6:0c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8
        Validity
            Not Before: Mar  6 03:56:08 2025 GMT
            Not After : Mar  5 04:01:08 2026 GMT
        Subject: CN=8B01BBF213DB8F3DAEF319DA72ACBE430AD675B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0c:45:08:85:40:39:75:70:70:5a:d4:16:af:
                    ef:8b:6c:5d:7f:f4:18:87:eb:96:ff:5b:54:e6:51:
                    d6:a7:8b:a2:b0:77:d1:de:f3:c4:1a:d3:85:8d:9e:
                    25:00:6e:ec:01:f4:14:b5:05:47:86:ae:af:f6:2a:
                    c3:84:70:6a:fe:1e:ce:93:0f:e1:c9:45:fe:6e:24:
                    fb:e8:9d:15:ff:b3:bf:a2:98:08:62:8a:a9:ba:f0:
                    7e:95:a0:29:86:af:e2:e5:47:d7:68:86:d2:22:b8:
                    2c:e2:e1:5f:e2:9c:1e:c5:a7:26:90:b8:73:d2:d5:
                    63:2b:e9:09:f7:02:db:54:4d:b9:f2:28:03:0f:c0:
                    47:30:1c:68:eb:44:9a:92:ac:0e:09:ac:f5:74:98:
                    1f:3d:cc:55:51:73:27:72:8d:7d:cb:89:c7:70:12:
                    af:df:8d:44:04:11:ab:95:86:e7:0c:c6:52:47:44:
                    30:bd:cd:9c:a4:7d:57:cc:5b:04:93:60:16:94:56:
                    ad:b7:2e:1f:9b:9c:5e:c3:48:f8:c2:63:26:22:84:
                    68:51:ce:a6:d7:d7:b6:b4:72:80:19:4f:87:13:a4:
                    a7:e4:39:b5:2b:af:42:d6:70:bd:c7:cf:10:f6:43:
                    a8:b5:d2:6a:6a:9c:ed:68:2a:e2:c0:69:c5:c0:bb:
                    fe:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:01:BB:F2:13:DB:8F:3D:AE:F3:19:DA:72:AC:BE:43:0A:D6:75:B6
            X509v3 Authority Key Identifier:
                keyid:CC:1E:CC:FA:C7:A6:BB:A6:B9:3A:63:2D:D1:C6:10:06:86:34:4B:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/323830343a346636303a3a2f33322d313238203d3e20323638333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:3b:f3:15:79:52:c7:ff:de:d6:b8:5d:b3:02:53:3d:65:34:
         78:7a:0f:5e:4c:f4:1f:2e:1e:77:9c:98:04:3e:37:1a:c8:09:
         d1:67:e6:60:51:7e:44:84:d6:54:a6:cd:5c:bc:ae:4d:7e:c6:
         4c:e7:4c:76:9d:29:72:cd:75:84:fa:29:36:f5:e8:f9:77:ac:
         3b:46:ae:87:51:ef:44:73:1e:1d:50:3a:fb:52:4a:80:dc:3c:
         24:cd:ea:15:a6:be:7c:77:20:fb:67:93:fe:7a:3a:02:94:f5:
         00:6e:6f:a3:06:d3:1f:7c:f9:de:6c:ba:58:0c:a7:24:46:0f:
         ad:c3:7d:90:90:4d:05:b7:ae:3c:0e:be:ec:8d:07:d5:b3:bb:
         83:a0:ff:eb:db:c1:b1:61:3a:76:3b:a8:52:54:64:53:bd:6e:
         07:78:26:1a:b5:42:5c:55:e5:7c:5d:6f:cf:c3:89:0e:bc:65:
         dd:38:15:2e:90:f3:3c:68:e7:06:e6:be:28:ef:66:63:b2:ee:
         70:93:9a:22:95:ee:ea:bd:3e:fb:75:0b:77:45:66:ef:68:97:
         d5:6f:bd:4e:ca:34:5c:ad:ea:d7:55:b1:17:fb:3c:ed:92:ff:
         10:f1:23:36:c9:fa:7a:6e:26:64:dc:e2:6e:d2:de:c5:38:dc:
         66:1a:ef:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:38:56 2025 by rpki-client