Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/323830343a343538383a3a2f33322d313238203d3e20323636393333.roa
File:                     323830343a343538383a3a2f33322d313238203d3e20323636393333.roa (raw, json)
Hash identifier:          iN0pw/x9amjbrKQLhMIcDpQKQKywdSs80rIfgAM1LEg=
Subject key identifier:   DA:20:E8:AF:F4:04:92:B8:75:78:01:3D:CC:03:82:67:93:3E:74:56
Certificate issuer:       /CN=9C2E73CC95F1D482A4D9A31AD876FAF4B2753016
Certificate serial:       1B7F3C06BA2E6BE3DEF0FDE51B0E0878D695F43E
Authority key identifier: 9C:2E:73:CC:95:F1:D4:82:A4:D9:A3:1A:D8:76:FA:F4:B2:75:30:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/323830343a343538383a3a2f33322d313238203d3e20323636393333.roa
Signing time:             Thu 13 Mar 2025 13:12:16 +0000
ROA not before:           Thu 13 Mar 2025 13:07:16 +0000
ROA not after:            Thu 12 Mar 2026 13:12:16 +0000
asID:                     266933
IP address blocks:        2804:4588::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.crl
                          rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7f:3c:06:ba:2e:6b:e3:de:f0:fd:e5:1b:0e:08:78:d6:95:f4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C2E73CC95F1D482A4D9A31AD876FAF4B2753016
        Validity
            Not Before: Mar 13 13:07:16 2025 GMT
            Not After : Mar 12 13:12:16 2026 GMT
        Subject: CN=DA20E8AFF40492B87578013DCC038267933E7456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:14:d5:21:2f:c2:98:de:02:bb:0c:69:47:cf:
                    61:46:e7:c0:c0:60:a5:ee:a4:dc:09:fd:52:1d:9b:
                    6e:2c:8d:a5:9a:2f:63:4f:0d:e1:3d:af:60:88:93:
                    3c:bc:64:5e:b0:ff:19:85:dc:eb:3b:d3:ed:6c:e0:
                    6c:1e:a1:92:69:53:8a:bc:67:4b:88:f9:e5:9d:c8:
                    99:9d:4f:2b:8f:2a:10:fa:35:79:ec:18:a6:2f:cc:
                    d5:a2:b1:65:5b:67:82:91:7c:e7:c4:c1:6a:93:18:
                    18:3a:77:81:23:ef:07:05:4b:15:50:d5:9f:15:68:
                    65:e8:d5:db:e1:33:bf:ce:c1:75:66:7a:e3:5e:2f:
                    e0:02:d3:65:1d:36:14:46:c2:f4:37:7b:1c:3e:2a:
                    8f:38:b1:01:f3:a4:9d:aa:95:88:8d:cf:6a:07:2c:
                    65:80:a5:a8:d4:3c:82:44:b1:24:b1:5a:e0:05:60:
                    cd:f9:53:e3:dc:d3:84:07:0e:b0:7b:81:f2:a7:78:
                    ab:a6:eb:55:bc:dd:45:91:a3:f9:1d:7d:e6:c2:0b:
                    6f:fc:8b:53:bd:37:d2:55:b3:31:fa:66:ee:62:cd:
                    b2:2f:38:1d:e6:52:06:dd:11:81:bd:d3:71:af:af:
                    92:ae:b0:6b:ff:a8:aa:e7:8d:28:0a:03:3e:70:0f:
                    12:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:20:E8:AF:F4:04:92:B8:75:78:01:3D:CC:03:82:67:93:3E:74:56
            X509v3 Authority Key Identifier:
                keyid:9C:2E:73:CC:95:F1:D4:82:A4:D9:A3:1A:D8:76:FA:F4:B2:75:30:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/323830343a343538383a3a2f33322d313238203d3e20323636393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4588::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:d9:bc:ad:6d:a4:62:95:2c:bb:07:3d:d3:4f:ee:c1:67:f8:
         33:45:37:e8:dc:ca:18:08:df:11:18:65:55:1d:e4:29:84:ff:
         6e:66:eb:02:84:4b:95:c5:67:09:33:53:8f:ab:c9:ff:ab:f8:
         43:b2:9c:b7:ea:2d:9c:a7:83:a6:cf:f0:56:2f:1a:84:3f:0e:
         d3:16:12:d0:89:77:7f:d6:f5:6e:99:56:45:a1:4d:e8:09:9b:
         46:2b:02:96:39:d7:99:93:c6:05:c9:5c:cd:ca:60:a7:5e:ca:
         c8:70:6d:80:4d:e7:10:87:19:2d:54:13:2f:f8:e9:c7:17:8a:
         40:5f:2e:0f:1d:a1:ac:2e:60:57:78:f6:c8:d8:f7:9f:cd:29:
         53:b2:66:53:eb:c9:cd:3c:dd:84:30:ce:b5:3c:af:5c:66:e1:
         d9:61:a1:d2:ec:fe:8e:cc:19:92:2e:4a:10:8a:21:98:bd:c4:
         8a:64:0e:da:6c:20:64:1b:a6:7d:0f:25:5c:d2:aa:be:3b:21:
         7b:9a:6a:eb:0c:d9:f3:51:4f:cf:7d:fa:71:a7:fd:33:40:32:
         69:7c:65:17:5d:d9:13:f8:e4:df:12:56:aa:97:2a:2e:70:e2:
         0e:46:3a:bc:f8:be:53:1b:c0:9f:37:63:8e:c1:64:03:be:76:
         cb:92:3c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:19:13 2025 by rpki-client