Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/323830313a38303a35303a3a2f34382d3438203d3e203131383032.roa
File:                     323830313a38303a35303a3a2f34382d3438203d3e203131383032.roa (raw, json)
Hash identifier:          GST6j0TgIthr2c5xVub1d8IdD0p6xzjTZLNG1bBJw84=
Subject key identifier:   01:D2:23:28:4A:17:71:B9:55:BE:A8:05:72:21:5D:31:E4:2C:D9:59
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       02A5396CCE159B41AA4E7AABEBCB6BD88D110E1C
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/323830313a38303a35303a3a2f34382d3438203d3e203131383032.roa
Signing time:             Tue 26 Nov 2024 21:47:59 +0000
ROA not before:           Tue 26 Nov 2024 21:42:59 +0000
ROA not after:            Tue 25 Nov 2025 21:47:59 +0000
asID:                     11802
IP address blocks:        2801:80:50::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:39:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a5:39:6c:ce:15:9b:41:aa:4e:7a:ab:eb:cb:6b:d8:8d:11:0e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Nov 26 21:42:59 2024 GMT
            Not After : Nov 25 21:47:59 2025 GMT
        Subject: CN=01D223284A1771B955BEA80572215D31E42CD959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:38:e5:19:84:32:f4:de:1e:44:de:de:db:4d:
                    0c:0f:45:33:4a:aa:c4:37:03:47:88:f2:bd:7f:80:
                    75:b3:15:09:91:33:9c:d1:d6:e9:8f:f7:12:49:fd:
                    97:42:13:22:c5:ab:e5:0f:e5:21:e5:9c:ac:97:15:
                    93:02:8c:57:bc:19:eb:d0:2c:3f:d6:b6:a2:8e:7c:
                    b2:f9:3c:02:d9:9e:96:f7:ce:56:a7:19:8a:a1:49:
                    be:cd:1e:1c:3e:90:4e:76:4a:73:b3:2f:aa:d9:7f:
                    c2:9a:92:37:2c:d4:6d:d9:30:5a:ee:53:45:4f:35:
                    67:70:a6:c5:d2:af:54:e6:4b:1c:d9:ea:c9:c8:3f:
                    25:cd:98:61:fa:21:1c:8b:e2:25:49:3f:f1:4b:15:
                    fc:e9:dc:bb:10:6b:8c:6f:5d:0b:35:0b:f1:d1:36:
                    0b:5c:a5:88:d3:5e:14:08:c2:82:e3:ec:91:9f:5c:
                    56:22:8c:9f:5d:a1:8f:a4:75:d9:3b:6c:d4:70:4c:
                    a8:3b:eb:37:81:16:c2:d1:f7:65:e2:ab:ea:13:9e:
                    05:4f:85:29:2c:da:f4:5d:2a:b2:4c:75:ad:9c:96:
                    7e:ac:be:a0:4f:da:36:9a:4b:bd:79:e2:f4:c3:88:
                    08:ea:ca:20:01:e6:85:c2:13:89:98:c8:8b:94:8f:
                    8a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D2:23:28:4A:17:71:B9:55:BE:A8:05:72:21:5D:31:E4:2C:D9:59
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/323830313a38303a35303a3a2f34382d3438203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:50::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:44:78:4d:b6:bc:1f:06:db:db:09:ff:86:a9:09:9a:74:4f:
         eb:b0:ff:f7:99:86:8a:fa:88:02:20:27:d7:bb:72:bd:98:8d:
         92:2c:bb:9b:d2:bf:e9:f6:01:f8:85:d8:69:43:61:d4:0f:7a:
         89:67:9f:65:ee:e9:41:e9:70:6b:2c:14:3d:2c:ef:55:44:95:
         24:df:b4:4f:82:ed:0c:76:b8:7e:0b:f1:c9:fc:94:40:3c:73:
         a5:7e:16:71:1d:9d:ad:2a:6f:0d:4e:4e:b4:1a:63:c0:9d:d2:
         ec:73:58:dd:59:54:14:f8:26:89:ca:8b:b2:f3:ca:81:5e:47:
         a4:7e:46:61:e4:aa:88:27:cc:ff:8e:89:aa:9a:fd:cd:21:c3:
         62:7b:a3:8a:51:77:4d:7b:53:64:e8:34:e4:fa:79:4e:67:f5:
         cb:dd:75:ee:17:e6:11:b8:b6:9b:f2:e0:e6:b2:1d:13:13:9d:
         53:65:bd:3a:aa:65:be:4c:e6:1f:8d:b0:96:b7:62:6a:b6:91:
         96:b3:75:1b:2f:6d:57:ed:38:a3:fb:27:4a:05:43:e1:6b:13:
         a7:25:04:3c:46:e2:60:2d:94:bb:99:45:ed:c8:47:e4:9c:cb:
         1a:d1:51:57:68:d8:f4:bb:9f:ed:b7:17:bc:34:95:45:8f:ee:
         4c:56:ac:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:57:27 2025 by rpki-client