Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/323830343a383332343a3a2f33322d3332203d3e20323732313739.roa
File:                     323830343a383332343a3a2f33322d3332203d3e20323732313739.roa (raw, json)
Hash identifier:          Wy0m0f/evgk3fJawzx51x88qnvg12nCoBLfjPRQ0ABY=
Subject key identifier:   99:44:75:4F:E8:23:9A:21:EB:BC:40:13:86:4F:E7:2F:BD:24:70:90
Certificate issuer:       /CN=64F34AAEF7C614E665668431B50EB7B1981EDD37
Certificate serial:       26074B724E9E7C725DA0F37837B3FB2BA42981B8
Authority key identifier: 64:F3:4A:AE:F7:C6:14:E6:65:66:84:31:B5:0E:B7:B1:98:1E:DD:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64F34AAEF7C614E665668431B50EB7B1981EDD37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/323830343a383332343a3a2f33322d3332203d3e20323732313739.roa
Signing time:             Fri 10 Jan 2025 12:12:57 +0000
ROA not before:           Fri 10 Jan 2025 12:07:57 +0000
ROA not after:            Fri 09 Jan 2026 12:12:57 +0000
asID:                     272179
IP address blocks:        2804:8324::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/64F34AAEF7C614E665668431B50EB7B1981EDD37.crl
                          rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/64F34AAEF7C614E665668431B50EB7B1981EDD37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64F34AAEF7C614E665668431B50EB7B1981EDD37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 07:10:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:07:4b:72:4e:9e:7c:72:5d:a0:f3:78:37:b3:fb:2b:a4:29:81:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64F34AAEF7C614E665668431B50EB7B1981EDD37
        Validity
            Not Before: Jan 10 12:07:57 2025 GMT
            Not After : Jan  9 12:12:57 2026 GMT
        Subject: CN=9944754FE8239A21EBBC4013864FE72FBD247090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d0:f8:ec:71:fd:51:91:00:56:13:0f:7c:d4:
                    8b:04:30:29:ba:19:30:24:6a:e8:2d:6a:e2:f6:3c:
                    7e:3d:19:b8:f7:9b:72:d6:c4:99:48:47:5f:78:a5:
                    c0:f1:73:ed:a6:f7:d6:17:67:e6:b8:8e:b0:74:d7:
                    ee:0c:8b:6e:e9:11:07:2b:bd:86:db:eb:17:04:1c:
                    29:24:60:96:29:21:69:19:7e:11:71:95:a3:12:ab:
                    d0:19:18:7d:c9:db:42:b9:b5:74:7b:7f:08:32:cf:
                    23:93:68:b2:f1:13:0b:bf:49:35:d0:39:8b:72:ba:
                    31:d1:da:4e:7b:50:1f:e4:98:ff:d1:1a:de:8b:b9:
                    cb:0c:40:3e:26:47:f9:94:a6:9e:9a:eb:8f:9f:97:
                    0c:eb:c9:d9:91:d6:ba:78:e4:ce:89:64:ac:3a:74:
                    24:8b:0d:38:a5:d4:7d:05:d8:e1:8b:11:33:f7:62:
                    af:57:fb:31:22:38:2e:98:6d:05:54:cf:23:54:b5:
                    95:fc:4b:4f:a7:ab:6f:72:de:2d:86:e8:bc:02:7f:
                    1d:44:74:b2:12:f7:19:f9:76:77:1a:71:4d:b5:5d:
                    c5:4e:52:3b:b8:a7:cd:a6:71:fa:d8:37:cb:30:a3:
                    11:cd:75:6e:a5:4b:65:e8:fa:2b:20:77:f1:96:37:
                    d4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:44:75:4F:E8:23:9A:21:EB:BC:40:13:86:4F:E7:2F:BD:24:70:90
            X509v3 Authority Key Identifier:
                keyid:64:F3:4A:AE:F7:C6:14:E6:65:66:84:31:B5:0E:B7:B1:98:1E:DD:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/64F34AAEF7C614E665668431B50EB7B1981EDD37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64F34AAEF7C614E665668431B50EB7B1981EDD37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/323830343a383332343a3a2f33322d3332203d3e20323732313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8324::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:ad:33:55:ff:5b:fb:97:ea:2e:c0:7e:66:58:f0:ee:20:82:
         39:c1:bb:7c:11:fa:ae:18:80:58:51:e5:28:fe:79:d5:8c:f9:
         a6:90:2e:87:4f:12:cc:7a:b0:63:e5:35:79:6a:9a:6f:ad:17:
         0d:24:fe:54:62:17:03:55:fb:fc:59:c8:3f:ce:f5:aa:14:0e:
         b5:58:95:e0:83:1b:aa:35:4b:30:55:67:4c:44:4b:89:f9:26:
         d8:44:b1:f0:63:31:e0:13:20:be:47:5b:51:98:04:3c:ec:13:
         34:84:a6:ab:ad:13:0b:f3:99:41:e9:64:2f:46:8d:c8:8e:0d:
         a5:de:de:d7:be:31:87:47:d1:0d:8b:20:a1:73:af:25:50:f4:
         8d:e6:28:5e:7d:41:36:48:48:e1:69:c1:a8:9e:64:50:73:84:
         12:45:67:1f:ce:dc:6b:81:0a:85:b6:bb:27:81:e6:6e:30:32:
         a2:7b:36:86:3b:73:7d:eb:e8:7a:8f:c1:02:a4:64:f9:31:4e:
         63:94:5c:24:cb:ba:3a:5a:20:c3:0e:6d:fd:58:cd:79:86:45:
         1a:9d:c7:ff:04:1b:60:2f:2e:2d:d5:c1:04:8c:a6:5d:1d:ce:
         53:9b:fe:52:dc:de:71:63:9d:5d:79:50:87:76:47:bf:84:df:
         64:99:86:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:47 2025 by rpki-client