Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          8hBcWqQtbwcQgi5habFIFdYS+mXC3U+PpJwKcb+mszw=
Subject key identifier:   8F:A9:E6:7B:52:7A:72:23:2E:E9:BF:89:39:E0:7F:25:AB:58:F7:48
Certificate issuer:       /CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
Certificate serial:       404449C7105B1917ABFD8B1309B81B005153FC53
Authority key identifier: D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Sat 12 Apr 2025 00:25:57 +0000
ROA not before:           Sat 12 Apr 2025 00:20:57 +0000
ROA not after:            Sat 11 Apr 2026 00:25:57 +0000
asID:                     274726
IP address blocks:        2804:92a8::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.crl
                          rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 04:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:44:49:c7:10:5b:19:17:ab:fd:8b:13:09:b8:1b:00:51:53:fc:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
        Validity
            Not Before: Apr 12 00:20:57 2025 GMT
            Not After : Apr 11 00:25:57 2026 GMT
        Subject: CN=8FA9E67B527A72232EE9BF8939E07F25AB58F748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:68:7b:24:9c:92:8f:bb:0b:48:9f:46:4c:
                    68:36:bd:8e:b6:fe:6d:06:0c:d8:e6:49:9d:01:c4:
                    46:66:09:b6:59:49:82:d8:69:84:63:ed:b4:96:26:
                    db:81:40:ac:e0:bc:97:76:18:d4:0a:f6:f3:a0:51:
                    13:1a:23:d5:b6:60:38:39:d5:bd:d6:2f:1e:17:64:
                    21:8f:75:64:3b:2c:63:11:fc:31:03:64:ce:e6:e7:
                    c1:f1:83:ea:a3:87:57:26:43:2c:22:e9:fc:a7:9c:
                    6b:16:cd:97:04:40:6e:58:5c:a3:94:44:47:b7:2c:
                    65:5f:6b:cd:d6:95:82:82:64:01:e2:84:d9:2e:71:
                    09:49:82:81:c1:d7:72:de:5b:f9:ad:25:7b:80:2f:
                    e7:2f:a6:a7:aa:da:77:50:65:63:a3:75:a8:bb:a8:
                    1c:b6:e1:6f:04:1c:f9:42:4b:8a:63:8b:b8:81:36:
                    13:ba:c5:72:30:fd:c1:37:bc:c9:d0:6d:7f:d7:16:
                    d7:5d:78:a0:4a:9c:00:df:d0:f1:80:fa:84:0e:1e:
                    0d:d9:cc:f0:50:2d:81:6a:64:d4:6e:a0:31:2e:42:
                    03:ed:96:ca:f1:35:86:f8:8d:ce:5c:e3:2c:9c:27:
                    d8:d7:a1:39:f1:c4:af:8e:22:3e:9b:27:4f:9e:b4:
                    dc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A9:E6:7B:52:7A:72:23:2E:E9:BF:89:39:E0:7F:25:AB:58:F7:48
            X509v3 Authority Key Identifier:
                keyid:D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8::/36

    Signature Algorithm: sha256WithRSAEncryption
         1e:3b:9e:5d:50:70:cf:3b:39:c6:59:3c:d6:9d:8d:b7:ca:e3:
         b6:01:18:01:ad:96:1c:40:2b:eb:17:7c:6b:0a:52:91:08:a2:
         3a:9e:f4:70:e3:d1:31:24:fa:85:40:be:35:42:92:fd:01:a9:
         57:52:0a:9d:96:1e:25:a5:6d:f1:81:bd:ed:0e:03:e6:65:f9:
         d9:64:02:a6:26:39:a1:07:f5:ea:aa:98:80:e3:d4:ed:33:41:
         c1:b6:cb:d9:10:f1:4c:ac:06:0a:59:2f:67:4e:b3:f9:da:cc:
         07:f1:6d:e2:2c:46:8f:e3:a7:c1:3e:3a:1a:c2:b9:9c:61:b8:
         a0:64:83:8a:06:8e:5f:52:6f:ca:f0:96:2f:83:9f:56:43:d0:
         f8:ad:0d:4a:be:0c:9b:8a:16:dd:78:4e:7f:11:ef:eb:df:6d:
         70:de:ac:1e:ee:a9:e7:2a:30:0e:9a:71:ec:59:79:7e:6f:24:
         60:34:30:d9:0a:14:ff:80:46:cb:89:c5:f1:10:26:28:53:b6:
         d1:d9:20:ad:40:e0:91:57:fb:c4:17:d3:8c:f2:37:05:f4:cb:
         de:d1:20:c7:6a:f4:23:93:d9:22:58:92:4a:b4:69:fb:34:c6:
         80:ad:69:74:b8:f6:76:2b:7a:7e:4c:c3:80:6a:e3:0c:55:c6:
         5c:1a:7c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 18:45:37 2025 by rpki-client