Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/323830343a366136343a3a2f33322d313238203d3e20323730333333.roa
File:                     323830343a366136343a3a2f33322d313238203d3e20323730333333.roa (raw, json)
Hash identifier:          Ol+F4/QiSr5GVGNCjefMDXBFA0hXacRJumxsitns0N4=
Subject key identifier:   9B:FD:C8:3B:FD:8F:9B:BC:27:EF:C3:96:F0:2E:14:AE:A8:10:8E:09
Certificate issuer:       /CN=8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036
Certificate serial:       1E669BEDC68D017DC058FA921705B7666B24738A
Authority key identifier: 8E:42:BB:11:AC:6A:73:0E:A1:2F:BD:1A:B0:5B:B6:7B:0C:4F:20:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/323830343a366136343a3a2f33322d313238203d3e20323730333333.roa
Signing time:             Fri 23 Aug 2024 19:00:48 +0000
ROA not before:           Fri 23 Aug 2024 18:55:48 +0000
ROA not after:            Fri 22 Aug 2025 19:00:48 +0000
asID:                     270333
IP address blocks:        2804:6a64::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.crl
                          rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 23:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:66:9b:ed:c6:8d:01:7d:c0:58:fa:92:17:05:b7:66:6b:24:73:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036
        Validity
            Not Before: Aug 23 18:55:48 2024 GMT
            Not After : Aug 22 19:00:48 2025 GMT
        Subject: CN=9BFDC83BFD8F9BBC27EFC396F02E14AEA8108E09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3f:5f:6e:90:7a:a3:18:7b:f6:15:07:a3:35:
                    e8:7b:d3:cc:b8:53:2d:8a:76:24:62:e9:ff:86:d0:
                    29:c0:bc:63:4f:a2:ab:f7:d9:39:f6:5b:1a:62:b6:
                    9c:cd:2a:98:25:c6:a9:e3:93:51:1b:c8:6b:f9:c5:
                    92:e7:4f:f9:e5:2d:03:28:19:9a:10:e9:00:2e:f2:
                    d9:80:b3:97:cd:01:b8:5b:27:58:39:21:23:76:33:
                    35:48:ce:7b:89:4b:2e:e8:f3:1b:a5:e7:ad:82:02:
                    d6:e6:e0:4d:52:6b:0c:f5:49:4e:e6:8f:ac:74:33:
                    62:93:2f:68:4f:07:89:c4:6b:33:8b:8f:fc:39:ed:
                    61:bb:40:73:5f:d0:22:90:ff:0b:f4:fd:2c:25:88:
                    53:c3:e9:db:2f:47:31:6d:12:25:cb:93:2c:c8:6e:
                    1d:51:58:ee:8f:e1:02:48:23:98:ec:6f:6f:bb:30:
                    15:c1:89:15:d4:7e:54:9c:b7:bb:f4:4d:9b:48:f3:
                    f4:9f:51:c7:69:6a:2e:a8:af:06:c4:54:92:97:85:
                    1f:ee:a1:b5:9b:aa:e9:2c:63:f6:00:68:b6:41:a8:
                    dc:d1:c1:92:4a:3a:37:ba:7b:bb:c8:9d:79:51:d4:
                    57:9f:95:fe:09:93:97:2d:62:a6:43:ee:b7:33:d7:
                    6d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FD:C8:3B:FD:8F:9B:BC:27:EF:C3:96:F0:2E:14:AE:A8:10:8E:09
            X509v3 Authority Key Identifier:
                keyid:8E:42:BB:11:AC:6A:73:0E:A1:2F:BD:1A:B0:5B:B6:7B:0C:4F:20:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/323830343a366136343a3a2f33322d313238203d3e20323730333333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a64::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:8e:40:f0:c0:22:84:29:d3:7a:b7:08:6d:27:d2:39:a8:38:
         8f:a9:e5:70:8a:23:af:c4:97:53:94:77:97:91:5e:83:a3:ea:
         07:2a:51:2d:bd:ae:9e:8b:ab:28:ff:af:a2:67:75:5a:af:cf:
         39:63:11:17:6f:10:89:6d:0d:4b:46:a2:12:3d:50:ea:20:f2:
         29:08:94:0f:9a:82:1a:18:8d:b2:66:b6:40:6e:18:5d:8d:2e:
         92:54:32:d4:68:dd:60:17:64:4f:fe:6d:2e:da:f6:b3:8f:74:
         c4:5f:8d:8e:35:6b:48:9d:20:2e:ed:f9:eb:48:7c:98:2a:0d:
         70:6e:e4:d0:c1:12:cc:7a:5c:39:6d:bc:3e:3f:68:38:65:62:
         72:10:f8:e3:47:36:48:24:a0:9e:32:7a:2c:c2:79:b0:70:f6:
         10:e2:b2:93:88:18:c9:40:d2:e9:0e:08:51:ff:85:b7:bf:4a:
         b9:d0:bc:65:4e:3e:9f:db:4b:86:54:1b:65:fe:ef:5e:ac:f1:
         11:8b:8a:69:b0:5c:65:0e:34:5c:78:f4:4c:be:c0:ae:6d:0e:
         8a:f6:f7:8c:b8:83:65:98:0d:bd:11:97:8e:0d:60:01:54:65:
         e0:64:1e:6b:c9:21:bb:7f:52:fd:91:bc:64:2b:29:24:eb:27:
         16:fa:d1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:09:09 2025 by rpki-client