Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/323830343a376134633a3a2f33322d3332203d3e20323731333633.roa
File:                     323830343a376134633a3a2f33322d3332203d3e20323731333633.roa (raw, json)
Hash identifier:          Pn+ooSlqJ7pGShinNVjdo+76gL+/8JJ5YGNEPP5T+k8=
Subject key identifier:   E3:47:F3:72:F0:08:89:BF:52:D0:40:CC:8C:9B:5F:B8:D8:5D:F0:9B
Certificate issuer:       /CN=CB8B5B9F537D71AAF7422F603CAD3715D99F65F2
Certificate serial:       258F32445A4BCF7CFA00BCF7A4ECD14BA3F3A84F
Authority key identifier: CB:8B:5B:9F:53:7D:71:AA:F7:42:2F:60:3C:AD:37:15:D9:9F:65:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/323830343a376134633a3a2f33322d3332203d3e20323731333633.roa
Signing time:             Mon 17 Mar 2025 23:55:56 +0000
ROA not before:           Mon 17 Mar 2025 23:50:56 +0000
ROA not after:            Mon 16 Mar 2026 23:55:56 +0000
asID:                     271363
IP address blocks:        2804:7a4c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.crl
                          rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:11:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:8f:32:44:5a:4b:cf:7c:fa:00:bc:f7:a4:ec:d1:4b:a3:f3:a8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8B5B9F537D71AAF7422F603CAD3715D99F65F2
        Validity
            Not Before: Mar 17 23:50:56 2025 GMT
            Not After : Mar 16 23:55:56 2026 GMT
        Subject: CN=E347F372F00889BF52D040CC8C9B5FB8D85DF09B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:99:6a:fb:8e:68:8f:63:7d:63:81:f5:71:07:
                    2b:fb:d8:76:f6:8c:ed:0d:a7:aa:fa:10:a5:af:cb:
                    83:6a:ce:88:0a:78:d5:4e:1a:d7:11:32:15:61:7c:
                    f4:ad:d9:4c:43:6a:cd:08:26:f1:59:29:e2:35:80:
                    3a:68:89:f5:b9:54:cf:04:0d:e2:9d:17:fd:4a:63:
                    83:3e:97:4c:c3:d2:38:00:b2:18:dc:68:cc:75:8d:
                    3d:da:d3:44:ef:d0:91:45:b7:f1:ff:63:f5:2c:48:
                    e7:89:f4:e9:17:9f:25:d8:81:68:83:ce:a0:5b:8d:
                    8a:a5:68:f3:c4:9c:c9:25:e6:f6:6b:79:e5:42:fa:
                    76:50:f3:92:bd:ee:8a:1c:a7:d5:22:ea:d5:34:30:
                    b1:b8:ab:56:fa:48:c9:7d:6c:ff:da:ec:19:a3:88:
                    17:36:f4:10:76:48:84:b4:53:5a:12:eb:50:e0:79:
                    0f:79:18:67:a6:a2:5f:17:f2:7f:ce:84:95:39:cf:
                    ab:ca:f2:09:e0:89:44:f7:3f:0b:e1:58:67:f4:88:
                    24:e2:37:dd:b0:f4:5d:66:e1:c4:0b:8b:fb:ae:5a:
                    2a:0b:22:8d:69:d6:85:63:0e:73:9e:f3:30:69:d9:
                    3d:d8:fd:cb:ee:49:ea:25:06:08:ee:f6:aa:08:c5:
                    cf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:47:F3:72:F0:08:89:BF:52:D0:40:CC:8C:9B:5F:B8:D8:5D:F0:9B
            X509v3 Authority Key Identifier:
                keyid:CB:8B:5B:9F:53:7D:71:AA:F7:42:2F:60:3C:AD:37:15:D9:9F:65:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/323830343a376134633a3a2f33322d3332203d3e20323731333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:f1:51:b0:6f:88:b7:09:82:34:a0:28:6e:d8:ab:c4:10:62:
         6e:7b:86:4c:35:4b:b4:88:76:07:b8:90:d7:4d:5e:68:f0:d7:
         09:7e:eb:12:4b:25:9d:5f:bd:2f:eb:eb:0d:bc:aa:2c:d3:1b:
         7a:a8:98:ca:0e:ad:4d:01:e2:87:92:38:4e:c4:03:8e:bd:92:
         d4:cf:28:7a:92:75:95:3b:9f:11:d9:63:e8:92:2c:12:82:f2:
         f1:39:e7:4b:97:ca:df:a7:b3:de:19:35:7c:5a:43:a0:24:9f:
         05:bb:bf:22:ee:1e:51:83:05:56:be:f0:9e:ad:b0:9a:93:2e:
         dd:ab:ce:d5:ee:8d:a5:d2:f2:1c:9d:24:24:ab:2f:81:ed:e5:
         a4:66:88:fc:ed:43:c1:d2:f2:72:b4:f8:3e:ac:95:77:ac:78:
         51:30:fe:03:4e:f1:54:83:95:4a:f9:5f:d5:6a:22:e8:e0:08:
         0e:4c:2c:9a:61:d9:54:b1:42:d0:f5:6a:75:bf:cb:7b:3c:a4:
         b8:a4:a8:ce:c8:60:f7:3a:03:8f:7e:b2:4b:a1:b9:ed:0f:4e:
         63:2d:1a:da:21:d3:18:66:33:61:25:8a:8d:21:e4:ea:1f:0a:
         d4:47:0d:91:72:6f:fe:3e:32:d7:c2:95:fc:9c:59:e1:3f:09:
         cc:86:dc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:42:43 2025 by rpki-client