Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/323830343a346638343a3a2f33332d3333203d3e20323638333331.roa
File:                     323830343a346638343a3a2f33332d3333203d3e20323638333331.roa (raw, json)
Hash identifier:          N/ZrbXlgEHRYyEtzOEOmPcSJMAp712KOAkhCXWIrTo0=
Subject key identifier:   ED:EE:B8:1C:78:FC:8B:D9:E2:F8:F8:88:E8:79:87:87:C3:FA:0B:45
Certificate issuer:       /CN=BF9D09185198062395625CCDCA55DA0C823BC527
Certificate serial:       1F0C6B0AC2EBD496653AC8744396CA5F0C3DCFA8
Authority key identifier: BF:9D:09:18:51:98:06:23:95:62:5C:CD:CA:55:DA:0C:82:3B:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9D09185198062395625CCDCA55DA0C823BC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/323830343a346638343a3a2f33332d3333203d3e20323638333331.roa
Signing time:             Fri 07 Mar 2025 00:00:55 +0000
ROA not before:           Thu 06 Mar 2025 23:55:55 +0000
ROA not after:            Fri 06 Mar 2026 00:00:55 +0000
asID:                     268331
IP address blocks:        2804:4f84::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/BF9D09185198062395625CCDCA55DA0C823BC527.crl
                          rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/BF9D09185198062395625CCDCA55DA0C823BC527.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9D09185198062395625CCDCA55DA0C823BC527.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 19:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0c:6b:0a:c2:eb:d4:96:65:3a:c8:74:43:96:ca:5f:0c:3d:cf:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF9D09185198062395625CCDCA55DA0C823BC527
        Validity
            Not Before: Mar  6 23:55:55 2025 GMT
            Not After : Mar  6 00:00:55 2026 GMT
        Subject: CN=EDEEB81C78FC8BD9E2F8F888E8798787C3FA0B45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3f:7e:d7:cb:69:9a:fa:dc:99:98:ff:3a:8a:
                    c8:28:45:ec:5e:c3:5f:94:b0:26:c2:a9:48:62:fd:
                    b8:f5:38:6a:23:33:92:2f:78:20:80:8d:dd:3a:0e:
                    d6:c4:dd:bf:d4:18:49:52:63:70:0d:3b:1a:31:b8:
                    1f:ff:7f:2c:1a:2a:ea:f4:3e:50:b6:10:50:58:86:
                    65:65:c4:82:fb:6c:6f:d4:2d:78:68:17:e1:7f:18:
                    ae:2f:33:e2:89:c1:51:8d:07:7f:e1:5a:04:46:0d:
                    6a:09:29:b0:ce:c5:10:a1:2e:8f:a5:81:ea:97:4b:
                    2e:24:9b:4f:73:92:fd:48:4d:94:0b:cd:e3:e7:8a:
                    4e:84:c8:51:cd:52:d3:b4:8b:dc:60:ff:47:5b:e9:
                    ca:23:f7:b4:ce:10:83:27:85:fd:2f:6a:d7:bc:15:
                    98:82:12:c6:c0:f6:b8:35:3d:bb:ba:ec:01:95:5e:
                    15:d6:9d:59:a3:14:d2:02:a2:1e:eb:3d:87:2f:80:
                    ca:d8:69:7e:bf:d8:c0:e9:91:f8:2f:06:77:64:49:
                    d1:b1:26:13:56:b2:fe:b3:8f:81:57:fe:bf:3a:6c:
                    35:9f:74:43:6f:cd:78:0d:a4:a9:d9:68:b7:c1:fd:
                    eb:6c:00:fc:34:33:ea:64:37:b1:3b:18:11:d8:5a:
                    0c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EE:B8:1C:78:FC:8B:D9:E2:F8:F8:88:E8:79:87:87:C3:FA:0B:45
            X509v3 Authority Key Identifier:
                keyid:BF:9D:09:18:51:98:06:23:95:62:5C:CD:CA:55:DA:0C:82:3B:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/BF9D09185198062395625CCDCA55DA0C823BC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9D09185198062395625CCDCA55DA0C823BC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/323830343a346638343a3a2f33332d3333203d3e20323638333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f84::/33

    Signature Algorithm: sha256WithRSAEncryption
         84:fa:b5:93:0a:0d:22:33:32:d1:b1:af:e2:12:c7:42:bf:65:
         32:c8:03:dc:e7:4a:2b:dc:9d:da:2d:b6:29:d8:c9:33:51:19:
         d7:7d:6f:c4:9c:f1:36:d6:68:2f:76:ce:d6:85:2c:56:7d:7e:
         81:30:85:26:0f:51:68:82:a5:ca:3c:f7:83:5a:2d:b3:bf:45:
         ba:7e:a5:83:1f:1e:1c:d5:2d:05:73:c8:04:d7:64:3e:ec:2d:
         ad:0a:60:23:66:e8:3a:ef:cb:01:ea:52:db:8b:0a:34:e6:ed:
         16:c3:ae:74:fe:c4:23:bb:d4:87:c3:2e:d1:2a:1b:ae:a6:da:
         ec:60:89:ae:3c:f4:49:18:6a:f9:3d:93:4f:fd:87:58:4d:39:
         cd:1b:ba:e5:12:0e:5c:32:e5:9a:dd:7e:ae:1c:4d:dd:57:25:
         33:ab:dd:c1:35:08:ad:d0:9c:08:4e:13:85:e0:d8:fa:fe:b5:
         4f:97:97:6c:b8:12:7f:5b:7c:e7:e1:93:97:a9:61:ce:d3:76:
         2d:2f:43:b9:41:c4:ea:c4:13:41:19:a6:05:e3:04:46:d0:bb:
         08:3d:a4:9f:c5:65:c2:ac:7b:60:25:c2:00:8c:52:ab:38:a0:
         dd:9b:98:1f:96:65:11:bb:3f:eb:da:c3:51:4a:8f:ab:db:18:
         83:e6:1f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:55:16 2025 by rpki-client