Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/323830343a373864303a3a2f33322d313238203d3e20323731323637.roa
File:                     323830343a373864303a3a2f33322d313238203d3e20323731323637.roa (raw, json)
Hash identifier:          200k2U6xETPUXwy7eSmBurBZpN5pAdzzvml9hy+hpYE=
Subject key identifier:   F4:45:14:86:B0:F7:A0:F3:CC:20:6C:C4:CF:FA:DB:40:06:FB:45:02
Certificate issuer:       /CN=8BAF9C211E3CB74E1F1681A900A74E3AF81D715E
Certificate serial:       38DADBE7D705AC6360556393D15D8C7F4078F773
Authority key identifier: 8B:AF:9C:21:1E:3C:B7:4E:1F:16:81:A9:00:A7:4E:3A:F8:1D:71:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/323830343a373864303a3a2f33322d313238203d3e20323731323637.roa
Signing time:             Thu 03 Apr 2025 13:02:28 +0000
ROA not before:           Thu 03 Apr 2025 12:57:28 +0000
ROA not after:            Thu 02 Apr 2026 13:02:28 +0000
asID:                     271267
IP address blocks:        2804:78d0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.crl
                          rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 22:26:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:da:db:e7:d7:05:ac:63:60:55:63:93:d1:5d:8c:7f:40:78:f7:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BAF9C211E3CB74E1F1681A900A74E3AF81D715E
        Validity
            Not Before: Apr  3 12:57:28 2025 GMT
            Not After : Apr  2 13:02:28 2026 GMT
        Subject: CN=F4451486B0F7A0F3CC206CC4CFFADB4006FB4502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4d:07:fd:5a:69:4e:6e:ff:7a:1b:ba:30:84:
                    3e:84:16:da:c1:28:ec:67:bb:59:dc:61:0d:5b:be:
                    08:48:b1:16:6d:ac:37:30:c8:c3:fe:f5:30:ad:9c:
                    f5:64:6c:a8:e0:fa:7c:6b:76:ac:2e:e2:46:55:7d:
                    b5:c4:73:2d:7a:17:28:87:3d:5d:da:ec:08:61:6d:
                    bb:5d:7a:0d:9a:b5:1e:75:4b:a0:12:85:0b:97:95:
                    eb:69:b0:0a:3a:5a:bd:41:31:24:3d:59:88:c4:be:
                    41:51:02:97:d6:25:33:7a:89:fe:0c:0c:8f:b5:10:
                    47:1e:b6:a7:11:b5:fd:9c:3b:2a:86:a5:dc:3e:5e:
                    36:3e:35:a7:ec:62:5a:3b:16:e9:70:4a:53:f3:b9:
                    1d:e0:53:ca:59:b2:65:e5:bc:78:fb:c6:e1:03:7a:
                    79:d6:63:87:c9:9d:fe:fa:3c:67:75:78:e3:0f:33:
                    84:fc:bc:19:f7:44:58:d2:be:98:f1:e5:a3:89:d6:
                    16:9f:f2:c4:95:72:a6:ba:5f:8c:6d:80:5b:58:7d:
                    ec:dc:23:0b:c3:25:88:78:2f:4f:64:03:22:cc:73:
                    38:34:d8:09:1a:ac:78:83:98:ce:a8:b8:c2:1c:bb:
                    30:d6:39:8b:95:b8:01:f4:40:ad:d2:a0:fc:e5:68:
                    0f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:45:14:86:B0:F7:A0:F3:CC:20:6C:C4:CF:FA:DB:40:06:FB:45:02
            X509v3 Authority Key Identifier:
                keyid:8B:AF:9C:21:1E:3C:B7:4E:1F:16:81:A9:00:A7:4E:3A:F8:1D:71:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/323830343a373864303a3a2f33322d313238203d3e20323731323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:6d:a0:9f:e5:94:29:d4:88:43:f8:54:6f:43:b1:a4:96:e3:
         9b:00:16:7a:f9:ec:cb:c3:27:bf:8f:6f:a1:96:59:2e:65:c6:
         b2:30:5b:93:a2:f7:05:d5:96:f5:a9:75:09:a8:9e:0a:29:3f:
         8a:90:60:1b:c1:ff:99:73:ce:2a:3a:83:12:4a:4e:c4:55:94:
         cc:b5:1d:61:41:36:87:32:36:81:8e:6b:4e:fa:3e:cb:bc:2e:
         fc:23:76:a4:67:b0:61:71:b7:f1:31:aa:44:d4:27:c4:79:e0:
         dd:3b:0c:8d:3f:78:ce:c9:9c:77:6e:fb:c7:e1:25:93:4d:9e:
         40:b1:c8:15:b8:30:1f:90:98:df:4a:27:c0:d6:db:2e:2f:48:
         e7:d1:47:da:92:12:e3:29:34:8d:ce:e2:38:44:3e:cb:2a:d4:
         60:96:11:5d:cc:57:23:54:cd:80:a5:ef:85:68:3b:9f:27:ab:
         01:05:cf:9b:2c:2f:fe:c4:87:e9:63:74:cd:c3:9c:6d:5c:bc:
         20:29:fd:ad:b2:69:7c:cd:e5:85:d8:eb:b8:9c:99:14:26:75:
         0a:a0:a6:81:e8:7b:df:8f:eb:6f:41:7f:e6:89:c2:c5:54:60:
         8e:24:e9:77:d3:e5:70:ad:c2:8f:01:f5:ce:f1:91:48:89:74:
         7a:a3:ce:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:17:06 2025 by rpki-client