Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a633030303a3a2f33342d3334203d3e20323633353138.roa
File:                     323830343a313332343a633030303a3a2f33342d3334203d3e20323633353138.roa (raw, json)
Hash identifier:          rz+bgIHryw0EcxEC2kYW3v7FyyWnZ/RJoG8tGx8ZO+4=
Subject key identifier:   BB:8F:D1:4F:1F:9C:B5:CA:DA:AE:37:1C:A9:88:EF:E9:30:4E:51:87
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       45A95F9DFE3B754EB36D394EBE426BFF8D6434D8
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a633030303a3a2f33342d3334203d3e20323633353138.roa
Signing time:             Thu 23 Jan 2025 20:46:18 +0000
ROA not before:           Thu 23 Jan 2025 20:41:18 +0000
ROA not after:            Thu 22 Jan 2026 20:46:18 +0000
asID:                     263518
IP address blocks:        2804:1324:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 11:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a9:5f:9d:fe:3b:75:4e:b3:6d:39:4e:be:42:6b:ff:8d:64:34:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Jan 23 20:41:18 2025 GMT
            Not After : Jan 22 20:46:18 2026 GMT
        Subject: CN=BB8FD14F1F9CB5CADAAE371CA988EFE9304E5187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b6:a5:ce:78:c5:7c:cf:da:55:df:83:7d:14:
                    f8:20:8a:a5:ef:c2:c1:78:98:4b:0a:da:d4:da:43:
                    d6:e6:7a:14:3f:02:4f:47:2f:c5:64:54:3d:a5:1b:
                    1f:e3:a9:7b:72:9f:4a:62:52:d3:b2:61:b0:63:2b:
                    06:68:a4:d8:92:6d:7a:cc:68:f5:b0:9f:48:1c:92:
                    cf:1d:65:5f:d2:57:10:bc:a2:d0:a3:73:54:5d:f3:
                    0d:e0:39:49:8f:73:e1:ff:1e:b4:37:7b:f0:0a:7d:
                    ae:c1:c0:59:00:11:18:12:bc:55:d0:dc:0e:0e:f8:
                    c4:56:ce:34:a6:8a:f2:1b:2b:8c:9e:90:09:c9:2f:
                    65:e0:0a:d1:26:73:9b:b3:78:e1:18:64:ed:05:f6:
                    4c:cf:f6:36:ff:b5:33:cb:25:23:0e:22:7c:e0:53:
                    2a:6e:08:6d:a7:33:f6:f1:39:35:c7:b0:8b:78:98:
                    bc:d3:93:01:58:29:48:66:cd:d0:5b:01:3b:d0:12:
                    4c:c5:5c:3b:59:50:24:0c:4f:b0:9c:b2:0f:4c:3e:
                    56:6e:a7:ca:20:1b:9d:34:88:e1:24:17:85:8d:3d:
                    ac:20:a3:6a:54:61:8f:2e:67:5b:fa:98:b0:d7:08:
                    f4:f6:7d:4c:1e:fa:2e:8f:60:7b:c0:78:00:96:a9:
                    1b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8F:D1:4F:1F:9C:B5:CA:DA:AE:37:1C:A9:88:EF:E9:30:4E:51:87
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a633030303a3a2f33342d3334203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1324:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         57:5f:53:71:d4:46:94:b9:3e:0f:27:cd:ae:5f:20:d4:b6:52:
         c5:84:bc:f8:12:c0:ca:f4:dc:6c:e3:5d:03:21:6b:d7:10:e0:
         94:c7:88:85:38:cd:f0:77:73:63:f2:25:87:f6:aa:60:75:72:
         0e:97:02:2d:e0:0f:9b:cf:85:05:9e:4a:d3:69:59:25:04:91:
         c1:da:db:4c:e5:ef:9e:6a:dc:d6:3d:52:38:90:cf:f0:95:ae:
         22:dd:56:21:e5:c6:37:62:f2:b0:ae:95:ba:6e:08:34:90:af:
         d3:6f:54:d5:30:79:e1:d0:6f:29:2d:4a:51:57:8f:8e:f8:b2:
         01:99:45:ff:52:e4:e9:e3:ec:b1:4e:e0:4d:bc:07:1c:73:26:
         b4:df:2f:a6:ba:da:6e:c6:f0:da:30:e1:2b:cb:ef:15:d0:23:
         92:ac:9b:7c:e5:aa:c3:ed:78:12:39:46:92:e5:c5:a5:76:97:
         92:dd:11:07:c3:6b:8c:e4:1c:ac:ac:83:20:79:4c:55:54:c9:
         82:db:50:af:04:7c:42:f0:25:97:fe:83:dd:0b:57:fe:09:46:
         dc:07:33:81:17:3e:25:a1:2e:9d:f0:dd:f8:1c:66:77:8e:9f:
         3f:b7:07:21:d7:e5:cc:47:69:e6:6a:7f:7a:32:85:df:a1:b8:
         b7:2c:a4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:59 2025 by rpki-client