Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a3a2f33322d3332203d3e20323636313635.roa
File:                     323830343a336262303a3a2f33322d3332203d3e20323636313635.roa (raw, json)
Hash identifier:          b/zSfjejHFsRMx8TetmMplLQB77Z7mdmst5bvERugKI=
Subject key identifier:   44:62:1A:EF:10:60:2C:24:65:49:51:1A:48:AF:34:69:D1:A0:83:83
Certificate issuer:       /CN=DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C
Certificate serial:       74F8BE6D362ECB6FE6CB34F6146C616DFDC8EFC2
Authority key identifier: DF:B1:65:A5:5B:30:AA:C4:E3:2C:EC:8F:E9:B4:38:6E:F0:EA:8D:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a3a2f33322d3332203d3e20323636313635.roa
Signing time:             Mon 03 Mar 2025 23:56:03 +0000
ROA not before:           Mon 03 Mar 2025 23:51:03 +0000
ROA not after:            Mon 02 Mar 2026 23:56:03 +0000
asID:                     266165
IP address blocks:        2804:3bb0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.crl
                          rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 16:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f8:be:6d:36:2e:cb:6f:e6:cb:34:f6:14:6c:61:6d:fd:c8:ef:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C
        Validity
            Not Before: Mar  3 23:51:03 2025 GMT
            Not After : Mar  2 23:56:03 2026 GMT
        Subject: CN=44621AEF10602C246549511A48AF3469D1A08383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e9:c4:87:5c:8f:12:f1:0f:3f:a9:76:73:bd:
                    fa:f9:77:4b:55:23:c4:43:f3:d2:6d:71:5f:c7:64:
                    30:f8:37:7d:b1:5e:d9:58:99:1d:11:80:01:f7:f3:
                    69:43:dd:2d:fb:fe:d5:55:81:3b:c8:83:6c:9f:2b:
                    ab:a0:4c:85:52:af:55:09:b2:59:f5:4c:e0:30:75:
                    ac:1b:77:9e:4b:0b:8c:6e:fe:5a:76:64:50:5f:95:
                    cc:0c:ef:db:ef:eb:86:20:c8:8b:53:0b:9a:5b:df:
                    4a:c0:fc:7d:c7:1b:da:2a:9e:ca:84:9c:39:e9:e3:
                    5a:f7:95:f6:4c:8f:96:08:bd:3b:c2:6f:89:14:8b:
                    ae:b7:b0:49:c3:f7:55:c8:8f:41:49:14:63:3d:4b:
                    2d:d0:fc:67:4d:dd:dc:a2:b4:4b:03:3d:26:0d:46:
                    0b:29:49:32:e3:ed:8a:70:38:33:ee:3f:93:86:80:
                    5b:a4:5b:d2:5d:71:ef:37:46:c6:b6:f2:b2:53:02:
                    b7:0f:d2:cc:a0:95:e9:f9:6f:db:43:34:7d:b4:35:
                    40:25:3d:5f:a9:6f:1a:94:40:e0:d4:b7:4f:cc:33:
                    1a:93:87:91:28:b5:c7:f9:d7:53:74:d4:d8:30:eb:
                    d1:90:40:ec:7c:78:ca:7e:f5:16:1d:fd:92:32:79:
                    7b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:62:1A:EF:10:60:2C:24:65:49:51:1A:48:AF:34:69:D1:A0:83:83
            X509v3 Authority Key Identifier:
                keyid:DF:B1:65:A5:5B:30:AA:C4:E3:2C:EC:8F:E9:B4:38:6E:F0:EA:8D:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a3a2f33322d3332203d3e20323636313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:0b:bd:c1:1d:e7:89:50:8d:84:f1:b4:1a:82:d3:fa:d9:f5:
         92:0b:00:2d:17:6b:d5:fa:db:55:53:b4:b3:a3:9e:72:e5:95:
         aa:35:0d:e8:81:83:09:f2:f0:4b:87:79:af:47:d2:94:cf:e8:
         be:c1:5c:2a:ec:48:d4:fc:a8:63:da:b8:9a:15:66:49:5c:c3:
         57:e7:65:db:94:59:36:b0:e0:88:41:b8:e5:18:a5:15:fd:d8:
         b9:67:83:59:89:c3:bb:7a:eb:fc:17:4a:12:99:2d:35:07:20:
         c8:c4:ad:60:0c:a2:94:7c:68:5d:52:9d:e2:59:1d:21:aa:fd:
         55:23:18:2a:65:3f:00:9c:9d:42:0b:2b:e1:f0:e3:e5:2d:7a:
         29:26:36:70:77:bf:1f:c4:ac:94:04:f7:b3:a6:fe:61:d4:b4:
         c4:75:79:34:40:72:4f:7f:01:eb:29:87:4b:5b:2c:c4:64:d3:
         91:e9:a1:7d:66:cf:8a:fb:11:e0:41:64:73:c7:da:a6:ea:0a:
         f0:65:b1:70:4f:2c:f5:05:e7:10:5c:71:a1:b1:55:09:55:46:
         87:ea:fb:f4:60:5a:df:0b:9e:07:62:e9:b7:c6:b9:da:66:c9:
         77:71:3d:13:54:16:5a:ce:e9:c4:4a:b6:17:aa:0e:91:cf:59:
         d0:2c:54:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:04:48 2025 by rpki-client