Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4nbx9LwSyxMajjeL8VuyF5ZqTijJZV1nAZqyXnDdmjA/0/323830343a376637383a3a2f33322d313238203d3e20323731363930.roa
File:                     323830343a376637383a3a2f33322d313238203d3e20323731363930.roa (raw, json)
Hash identifier:          6XbmgYlc9wR4w4rpA8qwhPm5gV+lg9MskahI+F6s8es=
Subject key identifier:   A9:EE:B2:BD:96:2F:7D:44:E9:1A:DC:1A:88:B5:B3:4B:BE:D2:42:54
Certificate issuer:       /CN=802478B6A8D5D89CA197E3FBEB1207E77034E681
Certificate serial:       16D58D68ED1BA243ECBC037C0F5D5A1C0F8EC9E2
Authority key identifier: 80:24:78:B6:A8:D5:D8:9C:A1:97:E3:FB:EB:12:07:E7:70:34:E6:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/802478B6A8D5D89CA197E3FBEB1207E77034E681.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4nbx9LwSyxMajjeL8VuyF5ZqTijJZV1nAZqyXnDdmjA/0/323830343a376637383a3a2f33322d313238203d3e20323731363930.roa
Signing time:             Fri 20 Dec 2024 20:30:34 +0000
ROA not before:           Fri 20 Dec 2024 20:25:34 +0000
ROA not after:            Fri 19 Dec 2025 20:30:34 +0000
asID:                     271690
IP address blocks:        2804:7f78::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4nbx9LwSyxMajjeL8VuyF5ZqTijJZV1nAZqyXnDdmjA/0/802478B6A8D5D89CA197E3FBEB1207E77034E681.crl
                          rsync://rpki-repo.registro.br/repo/J4nbx9LwSyxMajjeL8VuyF5ZqTijJZV1nAZqyXnDdmjA/0/802478B6A8D5D89CA197E3FBEB1207E77034E681.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/802478B6A8D5D89CA197E3FBEB1207E77034E681.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 02:28:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d5:8d:68:ed:1b:a2:43:ec:bc:03:7c:0f:5d:5a:1c:0f:8e:c9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802478B6A8D5D89CA197E3FBEB1207E77034E681
        Validity
            Not Before: Dec 20 20:25:34 2024 GMT
            Not After : Dec 19 20:30:34 2025 GMT
        Subject: CN=A9EEB2BD962F7D44E91ADC1A88B5B34BBED24254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ab:e0:b9:17:eb:17:0b:a5:45:6b:73:22:30:
                    01:ba:d7:a7:31:22:90:6d:6d:f2:bc:80:fd:51:4d:
                    c2:3b:58:4f:82:96:aa:22:62:b7:e4:be:a5:83:57:
                    37:34:51:c1:6d:42:31:c6:8a:9d:97:76:2c:5b:a8:
                    4a:99:ec:46:68:19:16:86:a1:3b:47:fa:57:2b:32:
                    a7:3d:68:f5:23:54:6d:79:ff:af:1d:cd:bc:4e:eb:
                    b3:da:00:4c:c3:9c:c8:ae:22:85:49:68:72:63:eb:
                    95:65:9d:04:82:55:b2:18:91:7f:fa:36:fa:fd:fa:
                    49:b1:93:f0:ba:ba:d4:62:04:3d:21:c0:15:63:eb:
                    11:d0:56:3c:8f:73:03:e1:7a:12:d1:d0:20:fb:8f:
                    f8:73:3f:b8:59:0a:a4:df:56:6a:a2:7e:b0:1d:98:
                    4d:9e:21:63:78:db:50:12:cd:46:40:69:7f:d3:e4:
                    76:2e:2d:b9:b6:64:ca:04:70:f0:47:2f:f8:e1:ac:
                    90:3e:57:cb:69:7e:99:0d:b8:2b:43:87:5b:1f:f4:
                    1f:31:f1:e3:80:bc:d9:df:ac:08:33:f4:29:ae:bb:
                    56:de:40:b4:21:03:00:32:fc:d3:d5:c2:ca:27:bc:
                    eb:88:dc:8b:21:3e:4d:83:fc:31:d8:7e:63:7d:41:
                    4e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EE:B2:BD:96:2F:7D:44:E9:1A:DC:1A:88:B5:B3:4B:BE:D2:42:54
            X509v3 Authority Key Identifier:
                keyid:80:24:78:B6:A8:D5:D8:9C:A1:97:E3:FB:EB:12:07:E7:70:34:E6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4nbx9LwSyxMajjeL8VuyF5ZqTijJZV1nAZqyXnDdmjA/0/802478B6A8D5D89CA197E3FBEB1207E77034E681.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/802478B6A8D5D89CA197E3FBEB1207E77034E681.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4nbx9LwSyxMajjeL8VuyF5ZqTijJZV1nAZqyXnDdmjA/0/323830343a376637383a3a2f33322d313238203d3e20323731363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f78::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:61:7f:33:31:34:32:52:0b:ad:b4:59:cd:67:82:8d:a7:74:
         fb:3a:d8:d9:42:5a:fb:b7:13:43:45:37:e8:f0:53:b3:d7:98:
         af:68:4d:74:54:55:54:28:0b:7d:0b:1b:fc:5f:c6:45:fe:ca:
         e4:73:64:e2:c7:d6:73:5c:c5:f3:bc:ad:20:fd:59:81:c9:85:
         e5:82:c3:6b:14:ee:e5:78:af:ae:cb:25:e5:8e:4d:72:7f:5f:
         82:47:cb:42:0f:68:cf:34:01:25:0f:ff:ae:7c:81:44:e2:c9:
         93:da:fb:fc:2d:60:b3:e8:ba:38:4f:d1:11:a2:b9:12:10:d8:
         c7:a8:d6:02:5e:4d:66:81:7a:05:97:c6:02:e1:e6:ad:1e:57:
         2b:36:0b:c5:59:dc:83:5c:2f:18:0a:be:d2:6d:15:b0:ee:48:
         ed:80:57:f1:85:63:a6:1f:c5:34:0e:84:94:c7:d4:3e:e5:da:
         ba:e3:d5:46:cc:b5:2f:4f:b0:b2:2f:7f:9e:d5:3c:33:fe:60:
         44:b9:25:2d:1b:06:cd:52:c0:b8:ec:cb:d3:6a:4d:ca:37:ef:
         95:14:4b:d6:08:04:de:51:ac:af:d8:44:62:9a:4d:6f:ff:40:
         10:d6:5c:f1:30:07:7c:6e:e6:d4:2b:d5:86:89:10:cd:7e:5c:
         62:93:7d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:35:21 2025 by rpki-client