Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/323830343a343365303a383030303a3a2f33332d3333203d3e20323637353936.roa
File:                     323830343a343365303a383030303a3a2f33332d3333203d3e20323637353936.roa (raw, json)
Hash identifier:          L9m9fbPrtD0Y/5M8u0dpOeN4zm7LJLcaHkb77JY6ElU=
Subject key identifier:   7A:52:94:59:E2:95:33:48:F0:95:08:62:EE:AE:9D:FE:5E:EF:25:97
Certificate issuer:       /CN=8C3BD6398920A573D10A232EF4F43F8ABF5B4153
Certificate serial:       0B03C3099F58EF108A847DE74ABBFC309C8BA70A
Authority key identifier: 8C:3B:D6:39:89:20:A5:73:D1:0A:23:2E:F4:F4:3F:8A:BF:5B:41:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/323830343a343365303a383030303a3a2f33332d3333203d3e20323637353936.roa
Signing time:             Tue 21 Jan 2025 13:50:35 +0000
ROA not before:           Tue 21 Jan 2025 13:45:35 +0000
ROA not after:            Tue 20 Jan 2026 13:50:35 +0000
asID:                     267596
IP address blocks:        2804:43e0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.crl
                          rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 07:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:03:c3:09:9f:58:ef:10:8a:84:7d:e7:4a:bb:fc:30:9c:8b:a7:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3BD6398920A573D10A232EF4F43F8ABF5B4153
        Validity
            Not Before: Jan 21 13:45:35 2025 GMT
            Not After : Jan 20 13:50:35 2026 GMT
        Subject: CN=7A529459E2953348F0950862EEAE9DFE5EEF2597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2e:2e:e8:d8:6d:93:2e:c2:6d:05:86:2f:37:
                    65:46:7f:ed:ec:0f:60:bc:5e:e8:23:40:a5:05:d7:
                    19:63:4e:8f:55:62:90:60:a6:86:7e:01:51:05:9b:
                    82:cd:7f:f7:97:19:b5:99:b3:07:3d:fc:58:6b:36:
                    c3:06:cc:d3:65:10:79:43:e2:c3:9f:3d:b0:95:f5:
                    b8:ae:5a:17:6e:25:15:3c:e7:a1:ce:cf:18:96:ef:
                    66:f4:44:9e:e4:ca:f7:78:13:b7:86:c6:0e:e3:42:
                    6e:e5:43:3d:08:33:52:d7:07:f4:f4:3f:c6:6c:5f:
                    e0:7b:d5:86:5d:96:87:1e:3b:2b:01:8e:85:8d:ea:
                    fa:44:49:6b:18:10:2d:d6:79:f8:e3:73:cb:2c:44:
                    78:49:3e:c1:df:9f:c6:73:bc:7c:89:2f:f4:f2:24:
                    6e:3e:5e:c7:5e:8e:cc:b1:a2:c0:8d:f5:6c:0d:95:
                    a1:ae:7b:8f:c9:ce:ce:a9:48:ea:9d:1d:2e:08:55:
                    9d:7b:92:bc:53:2b:27:25:b7:a8:f4:41:af:16:f4:
                    d1:2b:85:bc:81:b9:67:11:72:0d:55:5e:a2:8c:98:
                    6b:c4:db:c1:6b:0f:f4:2f:75:d5:29:68:3f:4e:4f:
                    bd:af:27:ff:a2:9d:b1:cc:5e:c5:a6:74:c9:a5:8c:
                    de:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:52:94:59:E2:95:33:48:F0:95:08:62:EE:AE:9D:FE:5E:EF:25:97
            X509v3 Authority Key Identifier:
                keyid:8C:3B:D6:39:89:20:A5:73:D1:0A:23:2E:F4:F4:3F:8A:BF:5B:41:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/323830343a343365303a383030303a3a2f33332d3333203d3e20323637353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43e0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         3a:59:c3:9a:8c:c7:1c:5b:5b:f8:ed:fc:bc:ba:62:34:73:84:
         ef:ea:47:13:0f:04:3b:e2:5e:b6:6b:83:20:23:9a:81:53:94:
         3c:8a:a9:45:a4:07:02:22:e0:1f:5e:71:c1:48:31:bb:2a:e4:
         0c:6b:c4:76:2a:c7:b7:ff:11:56:79:1d:f1:cb:23:1e:99:87:
         a6:4b:2a:32:7a:75:8d:87:43:39:9d:c7:70:bb:ee:f8:4e:0f:
         c1:e0:53:b2:5e:0f:1c:11:07:bc:a6:e4:f5:9a:33:44:0d:88:
         36:7b:3b:6d:67:d6:19:3f:90:aa:5c:89:85:b0:57:ef:fb:c1:
         27:aa:0d:25:bf:4e:24:ff:41:68:7b:ca:64:6e:97:86:60:f6:
         0e:a0:6d:c1:9d:03:a6:f6:82:87:43:c5:66:f0:9d:50:94:d3:
         a4:72:dd:16:ae:b2:aa:44:ae:f0:54:12:b5:0d:2e:21:e8:9a:
         33:69:61:a1:99:0a:1b:84:36:76:b1:49:01:5f:f0:cc:50:43:
         91:42:96:62:67:5b:a3:d6:63:25:fe:a0:46:7b:5b:5d:e6:22:
         ec:fd:b5:d6:51:c7:15:6d:7a:a0:20:e9:9b:74:4b:8c:d8:6c:
         22:d2:b4:de:c7:ca:6f:96:cb:3f:8e:35:a7:99:79:1e:b7:e4:
         fb:23:37:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 18:09:52 2025 by rpki-client