Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/323830343a353832343a3a2f33322d3438203d3e20323638313039.roa
File:                     323830343a353832343a3a2f33322d3438203d3e20323638313039.roa (raw, json)
Hash identifier:          hnn2iLMqZBzqrxG9zPk9E5E9vHmkBmJYWWM26bz8+98=
Subject key identifier:   15:8D:B1:DA:50:0C:88:DF:97:60:A3:7B:0F:B1:61:57:8D:B4:C9:1E
Certificate issuer:       /CN=1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F
Certificate serial:       65748CD3EAA24A8E504E640A60E4A30CEE0B6F90
Authority key identifier: 1B:28:49:50:95:49:89:8D:2F:C8:5F:41:A2:D1:FE:7B:3C:5F:8D:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/323830343a353832343a3a2f33322d3438203d3e20323638313039.roa
Signing time:             Thu 06 Mar 2025 04:01:05 +0000
ROA not before:           Thu 06 Mar 2025 03:56:05 +0000
ROA not after:            Thu 05 Mar 2026 04:01:05 +0000
asID:                     268109
IP address blocks:        2804:5824::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.crl
                          rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 06:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:74:8c:d3:ea:a2:4a:8e:50:4e:64:0a:60:e4:a3:0c:ee:0b:6f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F
        Validity
            Not Before: Mar  6 03:56:05 2025 GMT
            Not After : Mar  5 04:01:05 2026 GMT
        Subject: CN=158DB1DA500C88DF9760A37B0FB161578DB4C91E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e3:81:c0:0d:b5:97:cb:39:a3:0f:dd:ab:29:
                    bf:73:cc:38:d2:e5:a5:e5:9b:63:41:85:0f:5f:8c:
                    06:65:f7:dc:5c:09:0d:ce:55:ec:a4:7c:9f:f0:8d:
                    21:b2:fe:90:ee:70:e4:2d:0a:b2:fe:25:57:72:8d:
                    7b:98:83:5d:b0:94:14:e2:8d:e1:5d:f7:d4:6f:f4:
                    bf:55:b9:2e:2d:87:87:b2:39:7c:2c:0b:c7:99:e9:
                    38:6c:cd:63:d1:be:39:39:a7:7a:d1:db:2e:fb:91:
                    a2:24:fa:85:e9:e0:55:24:ab:76:a0:a6:68:3d:96:
                    8f:80:bb:c7:aa:1b:bd:10:c5:64:15:df:93:86:b8:
                    c3:51:ff:f3:73:6f:f9:7b:99:92:df:09:27:e0:b8:
                    33:b3:ce:ec:03:06:21:67:05:1e:75:c5:af:15:60:
                    ee:65:c6:47:db:40:d4:de:72:64:11:40:74:81:24:
                    17:9c:a4:28:19:a2:95:af:42:43:66:25:1b:42:e0:
                    2d:c4:8b:d4:46:60:47:98:51:c6:a6:01:bf:c7:90:
                    bb:15:3a:f9:a8:8c:16:cf:2b:8c:1e:6f:de:7c:e5:
                    65:d6:61:d8:bd:ce:92:fb:a6:02:40:d7:c9:40:e2:
                    7f:18:b0:53:80:f7:3b:2b:41:5e:e0:9c:1f:04:12:
                    ff:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8D:B1:DA:50:0C:88:DF:97:60:A3:7B:0F:B1:61:57:8D:B4:C9:1E
            X509v3 Authority Key Identifier:
                keyid:1B:28:49:50:95:49:89:8D:2F:C8:5F:41:A2:D1:FE:7B:3C:5F:8D:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/323830343a353832343a3a2f33322d3438203d3e20323638313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5824::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:48:27:0a:84:58:58:c2:e1:b0:98:b6:49:20:45:0f:8f:72:
         26:38:0c:91:fd:4b:91:38:70:83:05:89:c5:88:89:45:d6:37:
         99:b9:8e:4f:cd:c3:72:0f:0e:22:aa:75:8e:41:27:c7:bd:3f:
         5c:9c:bf:42:63:c6:aa:58:ff:97:99:92:1f:4c:b9:4f:a2:ce:
         93:14:0c:5b:0a:8c:61:9a:42:ac:13:8a:91:53:aa:83:f2:43:
         47:2e:6f:5c:1d:13:ef:39:81:b5:4b:b0:75:58:02:df:2d:8b:
         f9:39:09:f2:5f:68:80:d0:b9:cf:ed:11:3c:c1:bf:87:f8:3b:
         13:4a:85:af:f2:38:c4:f5:36:23:74:fd:fd:4a:aa:70:12:0c:
         f4:ee:89:40:ed:47:a8:f8:27:8f:00:59:4e:7e:f5:0c:9d:cc:
         91:6f:7e:15:7c:7e:3a:d6:62:75:9a:cc:a7:20:95:85:47:fc:
         fb:ff:90:f3:11:10:8b:04:ed:bc:c4:5a:05:88:3e:af:c8:a1:
         56:d9:04:2d:b1:d8:5e:ac:a9:8e:8a:76:99:ad:a9:1c:69:99:
         50:cc:63:88:1f:5a:ef:29:a1:a5:35:64:ba:9a:fd:70:28:dd:
         8a:0c:16:a4:f5:f8:94:68:06:4d:ae:60:db:fb:7c:fe:cc:67:
         ba:0f:52:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:26:42 2025 by rpki-client