Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/323830343a316137633a3a2f33322d3334203d3e203631383632.roa
File:                     323830343a316137633a3a2f33322d3334203d3e203631383632.roa (raw, json)
Hash identifier:          TJaA5xEZrkse1eozPtBQZAtjZj6iE5o4CDiRrM/8CKc=
Subject key identifier:   64:C1:FD:B9:D3:25:C4:91:14:20:E6:FB:44:2B:18:B4:16:7A:9D:80
Certificate issuer:       /CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355
Certificate serial:       15E4B078D879EBC0E445F5D692766B02E618A978
Authority key identifier: 4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/323830343a316137633a3a2f33322d3334203d3e203631383632.roa
Signing time:             Fri 17 Jan 2025 19:39:01 +0000
ROA not before:           Fri 17 Jan 2025 19:34:01 +0000
ROA not after:            Fri 16 Jan 2026 19:39:01 +0000
asID:                     61862
IP address blocks:        2804:1a7c::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl
                          rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 11:52:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e4:b0:78:d8:79:eb:c0:e4:45:f5:d6:92:76:6b:02:e6:18:a9:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355
        Validity
            Not Before: Jan 17 19:34:01 2025 GMT
            Not After : Jan 16 19:39:01 2026 GMT
        Subject: CN=64C1FDB9D325C4911420E6FB442B18B4167A9D80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9c:76:81:ee:6b:a0:cf:00:a2:12:0d:71:55:
                    68:29:82:b4:50:a8:45:41:76:1e:69:2d:ed:c0:89:
                    32:17:47:0a:42:57:a5:0a:5a:14:60:3d:06:31:b3:
                    22:ba:bb:d6:68:26:05:d7:18:b1:6a:92:3f:f5:d2:
                    82:4b:ce:1f:6b:ea:e8:76:81:04:4e:a7:13:2f:74:
                    ee:37:0b:be:76:c3:08:ef:7f:df:3d:00:d2:0f:93:
                    6e:7d:c2:92:61:e3:4b:18:f5:45:e4:a1:4d:0b:0e:
                    09:f8:dc:8f:9d:0d:1e:9b:a9:3f:64:ce:dc:58:34:
                    44:99:ec:fd:a8:0b:55:aa:5d:79:60:08:a0:a0:e6:
                    7e:41:76:c1:80:e3:ae:d8:76:81:36:97:14:1f:6f:
                    42:58:3b:49:88:bb:e2:21:59:d1:74:fc:ab:3d:34:
                    5b:7d:5e:f2:9a:34:34:b0:1d:41:14:b4:d5:a7:5f:
                    ad:fb:2d:cd:0f:a4:7f:56:12:b4:0c:b3:b1:8f:9d:
                    9b:ff:9c:88:aa:96:85:79:9d:4e:84:42:8c:3c:89:
                    4e:94:bd:ff:ab:00:45:18:c8:70:11:5e:e8:38:71:
                    9c:7a:a4:8a:8d:cc:2e:2a:e0:bc:35:c8:43:ce:9e:
                    93:00:7e:7a:60:ee:3c:4c:25:f0:4b:ef:47:e7:17:
                    2a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C1:FD:B9:D3:25:C4:91:14:20:E6:FB:44:2B:18:B4:16:7A:9D:80
            X509v3 Authority Key Identifier:
                keyid:4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/323830343a316137633a3a2f33322d3334203d3e203631383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:5a:e7:e4:65:9a:00:99:dd:d0:c1:cd:00:85:24:ea:17:07:
         fe:48:16:2b:f8:69:1f:aa:37:2f:77:d2:61:dd:51:20:8f:27:
         14:35:80:e2:45:03:22:18:20:d4:a5:b8:a8:e3:a8:c2:44:41:
         cc:f7:93:f1:49:fd:d9:2e:f3:b7:25:80:e2:5b:f8:84:23:cb:
         a3:1d:49:e5:f2:0e:c7:f4:93:30:02:ef:7f:47:8f:3e:0b:8e:
         68:c0:90:ad:ae:1b:31:d3:e6:80:23:8c:f5:ee:ae:1d:1f:77:
         db:bc:4d:3f:9a:15:54:04:b8:d3:a7:90:c0:a9:61:56:e8:15:
         ef:39:68:fa:e2:59:34:f3:ea:13:5e:21:e8:af:f4:5e:9d:6f:
         84:d3:18:2d:8d:6a:c6:75:4c:07:48:05:98:1e:a3:19:32:e2:
         aa:d6:7a:d9:59:fb:ad:c7:fa:d4:b5:ca:55:2e:58:22:6d:c0:
         90:ff:d1:ad:0d:e1:7d:eb:07:68:d9:6d:39:6c:37:19:e5:c8:
         4f:b5:a2:78:ef:40:fe:ca:76:0e:00:68:75:ee:cd:f0:f5:c9:
         17:cd:8b:9a:a1:38:43:f4:3a:73:f4:60:9e:52:5c:c2:a1:c1:
         01:bf:26:3d:be:8c:6b:b4:ef:99:16:c5:61:c1:1f:52:ab:2d:
         f2:38:de:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:32:16 2025 by rpki-client