Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/323830343a343861343a3a2f33322d3438203d3e20323637313335.roa
File:                     323830343a343861343a3a2f33322d3438203d3e20323637313335.roa (raw, json)
Hash identifier:          C9Arra7cE4jxnSRAWvcRLtdDgw58dKAc9Yo8shFl/a4=
Subject key identifier:   D1:C9:8C:AA:13:85:BA:A3:AC:C7:C2:E7:46:B0:8E:5D:39:3B:B7:7D
Certificate issuer:       /CN=8ABB79087ACA27A21985F6F05B9103D446BB65F4
Certificate serial:       3E91E5F154E2B2B6B53F58EC8FC29C40550E2B33
Authority key identifier: 8A:BB:79:08:7A:CA:27:A2:19:85:F6:F0:5B:91:03:D4:46:BB:65:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/323830343a343861343a3a2f33322d3438203d3e20323637313335.roa
Signing time:             Sat 01 Mar 2025 12:15:04 +0000
ROA not before:           Sat 01 Mar 2025 12:10:04 +0000
ROA not after:            Sat 28 Feb 2026 12:15:04 +0000
asID:                     267135
IP address blocks:        2804:48a4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.crl
                          rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 12:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:91:e5:f1:54:e2:b2:b6:b5:3f:58:ec:8f:c2:9c:40:55:0e:2b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABB79087ACA27A21985F6F05B9103D446BB65F4
        Validity
            Not Before: Mar  1 12:10:04 2025 GMT
            Not After : Feb 28 12:15:04 2026 GMT
        Subject: CN=D1C98CAA1385BAA3ACC7C2E746B08E5D393BB77D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b8:11:3c:ad:fa:04:98:3c:c7:d9:12:08:d6:
                    8f:6b:95:bb:9f:c5:0b:06:d2:e7:33:93:b0:fb:58:
                    ea:c8:d2:e0:00:91:84:33:55:90:25:87:a2:81:97:
                    14:74:0c:50:81:8f:07:bf:e8:45:1e:80:a7:3d:34:
                    8d:0a:06:f4:fa:b6:b2:40:03:0c:d7:8c:af:08:8d:
                    2c:9c:93:a6:be:90:fd:b3:53:cc:23:5c:45:c3:4b:
                    1e:fb:ad:39:8e:4e:63:37:f3:3a:80:00:2f:8d:9d:
                    21:df:92:70:2b:c7:ee:52:4a:be:18:46:a8:be:73:
                    97:e1:e5:ac:5d:b1:77:31:a9:0e:58:77:a5:8e:e1:
                    11:14:91:81:50:ac:f9:9c:60:86:fc:30:9f:43:be:
                    d1:9f:eb:c1:1b:d2:85:f7:6b:08:4e:d0:97:5e:ed:
                    ac:a0:5c:db:11:cf:6a:8c:ec:b6:ce:74:e9:c0:05:
                    ca:19:a0:f2:2a:0b:47:fe:3b:38:c6:b4:76:50:07:
                    d7:86:2b:52:1f:c7:22:86:b5:53:90:f3:61:e8:47:
                    1c:81:20:fa:d3:2c:4e:88:a8:a6:9d:37:41:37:c3:
                    ca:c6:de:7a:e8:9a:b6:4a:22:89:e2:b6:ea:00:c9:
                    bf:13:1d:be:35:95:15:4d:a5:50:9e:fb:ff:41:6c:
                    0a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C9:8C:AA:13:85:BA:A3:AC:C7:C2:E7:46:B0:8E:5D:39:3B:B7:7D
            X509v3 Authority Key Identifier:
                keyid:8A:BB:79:08:7A:CA:27:A2:19:85:F6:F0:5B:91:03:D4:46:BB:65:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/323830343a343861343a3a2f33322d3438203d3e20323637313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:0b:16:46:97:ef:d7:57:18:09:1e:e8:73:a1:9e:55:7a:0d:
         01:21:b5:7f:d2:62:fd:7d:13:41:b2:ce:4c:45:a5:d1:73:da:
         1d:d0:be:d8:4b:1e:43:22:1d:06:80:a3:ec:aa:59:3d:82:1c:
         6e:dd:2a:62:ab:6c:ba:ad:b1:e1:19:9c:75:91:18:b0:f3:4f:
         a2:93:e2:3b:26:09:21:b8:e1:1f:24:7a:43:61:9c:e4:a3:0a:
         5a:63:78:2f:13:9e:bc:b5:9c:a9:80:79:eb:27:64:ac:6d:25:
         e5:60:52:1d:bb:05:b7:f4:a2:65:31:bb:4c:75:14:6f:a2:2b:
         82:14:d3:b4:3e:64:91:26:05:b3:4d:a4:3b:02:ee:91:32:80:
         eb:7b:77:d5:ab:5d:02:35:e8:cb:ea:71:d3:9d:66:d1:f1:a4:
         d6:fa:dc:07:98:ba:ca:93:3a:25:d5:4c:6c:60:92:0e:e1:80:
         47:fb:04:90:8e:a2:46:a0:bc:bf:16:e8:38:fe:58:52:9e:e3:
         d4:5b:15:ea:9b:c9:95:ce:15:98:16:84:9b:69:9f:ab:aa:19:
         d7:c8:c8:53:b4:95:dc:0d:c8:9e:86:5b:f0:45:5b:ae:22:6d:
         d6:61:db:82:2f:88:48:e0:f9:64:df:ec:8d:d3:5e:44:e9:f7:
         8f:35:51:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:54:16 2025 by rpki-client