Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/323830343a363566303a3a2f33322d3334203d3e20323639353234.roa
File:                     323830343a363566303a3a2f33322d3334203d3e20323639353234.roa (raw, json)
Hash identifier:          YwtWVePQryzk7OdLLicpoWAGIU9SEwIerI/rotGO1aY=
Subject key identifier:   16:26:2A:AE:68:D1:AB:F4:B7:94:F9:F9:5C:7F:64:79:DC:22:D3:C0
Certificate issuer:       /CN=18A4CF42CC304D1E5395D809FDD692A864102BAE
Certificate serial:       3816074382FA9F41026654C3D73986F1E586AE87
Authority key identifier: 18:A4:CF:42:CC:30:4D:1E:53:95:D8:09:FD:D6:92:A8:64:10:2B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18A4CF42CC304D1E5395D809FDD692A864102BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/323830343a363566303a3a2f33322d3334203d3e20323639353234.roa
Signing time:             Fri 04 Oct 2024 06:45:14 +0000
ROA not before:           Fri 04 Oct 2024 06:40:14 +0000
ROA not after:            Fri 03 Oct 2025 06:45:14 +0000
asID:                     269524
IP address blocks:        2804:65f0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/18A4CF42CC304D1E5395D809FDD692A864102BAE.crl
                          rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/18A4CF42CC304D1E5395D809FDD692A864102BAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18A4CF42CC304D1E5395D809FDD692A864102BAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 21:25:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:16:07:43:82:fa:9f:41:02:66:54:c3:d7:39:86:f1:e5:86:ae:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A4CF42CC304D1E5395D809FDD692A864102BAE
        Validity
            Not Before: Oct  4 06:40:14 2024 GMT
            Not After : Oct  3 06:45:14 2025 GMT
        Subject: CN=16262AAE68D1ABF4B794F9F95C7F6479DC22D3C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:91:f8:38:87:13:ed:50:45:4c:20:c8:94:15:
                    3f:46:de:8d:ca:64:21:9f:c0:41:cf:0a:d5:b7:62:
                    43:6a:24:06:f3:42:f3:8e:61:8e:35:8b:84:ba:58:
                    86:03:df:ac:7e:6f:d9:26:31:5f:95:29:14:f9:b1:
                    55:a8:50:70:ba:37:7d:48:68:73:0c:cf:31:12:9a:
                    33:84:b1:4f:3a:c0:cb:6c:aa:94:77:a5:df:44:f9:
                    95:c4:33:4c:53:54:f7:70:ee:4a:f4:a2:ba:8e:3a:
                    86:da:02:ec:69:80:e3:88:a6:da:86:de:2c:c8:e6:
                    06:e7:23:03:7b:93:d1:c9:10:a3:ab:31:6e:99:be:
                    e8:d9:f2:f0:14:70:86:1e:9e:2e:f4:4a:a9:da:cd:
                    df:3a:0d:6a:ef:8e:33:ea:ee:19:61:6f:78:0d:ba:
                    ea:56:c8:d3:64:58:de:fd:57:87:24:86:3b:09:3d:
                    a3:aa:b6:12:5d:b3:04:e5:ff:fb:8b:d0:d5:a6:cb:
                    62:aa:06:e8:53:fe:65:15:b0:0c:79:46:73:7f:3b:
                    76:7b:90:9d:b2:a3:4f:a4:8b:2f:96:1f:e5:14:dc:
                    c7:76:c0:db:ad:13:17:bf:a2:df:02:69:85:5e:4c:
                    f6:0e:7f:d3:2a:75:60:34:df:6d:67:55:bb:eb:6d:
                    53:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:26:2A:AE:68:D1:AB:F4:B7:94:F9:F9:5C:7F:64:79:DC:22:D3:C0
            X509v3 Authority Key Identifier:
                keyid:18:A4:CF:42:CC:30:4D:1E:53:95:D8:09:FD:D6:92:A8:64:10:2B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/18A4CF42CC304D1E5395D809FDD692A864102BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18A4CF42CC304D1E5395D809FDD692A864102BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/323830343a363566303a3a2f33322d3334203d3e20323639353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:d6:7c:b2:94:b6:95:8b:7a:2d:0f:f7:ad:17:6b:43:bf:aa:
         64:08:65:ac:64:86:7e:86:7c:0e:2a:44:86:f3:d6:55:8c:a6:
         24:52:68:29:f7:12:67:cb:bc:95:af:27:2d:ad:4c:5a:2a:15:
         63:05:ee:a9:5f:e2:1c:9b:27:05:1f:02:7c:5a:9d:6f:f1:25:
         aa:1e:29:fc:6c:e1:f5:de:17:a5:53:6a:21:43:38:17:53:c8:
         aa:ef:2e:49:7e:3d:50:ed:6d:24:08:dd:9a:9c:e8:08:5a:68:
         28:8a:6e:14:e4:9d:b3:d3:58:84:c7:70:b7:4c:32:48:d3:85:
         5a:05:63:56:20:c1:bd:78:34:af:59:ab:41:ad:b9:d4:33:fb:
         3a:c2:d6:14:40:aa:3d:47:2d:40:5c:4f:40:52:d7:10:c9:04:
         a2:0f:78:ba:12:87:79:1f:d0:a7:bb:e9:81:b0:d7:58:3d:07:
         76:0a:b2:ff:df:1f:83:9e:0f:06:bb:03:73:06:29:45:6f:d7:
         b5:83:fd:1d:d3:ad:80:f2:17:0b:c9:4c:3f:04:8f:eb:e6:89:
         fa:71:26:ea:b6:a9:d8:52:04:80:33:02:79:94:78:ef:e3:55:
         fb:d6:dd:69:59:aa:cd:4d:ab:66:80:9d:82:14:96:2b:b9:2f:
         8f:ef:b1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:55:13 2025 by rpki-client