Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/323830343a326533633a3a2f33322d313238203d3e20323635333334.roa
File:                     323830343a326533633a3a2f33322d313238203d3e20323635333334.roa (raw, json)
Hash identifier:          /uC9ZyB6KlWxVjhT9TrgRapPctzXGN8xML0nhBhN6oY=
Subject key identifier:   75:B6:D3:8A:90:D2:51:19:70:0F:EF:F5:35:F7:87:31:9C:50:D6:BB
Certificate issuer:       /CN=F273DC2275FCAABA5AD0A3DECEED01396F697BA2
Certificate serial:       77F235FC7B654387A5352D7AE895F10A65F51CE0
Authority key identifier: F2:73:DC:22:75:FC:AA:BA:5A:D0:A3:DE:CE:ED:01:39:6F:69:7B:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F273DC2275FCAABA5AD0A3DECEED01396F697BA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/323830343a326533633a3a2f33322d313238203d3e20323635333334.roa
Signing time:             Sat 08 Mar 2025 02:18:00 +0000
ROA not before:           Sat 08 Mar 2025 02:13:00 +0000
ROA not after:            Sat 07 Mar 2026 02:18:00 +0000
asID:                     265334
IP address blocks:        2804:2e3c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/F273DC2275FCAABA5AD0A3DECEED01396F697BA2.crl
                          rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/F273DC2275FCAABA5AD0A3DECEED01396F697BA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F273DC2275FCAABA5AD0A3DECEED01396F697BA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 10:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f2:35:fc:7b:65:43:87:a5:35:2d:7a:e8:95:f1:0a:65:f5:1c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F273DC2275FCAABA5AD0A3DECEED01396F697BA2
        Validity
            Not Before: Mar  8 02:13:00 2025 GMT
            Not After : Mar  7 02:18:00 2026 GMT
        Subject: CN=75B6D38A90D25119700FEFF535F787319C50D6BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:25:d9:a2:3d:7f:46:38:3d:5b:08:ed:f9:54:
                    0d:a6:61:d9:21:43:8b:1a:31:7c:d6:34:22:db:d6:
                    c0:f7:ef:d1:4c:02:d0:c9:57:4b:db:7d:74:e5:71:
                    e4:8b:60:36:15:50:70:0e:2e:82:50:be:4d:3e:42:
                    86:86:85:83:ba:3e:a7:25:b3:11:e0:a3:7e:33:64:
                    35:ab:3c:e5:d2:e3:aa:be:d3:30:e0:db:49:ec:73:
                    40:1a:8e:12:0b:47:40:18:ba:60:07:b3:dd:ea:13:
                    d8:aa:31:11:4a:30:5b:08:f0:e9:bb:6c:9d:76:e1:
                    e6:11:21:6a:71:44:bf:d6:66:9d:79:29:91:bc:38:
                    d5:17:14:d4:32:9f:7d:6c:e1:a7:a6:bf:63:62:17:
                    d5:3a:cd:d6:fe:26:19:79:a2:c1:8c:a7:97:1e:a4:
                    e9:48:a2:6f:70:cd:c9:8e:94:10:53:2c:c1:bd:66:
                    da:23:56:88:f8:e8:e5:ed:1e:d8:c8:35:56:56:de:
                    c3:e3:b4:c3:e3:d9:2a:09:46:83:1f:9a:2e:c4:df:
                    4c:47:9e:81:50:1b:e0:d8:47:af:da:42:ed:c8:fd:
                    86:2f:db:9b:13:62:e2:17:f9:9d:68:1a:05:44:3c:
                    ec:48:ad:f2:7e:b1:05:3f:c9:8b:53:87:68:d5:c8:
                    c1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B6:D3:8A:90:D2:51:19:70:0F:EF:F5:35:F7:87:31:9C:50:D6:BB
            X509v3 Authority Key Identifier:
                keyid:F2:73:DC:22:75:FC:AA:BA:5A:D0:A3:DE:CE:ED:01:39:6F:69:7B:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/F273DC2275FCAABA5AD0A3DECEED01396F697BA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F273DC2275FCAABA5AD0A3DECEED01396F697BA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/323830343a326533633a3a2f33322d313238203d3e20323635333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:cf:d1:c2:0f:b2:fd:1d:75:8a:ea:30:e2:76:14:1d:a0:ec:
         9f:e0:b6:60:f1:62:37:54:f8:c0:e3:b8:61:c6:9a:bc:5c:03:
         8a:03:01:99:12:48:e3:92:c0:2a:03:d3:bb:59:7b:5d:aa:3b:
         1e:e6:ec:46:59:a5:98:6d:85:9e:1b:e0:36:bb:b1:d1:14:05:
         80:de:29:17:89:83:03:fb:ff:ea:c6:da:13:76:41:ae:b1:73:
         33:fc:da:47:9f:e5:72:36:c0:6e:33:62:2e:76:2d:09:b1:5b:
         b1:dd:db:c4:25:86:49:98:fa:84:d2:58:10:b1:64:13:0c:f6:
         84:69:22:af:33:b4:20:70:46:a5:27:69:fb:15:78:99:64:e1:
         e1:31:39:32:f6:f3:b2:11:96:e6:07:9a:79:6a:59:6e:45:90:
         35:10:f7:8c:cd:c7:32:6f:b1:ee:56:0a:d2:42:c8:3e:77:7b:
         e0:fb:f2:7c:35:18:72:16:db:ab:5f:1d:88:e5:be:c6:b1:cc:
         0e:7a:ba:fe:83:30:29:9b:87:7a:e9:fa:a1:56:b6:c3:9f:60:
         42:62:42:3c:24:57:2b:12:63:ef:58:f6:d0:46:7d:4c:f5:64:
         94:83:84:3e:40:ed:72:f0:db:37:a7:87:60:1e:3c:75:a9:7d:
         42:f4:b0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:56:14 2025 by rpki-client