Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/323830343a343135383a3a2f33322d3335203d3e20323637343237.roa
File:                     323830343a343135383a3a2f33322d3335203d3e20323637343237.roa (raw, json)
Hash identifier:          OHZNU2eDNxMQfQjVOabRdBgG+UX/Gf6cZGEnAvl9rqU=
Subject key identifier:   87:C1:78:69:64:51:1B:6B:BE:AE:E7:2A:90:95:30:AB:3F:35:09:6B
Certificate issuer:       /CN=488C735907C82A33DD56871CC305A21B88A9B353
Certificate serial:       4CF45D74B8FC4632FC6113C5F32B22852DA61550
Authority key identifier: 48:8C:73:59:07:C8:2A:33:DD:56:87:1C:C3:05:A2:1B:88:A9:B3:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488C735907C82A33DD56871CC305A21B88A9B353.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/323830343a343135383a3a2f33322d3335203d3e20323637343237.roa
Signing time:             Wed 30 Apr 2025 15:07:31 +0000
ROA not before:           Wed 30 Apr 2025 15:02:31 +0000
ROA not after:            Wed 29 Apr 2026 15:07:31 +0000
asID:                     267427
IP address blocks:        2804:4158::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/488C735907C82A33DD56871CC305A21B88A9B353.crl
                          rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/488C735907C82A33DD56871CC305A21B88A9B353.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488C735907C82A33DD56871CC305A21B88A9B353.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 12:54:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f4:5d:74:b8:fc:46:32:fc:61:13:c5:f3:2b:22:85:2d:a6:15:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488C735907C82A33DD56871CC305A21B88A9B353
        Validity
            Not Before: Apr 30 15:02:31 2025 GMT
            Not After : Apr 29 15:07:31 2026 GMT
        Subject: CN=87C1786964511B6BBEAEE72A909530AB3F35096B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ed:8b:fc:36:ff:74:1e:86:e5:05:d3:9c:87:
                    78:35:23:74:88:aa:4c:e6:c8:74:56:58:10:2f:88:
                    92:eb:07:30:c9:e3:17:2f:ca:db:18:3b:e9:cc:13:
                    cf:bd:00:cf:20:64:3b:84:6e:e9:55:4e:cd:9b:9f:
                    38:9e:10:47:6d:cc:ea:01:c3:84:de:b1:60:b5:8d:
                    0a:c7:43:98:db:be:73:fc:c9:a5:bc:e7:6d:5c:22:
                    08:a1:14:5e:02:97:ed:22:51:34:08:ff:d9:ad:a9:
                    8c:fd:c6:82:1c:d3:a1:45:c0:bb:6c:2f:94:b8:cc:
                    01:dc:31:7f:6a:2d:25:9e:04:4b:71:53:a7:5b:ab:
                    cb:39:78:51:90:61:1f:15:d5:bf:82:11:18:e9:cd:
                    d1:55:5a:d3:c5:5d:6f:1d:10:a2:bd:6d:1f:5f:89:
                    65:be:60:d1:06:10:b2:28:38:2b:c0:40:76:ed:60:
                    77:12:2b:35:af:83:5a:fd:00:c4:dd:d8:9b:7a:0c:
                    4c:91:eb:00:a5:65:fd:e3:6c:73:22:14:4c:8c:23:
                    b8:f9:fc:4b:02:c5:14:82:93:79:87:dc:46:87:e5:
                    15:b2:d0:ab:dd:c7:58:68:06:b6:9e:43:73:9b:bf:
                    9c:b6:b9:56:15:da:36:41:6f:19:03:a9:fc:b9:c3:
                    a8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C1:78:69:64:51:1B:6B:BE:AE:E7:2A:90:95:30:AB:3F:35:09:6B
            X509v3 Authority Key Identifier:
                keyid:48:8C:73:59:07:C8:2A:33:DD:56:87:1C:C3:05:A2:1B:88:A9:B3:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/488C735907C82A33DD56871CC305A21B88A9B353.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488C735907C82A33DD56871CC305A21B88A9B353.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/323830343a343135383a3a2f33322d3335203d3e20323637343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4158::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:c1:06:51:75:d8:f8:66:5b:45:06:1d:e1:80:cd:0d:76:5a:
         f4:1c:da:50:97:41:22:27:b8:ff:13:35:f9:d4:23:d2:c3:e7:
         d9:c0:9b:6d:f2:b7:1e:a0:03:c1:06:b7:9b:ff:3c:ee:02:03:
         50:fd:8e:e0:ac:1b:92:5e:08:b3:ee:f4:2f:db:4d:78:ac:9a:
         83:40:15:01:df:a0:5d:50:06:d8:07:64:e2:ef:ad:98:27:7e:
         2a:de:58:50:4f:23:9c:f9:6c:06:41:72:41:ef:e2:d8:c2:a6:
         23:ca:50:41:36:7f:31:6e:a8:57:ec:cb:af:57:90:69:74:87:
         66:2f:60:e0:8e:5c:a1:b9:37:fa:ce:cc:ef:49:d8:cd:36:7b:
         43:66:a2:4d:5a:7b:fa:38:19:c3:7c:19:e3:36:57:bb:fb:ab:
         f6:2f:b5:00:ac:e9:61:e6:d7:5f:36:71:3f:26:9d:99:fa:3f:
         3f:45:20:b4:78:c4:82:fe:a3:84:74:3c:d1:a1:12:a8:60:bd:
         0e:1e:29:11:b3:b2:19:b9:a5:82:4b:b3:34:18:c4:06:55:18:
         48:8c:3d:e1:4a:c7:40:c8:91:21:be:3b:1d:d6:36:6c:ac:2d:
         bd:37:4d:65:5d:45:76:e9:ca:84:65:cc:f2:a8:37:42:5e:f6:
         79:90:e6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 03:22:24 2025 by rpki-client