Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/323830343a316565383a3a2f33322d3438203d3e20323634343533.roa
File:                     323830343a316565383a3a2f33322d3438203d3e20323634343533.roa (raw, json)
Hash identifier:          Xguks/9wbl6T7AQmZ0HipeG5Bo5EBk43axD8s6h0hLw=
Subject key identifier:   24:08:EF:0E:98:00:FE:99:F2:0F:3C:1E:3E:F7:89:38:11:97:B3:33
Certificate issuer:       /CN=0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184
Certificate serial:       105F5E613EE15DBD8C6BB3DB4B6F727B44B94326
Authority key identifier: 0C:65:DE:B6:7B:30:70:5A:31:3E:F8:FA:D7:A0:D6:E2:BE:22:D1:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/323830343a316565383a3a2f33322d3438203d3e20323634343533.roa
Signing time:             Wed 07 May 2025 19:31:23 +0000
ROA not before:           Wed 07 May 2025 19:26:23 +0000
ROA not after:            Wed 06 May 2026 19:31:23 +0000
asID:                     264453
IP address blocks:        2804:1ee8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.crl
                          rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 13:36:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5f:5e:61:3e:e1:5d:bd:8c:6b:b3:db:4b:6f:72:7b:44:b9:43:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184
        Validity
            Not Before: May  7 19:26:23 2025 GMT
            Not After : May  6 19:31:23 2026 GMT
        Subject: CN=2408EF0E9800FE99F20F3C1E3EF789381197B333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d5:a5:0e:c7:f4:19:5a:28:6c:4b:34:2d:6a:
                    d3:11:83:88:f0:a5:a3:08:96:05:55:b7:4e:fc:c0:
                    47:34:c9:0c:f2:5b:dc:ca:b4:7d:2e:7d:0b:e4:8a:
                    df:a7:1a:59:46:81:ed:33:de:47:c1:91:52:df:dd:
                    03:d7:bb:de:9e:3c:ae:74:fe:37:f1:6c:f4:39:05:
                    f0:79:c4:7a:23:90:80:6f:9b:32:60:3b:48:94:a4:
                    98:53:cb:35:f4:bb:25:8b:c4:33:27:cc:2e:33:88:
                    bd:41:43:dd:37:a1:33:96:41:91:02:b0:46:64:2e:
                    70:7d:a1:ea:0d:7d:a4:44:b2:7b:72:2b:38:4d:f8:
                    58:5f:57:7b:49:99:55:52:35:b6:22:0e:85:dd:52:
                    4b:e7:4e:8f:0e:86:84:c3:8e:a6:37:49:51:e2:a7:
                    00:71:8e:cf:55:67:06:85:9a:69:c9:56:5a:5e:9c:
                    0e:fd:ed:a3:55:9a:fe:7f:0d:e2:07:96:54:af:67:
                    8d:4c:2c:69:ce:6c:01:9a:3b:04:44:b8:a6:e6:a9:
                    88:5f:90:45:fe:03:c6:5e:f3:07:ff:40:48:65:f7:
                    57:4a:45:46:ca:b7:5e:85:73:44:08:e4:9c:f1:03:
                    0c:35:8f:f8:52:64:46:7e:ca:7e:e3:1a:ab:37:f7:
                    49:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:08:EF:0E:98:00:FE:99:F2:0F:3C:1E:3E:F7:89:38:11:97:B3:33
            X509v3 Authority Key Identifier:
                keyid:0C:65:DE:B6:7B:30:70:5A:31:3E:F8:FA:D7:A0:D6:E2:BE:22:D1:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/323830343a316565383a3a2f33322d3438203d3e20323634343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ee8::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:a4:8d:13:5d:b4:c8:3a:b2:ac:8e:c7:92:57:3f:3f:46:b4:
         87:48:2e:9a:06:45:5e:fe:b8:32:cd:35:9c:0d:6e:f8:66:cb:
         08:3c:5c:a7:07:cc:1a:99:6b:e9:ad:89:59:51:72:69:5a:ea:
         9c:02:9d:24:7a:f2:aa:b9:18:8d:1e:5c:91:90:71:aa:68:1b:
         26:8e:37:22:1e:91:93:59:37:4a:5d:6d:53:d0:13:4b:d3:c1:
         6c:e6:15:54:b3:48:64:90:b6:49:06:bb:bc:6b:c4:bf:16:f2:
         e8:4f:6c:93:09:31:d4:d2:03:c9:6b:c2:47:6f:84:ad:13:23:
         45:fa:65:96:2d:8c:33:c2:c7:d4:f3:88:bc:bd:66:32:24:07:
         5c:2e:cd:38:4c:dd:0d:c7:0a:41:a6:ea:42:88:c4:ee:31:9a:
         54:89:07:18:cc:6d:62:74:ef:24:8a:54:8d:42:0c:8e:bd:a1:
         18:5c:3a:e8:10:95:bd:ed:96:30:34:de:47:f1:bc:52:f0:21:
         bf:80:2f:1d:1a:ec:0a:05:58:fe:cd:7d:bb:03:45:3c:75:16:
         aa:83:3e:14:92:59:58:6f:a7:ec:94:67:98:98:f0:ae:a3:68:
         74:17:91:46:5f:c3:49:28:8e:14:3a:a2:5b:73:82:23:ee:e6:
         4e:9c:cb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:27:18 2025 by rpki-client