Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/323830343a353335383a3a2f33322d313238203d3e20323638353738.roa
File:                     323830343a353335383a3a2f33322d313238203d3e20323638353738.roa (raw, json)
Hash identifier:          ZS2BqBeEfdT2sVGLdMsWUcJ4A/XFDXW8T054SeJS1Do=
Subject key identifier:   A1:C3:6D:7D:90:10:50:7D:47:39:B1:7E:FA:7E:08:DA:B9:23:1D:5E
Certificate issuer:       /CN=8515DAD8B5B782A7E8448EFEB96B22E9B9617746
Certificate serial:       1844EB52DD93393773A353B46C7BC8AAC3A399EC
Authority key identifier: 85:15:DA:D8:B5:B7:82:A7:E8:44:8E:FE:B9:6B:22:E9:B9:61:77:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/323830343a353335383a3a2f33322d313238203d3e20323638353738.roa
Signing time:             Wed 07 May 2025 00:42:00 +0000
ROA not before:           Wed 07 May 2025 00:37:00 +0000
ROA not after:            Wed 06 May 2026 00:42:00 +0000
asID:                     268578
IP address blocks:        2804:5358::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.crl
                          rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 12:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:44:eb:52:dd:93:39:37:73:a3:53:b4:6c:7b:c8:aa:c3:a3:99:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8515DAD8B5B782A7E8448EFEB96B22E9B9617746
        Validity
            Not Before: May  7 00:37:00 2025 GMT
            Not After : May  6 00:42:00 2026 GMT
        Subject: CN=A1C36D7D9010507D4739B17EFA7E08DAB9231D5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:79:6a:01:42:17:28:ac:43:e0:58:6d:7c:64:
                    53:71:b1:ad:a9:c5:10:cc:2d:5b:fa:19:8a:82:ba:
                    26:5b:cd:d4:65:6a:ff:8b:9d:9e:d0:19:2b:e5:47:
                    8c:65:52:46:99:96:9f:da:62:1f:17:21:e6:5e:32:
                    ac:1d:2a:98:d8:92:a7:5b:96:83:fa:ab:07:cb:d5:
                    3c:d7:2c:fa:6b:04:35:ad:c2:21:44:1f:fb:f1:dc:
                    a6:9d:36:c0:0f:db:51:67:e8:46:42:f1:5a:3d:e1:
                    a0:81:52:c3:68:17:00:34:ba:77:ee:50:a8:87:04:
                    75:20:9e:bb:f6:59:d1:85:27:81:b3:06:24:64:27:
                    b6:3c:b7:ec:74:f7:57:24:46:df:2d:93:f8:fb:43:
                    42:29:20:e1:f5:d9:34:ee:ee:07:95:46:4e:8d:29:
                    28:0a:d0:0d:08:5f:6e:d4:44:3d:40:c7:56:8e:dc:
                    42:d8:13:78:17:a0:57:85:f6:38:f4:ed:ab:bd:a4:
                    98:06:0d:ee:b4:9b:14:82:5a:6f:f6:f6:29:c6:e0:
                    03:f5:c5:3f:3b:66:b9:0b:b8:ef:9a:4f:78:df:10:
                    f0:0a:6b:3a:f6:26:99:d2:fe:5a:19:fc:73:f6:78:
                    0e:16:34:94:db:60:81:00:71:ab:00:95:37:bb:5d:
                    da:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C3:6D:7D:90:10:50:7D:47:39:B1:7E:FA:7E:08:DA:B9:23:1D:5E
            X509v3 Authority Key Identifier:
                keyid:85:15:DA:D8:B5:B7:82:A7:E8:44:8E:FE:B9:6B:22:E9:B9:61:77:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/323830343a353335383a3a2f33322d313238203d3e20323638353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5358::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:d3:3f:8f:1b:2f:9b:e0:14:6e:71:bc:06:b1:dc:69:bd:25:
         30:bb:bf:b7:b1:2e:37:fe:dd:d7:ff:a6:94:5c:f5:16:8e:ba:
         6d:f0:00:b8:28:74:a2:10:74:d2:f1:8f:d9:ae:7f:2b:8e:9a:
         7a:f3:3c:fd:bc:7c:b3:7e:97:06:4d:5f:72:41:6e:79:83:b8:
         eb:9b:d9:18:e2:2a:33:2e:d5:a7:6a:94:9c:1d:3a:54:71:6f:
         17:56:4b:fe:d4:68:b6:91:8f:3a:4c:7e:c1:1d:2a:47:5a:f0:
         0f:2f:bf:83:57:9a:67:f5:8d:ce:e5:91:e5:a3:ce:18:5e:22:
         4a:17:94:c7:52:a5:11:e5:54:b1:da:d0:52:e5:75:27:50:42:
         13:5d:f1:f0:75:af:7a:72:ff:85:29:d7:e0:43:19:e2:62:46:
         e3:97:ea:ef:de:ac:87:a0:52:af:d4:eb:64:c8:2f:6d:6d:54:
         c7:da:ed:23:8d:7a:3d:af:3e:82:05:7c:42:b8:52:7d:ae:29:
         c8:fa:68:da:ab:fb:5a:a4:54:56:86:2d:a8:e8:4e:11:3c:e0:
         c9:82:20:72:a5:37:61:29:c6:a6:b0:ec:4e:7c:bb:aa:53:57:
         96:97:fe:e3:da:aa:89:13:74:02:4c:49:f4:1a:93:5c:a6:9b:
         1d:84:c5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:33:37 2025 by rpki-client