Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/323830343a386632343a3a2f33322d313238203d3e20323733343730.roa
File:                     323830343a386632343a3a2f33322d313238203d3e20323733343730.roa (raw, json)
Hash identifier:          Lqsu409mbdsJNd8I/XIVUYdrGQasb4CRprc03PxyfiQ=
Subject key identifier:   8B:20:21:91:4D:4C:BB:32:93:26:CE:73:C4:AB:D5:7C:15:14:11:65
Certificate issuer:       /CN=16136D1772326C3F142FBE6A7E352B966E2C293D
Certificate serial:       3D87AC8A581AC2CC806AC3196DA376456B3C823B
Authority key identifier: 16:13:6D:17:72:32:6C:3F:14:2F:BE:6A:7E:35:2B:96:6E:2C:29:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16136D1772326C3F142FBE6A7E352B966E2C293D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/323830343a386632343a3a2f33322d313238203d3e20323733343730.roa
Signing time:             Thu 08 May 2025 18:23:23 +0000
ROA not before:           Thu 08 May 2025 18:18:23 +0000
ROA not after:            Thu 07 May 2026 18:23:23 +0000
asID:                     273470
IP address blocks:        2804:8f24::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/16136D1772326C3F142FBE6A7E352B966E2C293D.crl
                          rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/16136D1772326C3F142FBE6A7E352B966E2C293D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16136D1772326C3F142FBE6A7E352B966E2C293D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 10:55:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:87:ac:8a:58:1a:c2:cc:80:6a:c3:19:6d:a3:76:45:6b:3c:82:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16136D1772326C3F142FBE6A7E352B966E2C293D
        Validity
            Not Before: May  8 18:18:23 2025 GMT
            Not After : May  7 18:23:23 2026 GMT
        Subject: CN=8B2021914D4CBB329326CE73C4ABD57C15141165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c0:86:4f:f1:42:78:6b:9d:76:72:e8:41:2e:
                    d1:b2:15:39:96:55:55:04:b2:74:07:ea:b6:34:a1:
                    3a:ca:1d:42:dc:24:e6:fd:66:3f:2a:0d:43:f6:27:
                    55:03:fb:74:46:e9:03:78:f6:fd:a4:8c:ba:79:61:
                    01:5e:c9:e3:6e:f9:a8:72:a0:49:35:48:01:f1:05:
                    69:e0:03:24:2b:8d:13:79:17:7d:f6:5c:22:5f:9c:
                    95:c6:10:84:a5:6d:8b:75:dc:22:23:3e:0a:21:dd:
                    f6:6e:15:3f:38:fc:ad:2d:c4:c9:fa:1f:4a:87:c4:
                    0d:41:89:1d:16:7d:59:7d:59:4d:7b:0b:c6:30:8c:
                    d9:37:84:ec:17:1f:06:7f:68:56:d4:81:3a:0b:45:
                    62:bb:11:d8:a7:d7:9d:ec:e8:26:97:93:6f:bf:2f:
                    2a:3a:f8:f4:66:95:3b:b9:a1:f9:f2:20:c1:ee:da:
                    83:a5:72:35:ce:5a:78:d7:26:88:80:ff:43:6d:27:
                    4a:d0:1b:db:ef:46:1c:68:28:0e:92:6b:93:fa:e3:
                    53:91:c2:be:b6:de:97:08:ea:36:f6:46:58:9a:c3:
                    1f:48:69:61:e9:47:b6:94:01:ad:14:42:c2:17:b0:
                    13:22:d7:67:68:4f:19:01:41:a3:91:24:3c:19:79:
                    17:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:20:21:91:4D:4C:BB:32:93:26:CE:73:C4:AB:D5:7C:15:14:11:65
            X509v3 Authority Key Identifier:
                keyid:16:13:6D:17:72:32:6C:3F:14:2F:BE:6A:7E:35:2B:96:6E:2C:29:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/16136D1772326C3F142FBE6A7E352B966E2C293D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16136D1772326C3F142FBE6A7E352B966E2C293D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/323830343a386632343a3a2f33322d313238203d3e20323733343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f24::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:3f:45:63:6d:3b:9c:c5:8c:eb:3e:83:63:af:a6:69:e3:9e:
         1d:82:e9:36:17:d3:50:37:7a:3a:45:e3:14:d2:1f:8e:fc:e5:
         79:0d:18:4d:ab:16:60:cb:0c:b1:7e:65:fe:dc:c8:aa:48:b3:
         be:d5:24:a3:bc:84:db:d9:33:2d:1c:fb:3e:06:c4:e3:76:ff:
         57:a1:6b:bd:3c:03:00:13:3b:aa:a8:5c:8d:a3:11:5d:a1:70:
         4b:06:27:c8:54:8f:22:82:a7:2b:21:56:58:f8:25:51:94:6f:
         e1:0b:a8:0c:ad:88:7e:07:05:f4:5d:58:32:a6:da:d9:86:48:
         8d:51:82:97:53:41:81:1b:e8:62:ae:7f:e1:39:78:9e:47:72:
         1e:23:59:8a:7d:6f:ee:2b:2b:be:de:b7:f3:1f:e7:c5:e3:c6:
         70:38:c7:61:16:05:42:40:3a:ff:4a:1b:62:81:d8:f9:61:fa:
         f4:db:78:10:e7:28:1e:cf:bf:a6:c1:bd:a6:46:01:c6:ed:78:
         f8:97:c9:ff:7b:b0:0c:10:b1:da:b6:66:62:c7:a3:12:8b:0c:
         8e:64:81:c5:34:d7:5b:08:e5:81:d3:29:bc:81:1b:01:1f:62:
         b4:5e:d7:80:c7:2a:57:2d:da:83:0d:a8:1c:a6:47:c9:90:78:
         cd:e8:41:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:12:14 2025 by rpki-client