Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33322d3332203d3e20323633393430.roa
File:                     323830343a323831383a3a2f33322d3332203d3e20323633393430.roa (raw, json)
Hash identifier:          G/ayQxw7TiMmSIgY4899Se3gB2xvv2orIlyv9I9q2oM=
Subject key identifier:   DF:75:FD:21:B1:D0:E8:EE:66:F9:C0:4C:18:B4:BE:1F:EB:33:18:90
Certificate issuer:       /CN=49035094B34CBA1B308381D57F68D0820CEA3A4F
Certificate serial:       604D29F189BAF608EE76F3A245032357E8C3B65F
Authority key identifier: 49:03:50:94:B3:4C:BA:1B:30:83:81:D5:7F:68:D0:82:0C:EA:3A:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49035094B34CBA1B308381D57F68D0820CEA3A4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33322d3332203d3e20323633393430.roa
Signing time:             Mon 05 May 2025 20:48:50 +0000
ROA not before:           Mon 05 May 2025 20:43:50 +0000
ROA not after:            Mon 04 May 2026 20:48:50 +0000
asID:                     263940
IP address blocks:        2804:2818::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/49035094B34CBA1B308381D57F68D0820CEA3A4F.crl
                          rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/49035094B34CBA1B308381D57F68D0820CEA3A4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49035094B34CBA1B308381D57F68D0820CEA3A4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 13:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4d:29:f1:89:ba:f6:08:ee:76:f3:a2:45:03:23:57:e8:c3:b6:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49035094B34CBA1B308381D57F68D0820CEA3A4F
        Validity
            Not Before: May  5 20:43:50 2025 GMT
            Not After : May  4 20:48:50 2026 GMT
        Subject: CN=DF75FD21B1D0E8EE66F9C04C18B4BE1FEB331890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:27:48:3c:1c:a7:4d:19:36:51:1e:11:50:15:
                    12:ea:e6:15:31:0f:b4:3f:90:de:f0:7a:61:47:e4:
                    52:cc:43:f6:ad:d5:2c:f1:59:60:a6:5c:e3:83:a0:
                    11:61:42:aa:22:d0:33:ef:97:bb:ad:7b:03:a8:15:
                    f4:2f:06:ca:cd:e3:99:ed:5e:f9:ac:02:1d:ab:48:
                    93:54:06:c1:61:d8:e8:20:53:2a:32:e5:97:72:74:
                    31:43:1f:09:14:34:ed:d6:9e:be:0e:7e:aa:56:a2:
                    4d:32:34:c1:c1:33:5e:e8:7b:90:7d:bb:16:ab:f4:
                    47:f5:dd:4f:0c:24:1c:c0:b6:08:4f:61:70:33:ae:
                    c1:8a:7b:9d:15:96:25:a9:e3:02:22:48:ed:e7:6f:
                    62:80:d6:db:0d:af:f4:76:44:73:44:dc:45:1d:e9:
                    a6:2d:d0:25:e8:25:64:60:8f:02:1b:e7:ac:3a:fc:
                    13:ff:b7:0a:4c:66:78:6a:9e:6e:12:ef:b0:25:da:
                    1e:33:b7:57:21:7a:54:1c:12:46:28:23:13:d0:5f:
                    12:ee:aa:98:9e:12:46:19:20:a5:e6:0d:a6:d5:8d:
                    1c:0b:90:42:75:49:f0:79:d5:f7:25:b3:f9:50:74:
                    ab:89:99:47:d6:f2:8d:b1:bc:08:1e:0f:9e:13:ff:
                    62:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:75:FD:21:B1:D0:E8:EE:66:F9:C0:4C:18:B4:BE:1F:EB:33:18:90
            X509v3 Authority Key Identifier:
                keyid:49:03:50:94:B3:4C:BA:1B:30:83:81:D5:7F:68:D0:82:0C:EA:3A:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/49035094B34CBA1B308381D57F68D0820CEA3A4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49035094B34CBA1B308381D57F68D0820CEA3A4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33322d3332203d3e20323633393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2818::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:d9:fd:04:12:e9:67:1d:cb:23:e2:50:aa:e5:3c:04:81:b2:
         09:d8:71:da:0b:27:fb:db:8e:e1:36:9c:7a:79:27:09:cc:67:
         95:ba:eb:15:df:a7:1e:3f:ff:f3:d5:f9:c8:17:f8:39:66:5f:
         f4:52:38:15:a6:d1:0f:f0:d6:1d:e4:ff:04:b9:8d:5c:34:df:
         42:4b:e5:fc:d8:72:0c:71:9e:6e:6f:6b:94:f5:de:f3:56:68:
         fc:5a:36:f2:73:e5:a1:89:3d:c2:00:d4:b7:da:a0:1d:9d:1e:
         b0:e0:18:7c:af:84:e9:52:62:bf:f7:45:61:08:4b:b3:ac:17:
         31:94:e3:2f:c7:59:ca:ee:a9:d6:84:b2:64:c8:22:b4:85:80:
         50:29:a7:5f:e0:33:28:ed:69:29:2a:38:70:39:23:ae:76:b4:
         e3:3d:2b:6d:c6:b4:77:78:02:d8:30:cd:27:b3:64:86:7d:8c:
         d0:b4:8d:46:4c:b9:fe:49:88:a4:12:83:25:55:40:3d:82:65:
         15:19:0b:c3:7f:bf:92:9d:ef:e2:68:50:aa:2d:41:ba:fa:79:
         1a:ac:e8:8f:99:c2:a7:6f:48:1c:6a:2d:3c:0e:f0:49:36:ab:
         a1:41:0c:51:e5:9d:be:78:9c:9b:5a:16:24:d8:5f:05:46:d2:
         ca:a4:be:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:16:38 2025 by rpki-client