Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/323830343a313466303a3a2f33322d3332203d3e20323633333630.roa
File:                     323830343a313466303a3a2f33322d3332203d3e20323633333630.roa (raw, json)
Hash identifier:          C8b+x5uC7aOqiXtzFA4gfhZGlqp4+to76PC8olLyFpg=
Subject key identifier:   7C:2D:D2:2F:9D:F9:42:AD:C9:9E:2F:B8:0A:33:5F:FE:6B:83:F8:A8
Certificate issuer:       /CN=66B03F54D91D92AB0222173C178095462152C2A6
Certificate serial:       513A35611A42ABD46FB40AD23FC5239B72D1EFBF
Authority key identifier: 66:B0:3F:54:D9:1D:92:AB:02:22:17:3C:17:80:95:46:21:52:C2:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B03F54D91D92AB0222173C178095462152C2A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/323830343a313466303a3a2f33322d3332203d3e20323633333630.roa
Signing time:             Wed 30 Apr 2025 18:45:36 +0000
ROA not before:           Wed 30 Apr 2025 18:40:36 +0000
ROA not after:            Wed 29 Apr 2026 18:45:36 +0000
asID:                     263360
IP address blocks:        2804:14f0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/66B03F54D91D92AB0222173C178095462152C2A6.crl
                          rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/66B03F54D91D92AB0222173C178095462152C2A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B03F54D91D92AB0222173C178095462152C2A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 22:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3a:35:61:1a:42:ab:d4:6f:b4:0a:d2:3f:c5:23:9b:72:d1:ef:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66B03F54D91D92AB0222173C178095462152C2A6
        Validity
            Not Before: Apr 30 18:40:36 2025 GMT
            Not After : Apr 29 18:45:36 2026 GMT
        Subject: CN=7C2DD22F9DF942ADC99E2FB80A335FFE6B83F8A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:84:86:1f:68:33:8c:14:de:69:77:e5:e0:ab:
                    c5:b1:6b:93:e5:9d:7a:dc:0d:92:d8:56:21:c3:84:
                    06:f7:ee:d7:60:2b:41:23:9f:65:97:70:37:7c:91:
                    1a:15:82:ef:36:33:62:42:7b:5f:cf:6f:1a:3e:53:
                    12:89:82:e5:d6:67:a1:80:8e:ea:89:a8:d2:e3:62:
                    6d:ed:d8:d2:76:db:c9:35:09:15:44:da:9d:0b:b7:
                    e3:98:31:61:27:3e:1e:0c:ed:a7:b2:9f:38:0c:fb:
                    a0:10:77:d4:42:ca:94:ed:66:cd:7d:84:a9:1f:3e:
                    6d:80:2b:1e:cb:83:78:54:57:12:d0:7f:4c:c8:8d:
                    91:29:d2:40:7f:c7:b8:29:cb:ef:67:f9:90:4d:e9:
                    f4:d9:a9:e2:44:e4:d6:5d:a3:b3:5b:fc:95:01:17:
                    d3:72:38:c8:34:a3:57:e8:20:c6:ab:b0:3b:6e:9d:
                    ea:40:8f:02:c5:9c:fc:c6:81:d5:f4:c8:45:0e:d7:
                    ea:a1:02:90:7f:d6:8c:b9:26:7b:f0:c1:15:37:b7:
                    92:38:d0:9e:72:7b:32:3a:c0:d0:a4:39:1b:1b:83:
                    f7:8c:94:41:b3:6b:f4:21:c2:32:36:0e:97:a2:34:
                    3f:4b:1d:fb:23:9c:74:72:c9:03:de:81:1f:43:1a:
                    8f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2D:D2:2F:9D:F9:42:AD:C9:9E:2F:B8:0A:33:5F:FE:6B:83:F8:A8
            X509v3 Authority Key Identifier:
                keyid:66:B0:3F:54:D9:1D:92:AB:02:22:17:3C:17:80:95:46:21:52:C2:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/66B03F54D91D92AB0222173C178095462152C2A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B03F54D91D92AB0222173C178095462152C2A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/323830343a313466303a3a2f33322d3332203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:cb:13:65:1f:bd:a4:a9:57:1c:b2:c5:8b:70:38:ca:70:7d:
         29:a6:ba:11:00:0e:2e:dd:e4:be:e6:f7:a0:55:ac:ed:d3:8c:
         77:df:b6:47:be:1d:e0:21:c8:41:48:78:18:a3:3a:2b:8c:2f:
         53:d6:a0:fa:04:5e:1b:c0:4e:77:59:ec:f6:a6:70:04:77:87:
         c6:10:7b:39:bf:ee:de:cb:08:64:fc:99:06:42:18:c3:3e:fc:
         41:2e:a2:42:c2:b0:f5:c1:82:a8:4c:e2:04:12:86:08:da:b4:
         ad:a5:a4:fa:4d:30:94:bd:f5:ed:12:c8:e7:b0:69:25:a8:06:
         c7:ad:62:2c:20:cf:ad:c9:9c:23:93:e7:5a:39:35:65:47:12:
         b7:75:bb:5c:d0:70:e7:b0:1e:fb:d5:60:63:b6:ef:ff:8b:7a:
         c5:c4:62:4e:f3:64:c7:23:e4:35:b8:f8:ce:db:18:73:c9:69:
         f8:55:7f:9c:bf:c8:60:98:2f:5f:80:ad:43:17:b6:de:57:5a:
         96:6b:53:0f:e6:a2:b4:e7:90:4f:88:f7:51:76:b4:d4:b0:af:
         a1:d6:dd:1f:8c:ce:af:1f:1a:52:9c:c7:7c:2d:5f:43:c6:c4:
         ee:18:ad:0a:e8:9e:54:f9:e6:2e:ff:c1:e4:76:da:5b:a0:25:
         b3:63:33:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:51:54 2025 by rpki-client