Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/323830343a313466303a3a2f33332d3333203d3e20323633333630.roa
File:                     323830343a313466303a3a2f33332d3333203d3e20323633333630.roa (raw, json)
Hash identifier:          oayLXC/U2FwNDo3ds5rcjLHfPZIfsLdi2JS2tS88OoQ=
Subject key identifier:   27:80:26:F6:E5:19:ED:94:32:2C:5C:53:BE:70:DA:3E:56:74:A1:4F
Certificate issuer:       /CN=66B03F54D91D92AB0222173C178095462152C2A6
Certificate serial:       12015ED4EAD5090725D92667326DA64B653F23E1
Authority key identifier: 66:B0:3F:54:D9:1D:92:AB:02:22:17:3C:17:80:95:46:21:52:C2:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B03F54D91D92AB0222173C178095462152C2A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/323830343a313466303a3a2f33332d3333203d3e20323633333630.roa
Signing time:             Wed 30 Apr 2025 18:45:36 +0000
ROA not before:           Wed 30 Apr 2025 18:40:36 +0000
ROA not after:            Wed 29 Apr 2026 18:45:36 +0000
asID:                     263360
IP address blocks:        2804:14f0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/66B03F54D91D92AB0222173C178095462152C2A6.crl
                          rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/66B03F54D91D92AB0222173C178095462152C2A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B03F54D91D92AB0222173C178095462152C2A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 22:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:01:5e:d4:ea:d5:09:07:25:d9:26:67:32:6d:a6:4b:65:3f:23:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66B03F54D91D92AB0222173C178095462152C2A6
        Validity
            Not Before: Apr 30 18:40:36 2025 GMT
            Not After : Apr 29 18:45:36 2026 GMT
        Subject: CN=278026F6E519ED94322C5C53BE70DA3E5674A14F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6a:4c:fc:79:f9:b5:69:20:78:db:6d:2a:11:
                    9c:3e:0e:2b:1f:00:db:05:be:96:f5:c8:84:3a:90:
                    28:37:6e:1c:30:a8:33:43:52:a4:aa:66:b7:91:5a:
                    6b:23:3d:9b:86:01:86:09:6b:88:c3:29:8c:31:ae:
                    80:27:7f:f4:b2:df:ce:80:56:96:cf:66:b8:68:33:
                    f7:f5:9f:27:00:96:91:05:7a:c5:78:c4:40:23:2b:
                    26:07:71:2f:21:8e:5d:03:c2:2a:55:52:cf:e0:2d:
                    4a:0f:c3:c6:12:cb:b8:61:94:a5:53:95:ae:a9:8f:
                    75:c3:e2:ea:43:65:5b:93:b6:8d:8e:ae:33:73:6b:
                    42:67:f3:be:80:1a:77:ea:ae:e0:f1:fa:ce:bf:a8:
                    14:db:97:c3:4d:73:04:9d:cc:4a:49:49:f4:97:26:
                    a1:65:1c:51:d3:58:4e:4c:2f:8e:b0:c6:41:f1:cb:
                    47:16:ae:d5:9d:f4:9d:41:65:77:36:90:93:92:ac:
                    59:6d:45:0e:0a:ec:25:ac:ac:f1:c0:1c:85:31:8a:
                    e0:7c:8b:1c:54:1b:35:7d:e8:6c:1f:53:be:8a:ee:
                    d2:11:cc:60:0f:12:aa:cc:70:22:b3:05:58:8f:d2:
                    e6:7f:d7:23:4d:8f:9f:d6:56:79:cc:81:b9:41:98:
                    fb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:80:26:F6:E5:19:ED:94:32:2C:5C:53:BE:70:DA:3E:56:74:A1:4F
            X509v3 Authority Key Identifier:
                keyid:66:B0:3F:54:D9:1D:92:AB:02:22:17:3C:17:80:95:46:21:52:C2:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/66B03F54D91D92AB0222173C178095462152C2A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B03F54D91D92AB0222173C178095462152C2A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/323830343a313466303a3a2f33332d3333203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14f0::/33

    Signature Algorithm: sha256WithRSAEncryption
         bc:42:25:b7:46:bd:35:c2:29:78:a4:e3:1f:64:1d:52:46:7f:
         5d:6f:a3:4f:93:6c:7d:2c:21:1c:8d:17:43:04:d8:cd:0c:36:
         03:44:77:e9:8a:7e:21:50:fb:05:2b:d5:45:66:4c:02:e7:4f:
         cc:94:f6:fb:74:87:4e:ef:54:2b:ad:fd:13:fd:75:d9:42:a5:
         e8:12:6f:fd:bf:f4:57:56:7b:3c:31:d9:e8:8d:d0:a6:5c:f1:
         30:1b:93:0f:ed:e1:b8:1b:7f:90:75:50:db:3e:eb:05:20:28:
         35:bd:72:1e:76:2e:dd:d7:b9:9f:57:63:3d:95:e0:3b:e0:a2:
         21:11:ce:71:31:f2:43:db:49:90:21:0d:0b:f2:77:6d:36:c8:
         a9:bd:ae:15:23:c1:b4:aa:6f:02:d6:f7:6a:bc:57:84:9d:72:
         81:7a:a9:9f:01:d7:d1:93:2d:90:76:7c:04:63:32:e8:04:41:
         6f:56:1f:99:64:d1:6d:6d:30:d7:a0:3c:74:3b:52:3d:8d:10:
         1e:ea:9b:a4:6d:63:f6:68:fc:20:f4:f5:d1:89:75:9d:8f:a9:
         1c:24:6d:64:08:45:e2:0a:a8:50:12:52:42:69:e2:77:e7:cb:
         ef:e4:f9:7a:ff:29:12:cb:61:96:09:f1:01:2e:d5:0d:a6:4c:
         a6:b4:f9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:06:22 2025 by rpki-client