Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a633030303a3a2f33342d3334203d3e20323639363634.roa
File:                     323830343a363830303a633030303a3a2f33342d3334203d3e20323639363634.roa (raw, json)
Hash identifier:          Up0c2ZBEbXebnVQAfTWF+6fuxhMj6DoXiFFBdLqFtos=
Subject key identifier:   AA:9F:64:E8:59:7D:F1:81:F0:44:CB:C6:C8:DD:22:1B:02:96:5B:F0
Certificate issuer:       /CN=B1EA6EBF8A29DA2A711A40FAF75D6DD27F5617A3
Certificate serial:       13AE8F1C11CAA3F53BD106C40F5CCA6D0ABBACED
Authority key identifier: B1:EA:6E:BF:8A:29:DA:2A:71:1A:40:FA:F7:5D:6D:D2:7F:56:17:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1EA6EBF8A29DA2A711A40FAF75D6DD27F5617A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a633030303a3a2f33342d3334203d3e20323639363634.roa
Signing time:             Wed 30 Apr 2025 18:22:33 +0000
ROA not before:           Wed 30 Apr 2025 18:17:33 +0000
ROA not after:            Wed 29 Apr 2026 18:22:33 +0000
asID:                     269664
IP address blocks:        2804:6800:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/B1EA6EBF8A29DA2A711A40FAF75D6DD27F5617A3.crl
                          rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/B1EA6EBF8A29DA2A711A40FAF75D6DD27F5617A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1EA6EBF8A29DA2A711A40FAF75D6DD27F5617A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 19:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ae:8f:1c:11:ca:a3:f5:3b:d1:06:c4:0f:5c:ca:6d:0a:bb:ac:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1EA6EBF8A29DA2A711A40FAF75D6DD27F5617A3
        Validity
            Not Before: Apr 30 18:17:33 2025 GMT
            Not After : Apr 29 18:22:33 2026 GMT
        Subject: CN=AA9F64E8597DF181F044CBC6C8DD221B02965BF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fa:65:f0:e2:31:0e:b5:7b:6d:0f:bb:33:ab:
                    dc:9c:9d:53:4c:f1:2b:93:4e:e5:9f:d1:43:15:a7:
                    58:ce:2f:70:56:30:68:f0:2c:1c:d8:8c:42:01:c2:
                    c4:5c:ac:b2:89:09:6b:55:2e:40:63:5b:93:0c:df:
                    94:52:8c:f0:ae:ac:a0:df:a3:8e:5d:59:98:64:c5:
                    42:bf:aa:b9:23:26:25:d8:6d:a7:4d:81:27:56:69:
                    17:9d:02:97:56:2d:8f:1a:7e:28:45:bf:0f:bc:87:
                    c4:5f:f1:9f:33:7f:d3:0c:3d:75:40:39:82:96:6d:
                    5b:a1:65:ed:ea:24:5d:ff:be:ad:b8:cf:79:15:eb:
                    ff:8e:91:5e:4d:10:5f:69:d0:d4:a8:a9:1f:0d:cd:
                    ab:fc:fd:02:a1:3e:58:1f:59:6e:c7:aa:f2:29:d6:
                    97:50:d1:ec:92:49:3a:14:31:8d:7b:a8:b2:9b:ab:
                    92:0c:ae:3f:e1:8d:ec:ed:51:f1:18:2a:81:50:1f:
                    6b:ec:d2:d4:60:fd:e9:4d:fa:a9:96:5b:3a:ff:a6:
                    cd:cb:20:9b:a5:bd:a1:ca:c9:89:3a:15:11:95:81:
                    12:44:5e:cb:07:d4:2f:09:2f:00:fc:c8:c8:0c:d0:
                    5c:9b:2d:d3:b9:09:eb:37:57:60:a3:00:eb:55:7c:
                    02:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9F:64:E8:59:7D:F1:81:F0:44:CB:C6:C8:DD:22:1B:02:96:5B:F0
            X509v3 Authority Key Identifier:
                keyid:B1:EA:6E:BF:8A:29:DA:2A:71:1A:40:FA:F7:5D:6D:D2:7F:56:17:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/B1EA6EBF8A29DA2A711A40FAF75D6DD27F5617A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1EA6EBF8A29DA2A711A40FAF75D6DD27F5617A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a633030303a3a2f33342d3334203d3e20323639363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6800:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         55:9d:d2:22:a4:52:ea:7f:22:e5:ef:3b:47:33:04:3a:f1:ca:
         26:f6:f7:df:dc:f4:e6:7e:22:dd:a6:11:9a:60:c2:ca:7c:4a:
         84:64:4b:c5:26:45:c8:e5:b0:f6:1f:54:9d:d8:f1:63:48:56:
         eb:82:3e:50:e9:ff:bd:9f:13:ba:05:96:df:df:11:df:dd:72:
         ac:f0:43:16:4f:65:c1:11:1f:09:e5:1b:08:3c:3d:bb:9f:91:
         f7:ad:a9:71:67:8b:45:bc:00:0a:b1:46:b7:bd:8e:98:ca:a6:
         f6:02:39:a0:96:b7:64:32:66:cc:0a:03:82:f0:69:01:7f:ac:
         87:e6:d8:24:c2:d5:9c:ca:28:fe:79:f0:41:e2:38:d6:b4:55:
         64:69:d5:f3:2d:b6:8e:46:99:10:1e:fc:47:0c:65:42:fb:63:
         45:b7:17:83:18:c9:af:1c:af:6c:f5:13:f0:e1:a7:90:6a:0e:
         d2:24:97:70:df:30:de:fa:59:6b:6b:e2:2c:ac:1c:8e:e2:ff:
         f3:cc:61:dc:c1:dc:3c:1b:0a:da:bc:ff:16:af:e5:58:d7:d9:
         6d:2c:c4:a9:f4:6c:9f:0c:28:12:fd:80:f9:f4:47:95:9b:fe:
         29:b1:a1:4d:35:97:64:be:2f:0d:40:9c:24:77:3c:5f:d9:2e:
         d2:80:84:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 05:14:56 2025 by rpki-client