Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/323830343a326238343a3a2f33322d3438203d3e20323635313537.roa
File:                     323830343a326238343a3a2f33322d3438203d3e20323635313537.roa (raw, json)
Hash identifier:          m4RrxxY+l44a6uBJGm2++M8fHR8JenM9X47GkDv5nYo=
Subject key identifier:   8E:87:3E:B8:2F:F2:C5:D7:AF:D8:60:8A:6C:01:AB:7B:13:A7:0B:A3
Certificate issuer:       /CN=A6578758F56AC37AA21D1EA43F62AE01ABEE5915
Certificate serial:       030BCB5027C0C284476BF455FD97D233FDA11FA6
Authority key identifier: A6:57:87:58:F5:6A:C3:7A:A2:1D:1E:A4:3F:62:AE:01:AB:EE:59:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6578758F56AC37AA21D1EA43F62AE01ABEE5915.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/323830343a326238343a3a2f33322d3438203d3e20323635313537.roa
Signing time:             Wed 30 Apr 2025 20:39:39 +0000
ROA not before:           Wed 30 Apr 2025 20:34:39 +0000
ROA not after:            Wed 29 Apr 2026 20:39:39 +0000
asID:                     265157
IP address blocks:        2804:2b84::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/A6578758F56AC37AA21D1EA43F62AE01ABEE5915.crl
                          rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/A6578758F56AC37AA21D1EA43F62AE01ABEE5915.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6578758F56AC37AA21D1EA43F62AE01ABEE5915.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 14:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0b:cb:50:27:c0:c2:84:47:6b:f4:55:fd:97:d2:33:fd:a1:1f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6578758F56AC37AA21D1EA43F62AE01ABEE5915
        Validity
            Not Before: Apr 30 20:34:39 2025 GMT
            Not After : Apr 29 20:39:39 2026 GMT
        Subject: CN=8E873EB82FF2C5D7AFD8608A6C01AB7B13A70BA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d0:76:5c:9f:69:ed:d3:04:13:05:1b:e8:35:
                    eb:bf:41:a9:49:9c:19:8a:6c:ff:7c:07:42:69:82:
                    10:6d:1c:80:cb:5b:10:4e:ea:74:8b:39:6d:c4:0e:
                    c2:8d:f0:b6:36:bb:be:5e:aa:74:fe:f8:ac:ac:83:
                    91:57:a2:72:86:fe:d6:e4:0d:e9:ff:12:0b:0b:a5:
                    4d:ef:01:ff:7d:c9:0e:7f:33:8e:99:a2:5e:81:4d:
                    52:20:e9:ae:c6:5f:5c:57:06:6b:66:6e:b8:49:a2:
                    cb:4a:8e:10:1c:f5:58:9b:21:ad:e1:34:e9:c0:71:
                    ee:f6:12:f2:fc:6e:c1:4f:d8:72:d0:56:b1:f5:47:
                    17:ba:ce:46:20:f3:40:2d:39:00:22:b1:cf:a1:9b:
                    06:fe:f0:ce:f0:97:b8:f3:fc:4c:b3:1a:eb:f0:10:
                    b0:4e:3f:b5:99:74:56:14:2f:af:e9:02:b4:4a:d6:
                    7e:f0:86:14:9e:17:97:70:88:26:2f:41:0b:1b:2f:
                    64:80:0d:d1:b8:9d:0e:fd:39:0e:31:dd:cb:cc:7a:
                    1e:22:42:5c:f4:aa:76:78:ab:ab:d1:25:a6:97:04:
                    23:83:17:c2:7f:cf:d9:81:43:04:f2:ee:4e:0d:51:
                    57:1d:62:fa:3c:72:60:06:63:cd:3e:87:30:84:c2:
                    44:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:87:3E:B8:2F:F2:C5:D7:AF:D8:60:8A:6C:01:AB:7B:13:A7:0B:A3
            X509v3 Authority Key Identifier:
                keyid:A6:57:87:58:F5:6A:C3:7A:A2:1D:1E:A4:3F:62:AE:01:AB:EE:59:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/A6578758F56AC37AA21D1EA43F62AE01ABEE5915.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6578758F56AC37AA21D1EA43F62AE01ABEE5915.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/323830343a326238343a3a2f33322d3438203d3e20323635313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b84::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:c1:5e:42:be:7a:76:b4:06:08:7d:1c:26:b7:8c:cf:8d:9a:
         78:da:7f:72:d7:f9:6f:52:b6:84:ea:85:9e:f1:1a:d6:8a:62:
         2a:20:d1:25:25:9d:6d:f0:b7:9e:2f:d8:3a:ca:56:93:b9:39:
         7f:d4:e6:42:c9:19:5d:6f:8c:5b:60:e5:6b:ba:8d:d1:f0:26:
         35:20:99:55:26:f1:25:a9:31:67:72:72:21:d3:f4:7f:06:ea:
         97:45:cc:64:32:19:5a:cd:08:62:c5:84:a6:a4:b4:de:85:f4:
         e4:48:d7:78:7b:a9:f1:4d:6e:db:78:cd:a9:37:25:02:72:20:
         76:bf:b4:1b:3f:43:ee:ce:59:b1:4c:ba:29:48:6f:dd:09:ad:
         ee:06:fb:93:e2:dc:d3:55:8b:20:03:bd:07:42:47:bd:51:b6:
         70:ce:8a:d5:e4:9f:2a:ab:7b:f7:aa:e2:3c:e8:35:2a:6b:36:
         f4:b5:37:d2:54:cb:59:d6:02:ff:61:91:ed:99:4f:a9:95:f7:
         9e:e5:30:81:43:cd:29:e1:f8:47:95:c1:dd:f2:0c:db:f3:79:
         b1:0d:cb:9d:b5:4b:6a:cd:66:47:6f:67:01:ef:43:aa:e1:f0:
         aa:54:2e:66:4a:97:e4:d8:61:0f:42:47:9d:af:0e:30:5a:1d:
         4c:ea:8b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 18:33:28 2025 by rpki-client