Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a333a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a333a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          ceTZBl79aLcYGx8HlKew0QHgpHeTz9qYBqYT1daUzy4=
Subject key identifier:   3F:08:4A:A3:74:3E:99:BF:3C:F8:A3:3A:AA:7B:E4:95:68:22:B9:B8
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       710396C79E6FCA66F995892914DF177C317141B2
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a333a3a2f34382d313238203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:44:23 +0000
ROA not before:           Wed 30 Apr 2025 18:39:23 +0000
ROA not after:            Wed 29 Apr 2026 18:44:23 +0000
asID:                     52580
IP address blocks:        2804:cf8:3::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 19:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:03:96:c7:9e:6f:ca:66:f9:95:89:29:14:df:17:7c:31:71:41:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:39:23 2025 GMT
            Not After : Apr 29 18:44:23 2026 GMT
        Subject: CN=3F084AA3743E99BF3CF8A33AAA7BE4956822B9B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:81:89:9b:46:54:57:89:78:34:73:0d:4d:6d:
                    42:0f:59:24:32:13:82:51:c3:00:ff:e8:23:a6:90:
                    83:1a:8c:41:64:bd:0e:c5:40:97:55:2c:2e:b9:3f:
                    73:09:88:b1:df:ec:10:d5:a2:d4:7c:4b:54:38:b9:
                    f9:3d:e4:4c:60:72:15:b5:50:66:a2:6a:7b:10:e8:
                    52:89:2d:50:1b:e0:52:ae:57:03:33:c0:21:cb:6b:
                    29:52:a6:e0:75:c5:45:bd:a3:f7:08:bc:84:c4:8c:
                    b8:d5:7e:ff:25:b4:48:c6:ac:d4:97:db:df:b0:d1:
                    bf:c3:bf:fe:a7:03:62:b8:cb:ce:dd:87:54:76:9d:
                    a1:29:c8:e1:eb:e6:7d:13:d4:74:ed:bb:d0:de:fe:
                    b5:f0:69:70:86:c8:84:fb:ab:0d:00:51:77:fb:06:
                    25:ae:b7:7f:fb:ae:10:b3:12:9d:23:bd:3a:71:92:
                    fe:7f:79:d7:66:ca:3e:c8:e8:a6:7c:f3:60:03:27:
                    55:be:1e:08:6f:13:4f:8c:42:08:3e:8e:73:5b:ef:
                    9e:6f:09:bc:74:85:c0:c6:1e:da:0a:88:b9:2a:33:
                    06:dd:44:e5:c8:1f:30:e6:65:54:ba:24:bf:b1:d0:
                    82:d3:47:0d:d2:ba:05:c4:5a:81:30:a8:2c:28:35:
                    3d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:08:4A:A3:74:3E:99:BF:3C:F8:A3:3A:AA:7B:E4:95:68:22:B9:B8
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a333a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:ca:f8:78:08:91:ad:d7:68:56:7e:8d:d4:63:6d:57:8b:e9:
         fc:d8:6c:4b:22:20:a1:17:02:d6:0d:57:ed:67:66:f3:ed:56:
         68:36:46:7e:4d:53:f4:48:ac:d9:0a:a3:34:4b:bf:75:ae:e8:
         08:9a:43:00:28:6b:ec:bc:c3:8d:14:37:a1:63:32:de:cf:02:
         db:2d:00:0e:3b:7a:47:d5:df:42:e5:30:51:50:51:4b:b2:85:
         d1:c1:c0:7c:d3:f5:d7:ce:fd:e8:ed:1d:4d:4e:e2:70:bb:39:
         ee:f8:fe:16:40:a9:14:30:70:31:aa:80:87:0f:a5:9f:1a:3d:
         68:a6:e6:19:83:c8:22:1c:37:5b:6e:7e:3f:05:f1:85:37:e2:
         f3:bf:9d:c1:b0:fb:c9:26:e2:c2:e4:2d:4f:2f:ca:4b:ed:8f:
         96:17:ca:84:b3:03:a0:18:00:40:8e:b4:d0:72:bb:d4:8b:8e:
         97:ff:f8:93:c3:12:9f:ba:f1:1d:9d:c4:1f:c7:33:f2:a2:af:
         87:ac:81:df:28:d2:50:42:1f:ff:6e:4c:ee:26:e2:96:43:c3:
         37:89:14:98:f9:33:2c:02:76:74:d3:48:69:29:34:cd:f7:45:
         13:8f:50:82:12:33:08:06:81:5a:c8:24:ab:f4:6d:19:8b:05:
         99:15:83:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:56:27 2025 by rpki-client