Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a633a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          BUf6DGjJOAEClbZG/ul57+ePf2w8NZCOWKLyTaQwoKQ=
Subject key identifier:   FB:1F:FB:E6:5D:F1:27:62:A8:13:94:3E:16:14:16:9A:B4:90:8D:4B
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       346BB770B9D121B7384E0ACB019E900D2CE9C5EA
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633a3a2f34382d313238203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:45:05 +0000
ROA not before:           Wed 30 Apr 2025 18:40:05 +0000
ROA not after:            Wed 29 Apr 2026 18:45:05 +0000
asID:                     52580
IP address blocks:        2804:cf8:c::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 06:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6b:b7:70:b9:d1:21:b7:38:4e:0a:cb:01:9e:90:0d:2c:e9:c5:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:40:05 2025 GMT
            Not After : Apr 29 18:45:05 2026 GMT
        Subject: CN=FB1FFBE65DF12762A813943E1614169AB4908D4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:16:9b:d2:cd:c4:43:87:39:24:e2:0f:b3:8a:
                    88:7c:f3:a6:7a:c7:4f:d5:6c:49:4b:7f:51:5a:71:
                    91:9f:d8:6a:be:c0:c5:fa:88:60:16:3d:55:87:7b:
                    28:86:41:0c:5d:2b:a8:4b:57:7a:af:33:1f:50:4f:
                    80:bd:1b:23:1a:8c:8a:fc:3c:78:a9:17:a3:b8:b7:
                    3c:65:12:c6:2c:fb:90:02:19:b9:12:e3:c7:0f:1e:
                    78:5f:41:31:96:17:c1:b0:62:d9:69:36:ea:96:fe:
                    3d:b4:38:49:32:0f:7f:09:b1:18:f2:b2:e0:66:3b:
                    28:78:75:89:fc:dd:86:6b:9b:10:0f:6c:87:99:f6:
                    bb:08:ac:21:88:65:eb:28:b3:1f:4e:d7:55:8a:dd:
                    cc:6f:fb:66:d7:b4:dc:6f:8e:62:7b:32:f9:62:a6:
                    ba:0c:e3:9a:af:60:5a:3c:b1:b5:36:aa:68:26:08:
                    86:f1:ed:ad:0f:48:01:e1:56:06:ef:29:5c:37:13:
                    63:ef:95:cd:d2:65:37:60:20:19:5d:f1:2f:e7:da:
                    fd:d8:13:c4:71:05:e0:94:a7:71:84:70:1f:0b:1d:
                    09:bc:03:39:93:9e:42:54:7f:fe:d4:30:b5:11:21:
                    01:c0:d5:ff:13:e8:74:a9:cf:6f:90:56:d3:07:13:
                    ac:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1F:FB:E6:5D:F1:27:62:A8:13:94:3E:16:14:16:9A:B4:90:8D:4B
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:0b:b6:38:74:e2:25:1b:be:d4:f2:1e:60:97:44:f0:8a:46:
         04:68:a8:0b:74:29:47:a3:6a:b5:00:e1:d1:27:4f:98:a8:61:
         a3:ab:ba:0a:99:71:31:99:cd:0d:7f:f1:d2:ac:e6:61:81:35:
         41:dd:37:74:62:34:e8:ad:c9:83:56:b9:5d:bb:b5:47:8f:ff:
         38:5b:bb:c3:8a:48:68:bb:3c:5f:4c:21:60:b8:af:bd:7f:3f:
         5a:d8:86:ce:6a:31:14:95:f9:79:d7:17:61:b9:16:54:c7:bb:
         ab:f9:14:8b:e3:ac:bf:a2:ad:83:67:47:56:eb:0f:81:a2:be:
         f8:c1:f4:ed:eb:54:be:48:fe:aa:f0:d6:6e:bf:98:1b:c5:5c:
         b7:65:95:34:70:a8:a7:65:8b:c3:5e:be:75:0f:3c:e6:69:36:
         9b:1a:5f:f0:cf:e0:c4:27:77:da:f5:22:70:47:3b:2b:78:53:
         aa:9a:21:87:65:ec:81:38:92:41:e1:ef:90:f0:ad:3b:fb:f8:
         46:0d:da:ba:d7:b9:50:77:a1:9a:4f:a8:73:a2:fc:29:0d:59:
         95:c3:ba:e1:4e:c0:d2:78:52:53:14:98:f2:c5:5b:d3:31:0c:
         7b:3f:98:66:87:45:16:49:88:77:20:a3:c0:8a:90:35:75:fb:
         c3:dc:70:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:57:26 2025 by rpki-client