Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FoBShUaoMyCYu29rw24hCW8HcrBhs76Lp6STm3nG8DSE/0/323830343a353834343a3a2f33322d313238203d3e20323638313137.roa
File:                     323830343a353834343a3a2f33322d313238203d3e20323638313137.roa (raw, json)
Hash identifier:          27zms1vpHOBgXbFLk/aNsSOBXvYKM5bvXKMBcfWL8kg=
Subject key identifier:   3B:14:D3:27:8A:36:80:4A:93:97:50:30:CB:E5:69:3B:90:29:32:62
Certificate issuer:       /CN=8BD1D8BD14FC1D0BBA5699DECB330398D407C804
Certificate serial:       63B0EFD70D8B98F43C32283807E6CE6F411D470E
Authority key identifier: 8B:D1:D8:BD:14:FC:1D:0B:BA:56:99:DE:CB:33:03:98:D4:07:C8:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD1D8BD14FC1D0BBA5699DECB330398D407C804.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoBShUaoMyCYu29rw24hCW8HcrBhs76Lp6STm3nG8DSE/0/323830343a353834343a3a2f33322d313238203d3e20323638313137.roa
Signing time:             Thu 10 Apr 2025 13:30:55 +0000
ROA not before:           Thu 10 Apr 2025 13:25:55 +0000
ROA not after:            Thu 09 Apr 2026 13:30:55 +0000
asID:                     268117
IP address blocks:        2804:5844::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FoBShUaoMyCYu29rw24hCW8HcrBhs76Lp6STm3nG8DSE/0/8BD1D8BD14FC1D0BBA5699DECB330398D407C804.crl
                          rsync://rpki-repo.registro.br/repo/FoBShUaoMyCYu29rw24hCW8HcrBhs76Lp6STm3nG8DSE/0/8BD1D8BD14FC1D0BBA5699DECB330398D407C804.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD1D8BD14FC1D0BBA5699DECB330398D407C804.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b0:ef:d7:0d:8b:98:f4:3c:32:28:38:07:e6:ce:6f:41:1d:47:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD1D8BD14FC1D0BBA5699DECB330398D407C804
        Validity
            Not Before: Apr 10 13:25:55 2025 GMT
            Not After : Apr  9 13:30:55 2026 GMT
        Subject: CN=3B14D3278A36804A93975030CBE5693B90293262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:67:7d:15:57:4b:4c:f7:bf:5e:77:cd:4f:38:
                    14:5c:81:64:07:38:d7:cf:65:57:a0:d5:1c:a4:7b:
                    e2:bc:16:90:1e:98:ef:77:f7:dd:3f:3e:8b:1e:85:
                    9c:79:93:75:fa:87:cf:59:46:a1:4d:4a:19:96:55:
                    1a:53:f4:2d:fb:c6:1f:81:8d:34:32:08:93:ea:1f:
                    f9:23:57:a2:ed:bf:d6:9e:a1:ef:c2:46:75:0d:5b:
                    f8:7a:89:88:88:5d:c7:0c:b7:54:05:a0:17:90:0f:
                    13:0a:16:a7:f6:d4:bf:dd:ca:4e:05:ab:04:94:fe:
                    cd:b2:56:4a:39:19:af:d9:74:07:2e:68:9a:22:e3:
                    a1:15:37:22:1f:f7:23:cc:81:cc:d0:1e:b6:23:3f:
                    cb:47:41:40:35:9a:10:4e:08:76:1e:a0:a3:44:7b:
                    89:2a:e9:7e:22:07:21:31:9a:b3:a4:7b:7a:7a:bc:
                    33:35:59:c5:1a:03:16:31:f6:f3:88:f9:0c:a1:bd:
                    cf:1f:b7:db:9e:fd:1b:0e:26:83:69:b7:10:cb:0e:
                    29:6b:98:b6:79:5d:18:cb:54:5b:5b:91:ef:27:b2:
                    bf:72:08:4b:72:19:99:6b:7f:74:5c:4b:09:f4:52:
                    e2:4e:ee:9f:48:b0:d3:14:39:1b:34:f7:5d:14:e9:
                    bc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:14:D3:27:8A:36:80:4A:93:97:50:30:CB:E5:69:3B:90:29:32:62
            X509v3 Authority Key Identifier:
                keyid:8B:D1:D8:BD:14:FC:1D:0B:BA:56:99:DE:CB:33:03:98:D4:07:C8:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoBShUaoMyCYu29rw24hCW8HcrBhs76Lp6STm3nG8DSE/0/8BD1D8BD14FC1D0BBA5699DECB330398D407C804.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD1D8BD14FC1D0BBA5699DECB330398D407C804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoBShUaoMyCYu29rw24hCW8HcrBhs76Lp6STm3nG8DSE/0/323830343a353834343a3a2f33322d313238203d3e20323638313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5844::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:88:69:76:87:7e:c5:2f:dd:30:8d:99:e8:57:96:09:07:0a:
         66:88:83:3a:fc:44:85:4e:fd:17:69:61:03:a9:42:d3:2a:49:
         40:cc:5d:2f:50:ee:9d:dc:8f:e6:1c:38:81:eb:7a:93:70:74:
         ee:67:2e:58:ee:13:04:f5:fa:69:b9:de:4a:7e:75:24:e9:11:
         b9:50:55:23:24:56:49:e2:3f:ee:5b:45:a8:1f:3d:cf:e5:8a:
         14:1a:41:ad:6e:74:26:ab:73:08:64:48:74:3c:be:aa:c6:2e:
         2f:ae:c5:87:d3:07:ef:55:d0:a4:a9:8c:36:25:a7:5e:ce:71:
         bb:54:d3:37:32:1b:a1:d9:c1:fe:f0:f8:df:57:89:26:cb:a2:
         31:d6:2c:e8:db:a5:5f:94:51:c3:f9:0f:1a:c1:63:37:54:9d:
         3d:de:3d:02:75:d1:4a:4c:6c:7d:6f:8e:ef:f9:fc:9d:8e:bc:
         14:67:c2:17:b5:92:29:29:a8:c1:94:5a:00:b7:8f:d6:84:b1:
         4a:4f:f9:fa:4b:3e:59:2e:df:2d:c2:ca:b6:c9:dc:d1:12:a0:
         04:be:25:c6:5a:93:9d:5c:f9:9b:b1:83:fe:44:5d:b7:6f:f5:
         c7:2c:3f:fb:0d:7a:04:f7:1d:12:c9:74:cb:a8:d1:e5:09:82:
         05:1d:bb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:11 2025 by rpki-client on console.sobornost.net