Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/323830343a363137633a3a2f33322d313238203d3e20323639323337.roa
File:                     323830343a363137633a3a2f33322d313238203d3e20323639323337.roa (raw, json)
Hash identifier:          sQnUL1ddZJmK7Pa1H84KWuYmU6jxDiNsQrYCqfnPP9Y=
Subject key identifier:   64:8F:05:70:D2:4A:98:F4:DF:12:89:C1:DD:ED:BE:FA:50:26:DE:4F
Certificate issuer:       /CN=BEEC291E99280983D52B896A664497019F0107F2
Certificate serial:       3C5197D26C3EB51E8DF5F5BA85E984DDBEF20D94
Authority key identifier: BE:EC:29:1E:99:28:09:83:D5:2B:89:6A:66:44:97:01:9F:01:07:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEEC291E99280983D52B896A664497019F0107F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/323830343a363137633a3a2f33322d313238203d3e20323639323337.roa
Signing time:             Wed 28 May 2025 19:13:28 +0000
ROA not before:           Wed 28 May 2025 19:08:28 +0000
ROA not after:            Wed 27 May 2026 19:13:28 +0000
asID:                     269237
IP address blocks:        2804:617c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/BEEC291E99280983D52B896A664497019F0107F2.crl
                          rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/BEEC291E99280983D52B896A664497019F0107F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEEC291E99280983D52B896A664497019F0107F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 01:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:51:97:d2:6c:3e:b5:1e:8d:f5:f5:ba:85:e9:84:dd:be:f2:0d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEEC291E99280983D52B896A664497019F0107F2
        Validity
            Not Before: May 28 19:08:28 2025 GMT
            Not After : May 27 19:13:28 2026 GMT
        Subject: CN=648F0570D24A98F4DF1289C1DDEDBEFA5026DE4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3c:0f:2c:b1:86:73:a8:32:ae:6f:55:72:f1:
                    82:d4:b6:ba:b2:5d:3f:79:f7:33:9b:05:f7:19:f5:
                    0a:ba:a0:61:53:69:ed:84:5b:77:a2:d7:77:c0:32:
                    15:fc:d0:3b:ac:e0:15:a5:df:b7:04:18:05:b0:a8:
                    8c:55:7d:7c:92:7b:a7:d2:f2:77:1f:58:ce:b1:65:
                    ec:7d:62:49:7a:18:79:33:e1:47:9b:77:72:0a:ca:
                    44:84:ad:5d:29:ec:53:45:31:2c:d3:8c:85:f8:48:
                    1e:de:c5:31:af:4a:78:07:75:e8:5f:40:37:9d:e1:
                    1b:59:fd:66:22:3c:03:7d:1e:01:47:72:0e:5f:70:
                    e9:57:01:02:1e:b3:0c:2d:a9:43:01:b7:39:07:9d:
                    03:3c:3c:8e:49:84:16:52:b5:7b:0e:d2:5e:68:58:
                    98:6c:10:ed:5d:5e:62:2d:22:f7:b6:4c:d8:45:df:
                    c2:ab:9f:6e:e6:41:1b:90:01:aa:91:7f:08:6d:e0:
                    38:fa:80:ba:46:7f:0e:99:c1:e6:33:eb:a7:31:35:
                    74:d5:fd:ca:e7:4e:dc:13:f0:b3:8d:22:3d:6a:88:
                    95:74:e1:26:d9:78:bb:ba:f5:c0:30:34:f8:f8:4d:
                    18:94:34:7a:ac:ef:0e:cd:99:fd:f5:fc:59:c8:4c:
                    23:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8F:05:70:D2:4A:98:F4:DF:12:89:C1:DD:ED:BE:FA:50:26:DE:4F
            X509v3 Authority Key Identifier:
                keyid:BE:EC:29:1E:99:28:09:83:D5:2B:89:6A:66:44:97:01:9F:01:07:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/BEEC291E99280983D52B896A664497019F0107F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEEC291E99280983D52B896A664497019F0107F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/323830343a363137633a3a2f33322d313238203d3e20323639323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:617c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:b3:0e:47:28:9b:dd:0f:f7:e2:3c:65:94:53:45:16:5a:e1:
         c0:ec:dc:a1:bc:a1:aa:ee:60:03:2c:f3:26:df:61:52:ab:f7:
         6f:b8:a2:19:21:99:21:13:09:d8:f0:57:d8:90:8c:25:3c:a0:
         14:da:cf:86:1c:6a:b8:4c:82:aa:86:10:b3:00:7a:ad:e4:51:
         ed:4e:a1:9e:59:5c:2d:28:bf:b2:24:75:f4:3a:24:aa:6c:d4:
         d8:d8:f4:f5:54:8d:3c:c6:a3:3a:e5:01:ba:ee:3d:4c:e0:13:
         23:4b:68:f4:91:71:40:61:4f:a5:85:87:48:f3:e4:ef:21:5f:
         8a:61:6f:f2:a1:1d:d9:40:e5:83:5a:96:bc:99:2d:47:63:50:
         6a:59:2c:29:5c:d0:75:83:68:3a:7c:ce:9f:df:0e:fc:27:89:
         85:f7:22:73:54:68:21:29:32:d8:c7:6b:51:d6:af:a1:a6:bc:
         c4:8d:19:20:bc:84:a4:5e:b4:42:6e:f9:b8:24:69:5a:42:4a:
         4c:e8:53:57:fc:00:56:33:4a:76:30:7d:51:2f:b6:14:0d:0f:
         e0:79:27:29:64:e1:7a:23:14:d3:45:75:ab:74:4a:a4:09:aa:
         f7:91:5e:3f:d7:2a:18:de:8c:f7:e7:6d:fa:e2:32:14:dc:f3:
         99:06:7a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:41:46 2025 by rpki-client