Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a633030303a3a2f33342d3334203d3e20323636323438.roa
File:                     323830343a336430343a633030303a3a2f33342d3334203d3e20323636323438.roa (raw, json)
Hash identifier:          D8MRMTazxYMu/obArZl1IXZcI8+EwfRNf5CAs9nx1SI=
Subject key identifier:   33:32:15:14:C5:64:90:AD:B3:31:25:36:46:C8:8D:06:ED:C5:14:E1
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       7F34F00C313ADEAFF531E1B38856BD12DAF70EF0
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a633030303a3a2f33342d3334203d3e20323636323438.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     266248
IP address blocks:        2804:3d04:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 21:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:34:f0:0c:31:3a:de:af:f5:31:e1:b3:88:56:bd:12:da:f7:0e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d7:37:fb:77:b3:e8:62:71:ee:29:87:54:1e:
                    98:be:a1:12:d4:62:5f:c1:a1:b2:83:a4:1c:a0:55:
                    74:b8:ff:76:c2:f6:89:39:ac:97:83:4b:59:0b:d8:
                    bc:99:f0:cc:97:33:98:93:61:ad:5d:bb:a2:8b:84:
                    79:37:f6:1d:a3:2a:e6:14:cc:2b:c1:6a:98:a8:69:
                    f1:ba:83:5d:af:fa:b4:1e:f2:96:4b:5a:a9:45:7f:
                    5e:22:6a:30:f0:4b:e1:10:42:21:b0:45:8f:7c:9a:
                    0e:06:9d:72:1b:56:34:ea:48:4a:7f:38:c3:76:c6:
                    7e:75:c7:93:d0:f5:81:67:01:8e:7c:47:1f:2c:6e:
                    1b:bc:b5:42:81:b4:e6:da:4d:28:7c:99:44:1e:10:
                    62:cc:05:20:e2:58:a8:a9:a1:c9:91:dd:56:0c:c0:
                    66:ab:d4:4e:79:8f:b0:94:f7:b9:99:2c:cd:be:63:
                    7c:10:72:7f:10:7d:5e:8f:85:8d:56:8a:13:fb:5f:
                    a5:a7:1b:09:b6:94:f0:68:a6:4b:a5:da:76:39:c3:
                    ba:e2:e4:70:12:5e:d4:5e:60:1c:29:ef:e5:1f:e7:
                    f6:7a:eb:a1:79:78:36:49:27:39:5c:88:be:1b:0a:
                    f9:3d:b6:8c:38:15:a6:7f:c1:3c:3e:0c:24:e0:71:
                    4d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:32:15:14:C5:64:90:AD:B3:31:25:36:46:C8:8D:06:ED:C5:14:E1
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a633030303a3a2f33342d3334203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         68:ab:07:c0:08:db:ac:8d:d1:c8:2d:93:82:e2:08:9c:aa:7d:
         a7:fe:0f:f5:dc:eb:52:1d:82:e1:9a:21:2b:a9:d3:f9:52:06:
         7b:1e:aa:72:17:a9:80:aa:37:cd:b0:09:fb:a1:89:e4:63:ae:
         c1:59:10:d8:c2:e9:95:e6:41:cc:3a:5a:98:30:6b:37:4c:dc:
         b7:8a:1b:33:8f:18:99:2f:10:b5:e1:13:6a:17:51:26:58:14:
         f8:55:42:aa:75:ba:5b:34:83:37:31:92:c0:99:9f:e9:b2:f0:
         14:e7:12:80:92:b1:bb:a2:66:6e:da:2e:7b:2b:3c:ac:d3:2c:
         c8:3d:f0:56:77:0f:8e:15:b2:f7:43:d5:d5:e8:a4:c8:f0:06:
         87:43:70:7d:ee:35:22:42:73:fe:72:47:e3:f2:14:6d:fd:06:
         12:3c:00:13:d4:ca:0e:ae:cd:d2:13:94:d9:5d:05:b7:2a:17:
         b7:29:d4:0d:06:45:05:e8:6d:7c:cd:64:62:60:66:1c:e9:9b:
         20:aa:70:03:42:fd:e7:b7:61:f6:b8:98:3b:0f:5d:34:aa:cb:
         86:fa:c8:8a:40:65:90:5d:f2:95:ae:2a:fd:78:0d:f2:71:d8:
         d8:68:9e:f2:c1:89:f9:45:1b:c3:d6:ff:9e:5a:42:5d:e5:70:
         ca:f3:74:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:20 2025 by rpki-client