Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/323830343a386261633a3a2f33322d313238203d3e20323733373438.roa
File:                     323830343a386261633a3a2f33322d313238203d3e20323733373438.roa (raw, json)
Hash identifier:          KOJMhY0iRykzj/kKvJDQrzsxJ79uLdChbJdh+AGUgUU=
Subject key identifier:   A0:FD:A5:7B:94:35:3A:A4:D1:02:48:3F:C9:11:9D:6C:6A:BD:F8:B9
Certificate issuer:       /CN=7AF6D962033C5C1471A4F9C06C47A9A258571734
Certificate serial:       0779939E8791DD7962F11AB5E3CD2687AB23B696
Authority key identifier: 7A:F6:D9:62:03:3C:5C:14:71:A4:F9:C0:6C:47:A9:A2:58:57:17:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AF6D962033C5C1471A4F9C06C47A9A258571734.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/323830343a386261633a3a2f33322d313238203d3e20323733373438.roa
Signing time:             Thu 06 Feb 2025 18:44:22 +0000
ROA not before:           Thu 06 Feb 2025 18:39:22 +0000
ROA not after:            Thu 05 Feb 2026 18:44:22 +0000
asID:                     273748
IP address blocks:        2804:8bac::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/7AF6D962033C5C1471A4F9C06C47A9A258571734.crl
                          rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/7AF6D962033C5C1471A4F9C06C47A9A258571734.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AF6D962033C5C1471A4F9C06C47A9A258571734.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 21:42:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:79:93:9e:87:91:dd:79:62:f1:1a:b5:e3:cd:26:87:ab:23:b6:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AF6D962033C5C1471A4F9C06C47A9A258571734
        Validity
            Not Before: Feb  6 18:39:22 2025 GMT
            Not After : Feb  5 18:44:22 2026 GMT
        Subject: CN=A0FDA57B94353AA4D102483FC9119D6C6ABDF8B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:db:66:63:65:54:c5:12:50:13:e5:da:08:b7:
                    6b:4c:c0:ec:3f:84:18:c8:ab:7f:c0:b8:4b:3b:e1:
                    9b:97:1f:80:6b:88:f7:ed:6c:f5:ef:f5:92:ed:4b:
                    6c:75:0d:cd:29:51:44:4f:3f:8a:aa:4a:d3:43:29:
                    af:3b:41:89:3f:3b:91:00:fb:da:c9:96:5b:a9:96:
                    8a:29:9f:8a:e7:d2:10:ba:86:d3:84:81:0c:ff:bf:
                    2c:ef:c9:45:de:27:a4:f9:09:72:94:98:76:0f:25:
                    92:51:9d:2e:e6:b5:d2:b9:96:2c:bc:3f:c1:61:2c:
                    ad:de:18:34:05:68:61:b0:9e:e5:87:35:af:7a:81:
                    a4:65:ce:ee:c9:c4:78:e1:77:ff:fa:41:ce:c3:42:
                    20:21:5a:ec:c7:8d:da:6b:3b:8d:32:60:45:70:0c:
                    25:0e:20:99:bb:ae:19:1b:23:84:e7:bb:2a:04:96:
                    1b:32:33:2a:7c:bc:33:96:ee:dc:91:a1:6c:50:02:
                    93:1b:a6:b0:a2:01:4c:f5:8f:08:3f:9f:ab:26:77:
                    58:49:22:9f:43:6f:a4:6a:ed:ed:79:ee:ff:43:c6:
                    ff:e2:b8:1e:ac:ec:00:c9:13:00:41:ae:48:7e:36:
                    ca:a4:8a:f2:f8:c6:a8:ab:c7:5f:be:f5:8d:a6:6b:
                    e6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FD:A5:7B:94:35:3A:A4:D1:02:48:3F:C9:11:9D:6C:6A:BD:F8:B9
            X509v3 Authority Key Identifier:
                keyid:7A:F6:D9:62:03:3C:5C:14:71:A4:F9:C0:6C:47:A9:A2:58:57:17:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/7AF6D962033C5C1471A4F9C06C47A9A258571734.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AF6D962033C5C1471A4F9C06C47A9A258571734.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/323830343a386261633a3a2f33322d313238203d3e20323733373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8bac::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:de:d6:e8:55:50:5f:5a:a9:f2:9a:4d:77:f2:55:65:b3:a9:
         12:f2:01:b6:7b:4b:0f:a4:16:bb:ec:0c:2a:11:63:32:88:50:
         4e:6c:bf:ea:b1:3c:fd:a2:73:52:c4:5b:70:9b:ca:a9:7d:e8:
         ed:6c:d3:a7:63:d0:f2:e8:f3:1c:96:ae:4e:a3:7f:78:63:20:
         d1:b3:b8:0b:1d:82:da:c0:6e:e1:e9:3d:fb:17:6f:2c:c0:b5:
         dc:55:ba:ab:d5:49:a5:a6:e7:8b:11:ec:ae:06:d5:b8:70:b9:
         1c:0a:45:14:57:13:7f:6b:e6:2f:b6:a1:27:f2:2d:66:fb:6d:
         07:a4:a9:f3:c2:df:3d:9a:7a:83:31:e0:a5:08:46:52:07:54:
         80:81:a1:49:9f:a1:3f:9f:49:12:82:91:14:cf:eb:7d:fd:7b:
         b0:da:47:31:cb:e1:15:d5:47:66:bc:29:e5:cd:b5:a0:d5:d1:
         ed:88:6f:5e:be:78:d7:46:a4:a2:9a:9f:59:3f:ba:13:98:1a:
         88:02:b2:dd:1f:9e:93:e6:d8:7c:c5:19:43:49:a7:61:67:6d:
         9e:71:10:87:df:3a:20:e5:88:83:14:21:93:8e:08:54:43:9f:
         01:60:0b:0e:a7:90:fe:e3:e8:9a:f5:8c:b7:51:01:62:f2:ac:
         2a:3d:0a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:11 2025 by rpki-client