Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/323830343a343231303a3a2f33322d3334203d3e20323637343735.roa
File:                     323830343a343231303a3a2f33322d3334203d3e20323637343735.roa (raw, json)
Hash identifier:          5LGx4siJT3NyVptXMsaiUx7BqUCFEgP2+MaWEkhKLiw=
Subject key identifier:   F4:54:C6:F1:69:DB:DA:E0:07:D5:FB:6E:C0:A0:11:06:EC:4D:6D:FB
Certificate issuer:       /CN=27431F298D6DFE8179639FE397D34A2A47E96D15
Certificate serial:       5BD8AEA2EE163EBE896F540737122E2240305FCA
Authority key identifier: 27:43:1F:29:8D:6D:FE:81:79:63:9F:E3:97:D3:4A:2A:47:E9:6D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27431F298D6DFE8179639FE397D34A2A47E96D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/323830343a343231303a3a2f33322d3334203d3e20323637343735.roa
Signing time:             Mon 02 Jun 2025 14:08:49 +0000
ROA not before:           Mon 02 Jun 2025 14:03:49 +0000
ROA not after:            Mon 01 Jun 2026 14:08:49 +0000
asID:                     267475
IP address blocks:        2804:4210::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/27431F298D6DFE8179639FE397D34A2A47E96D15.crl
                          rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/27431F298D6DFE8179639FE397D34A2A47E96D15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27431F298D6DFE8179639FE397D34A2A47E96D15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 22:11:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d8:ae:a2:ee:16:3e:be:89:6f:54:07:37:12:2e:22:40:30:5f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27431F298D6DFE8179639FE397D34A2A47E96D15
        Validity
            Not Before: Jun  2 14:03:49 2025 GMT
            Not After : Jun  1 14:08:49 2026 GMT
        Subject: CN=F454C6F169DBDAE007D5FB6EC0A01106EC4D6DFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:16:63:ff:8f:6f:b0:e1:d4:6a:74:ac:f9:cb:
                    4f:db:94:15:b3:76:62:34:d6:b3:0a:e8:65:9c:d7:
                    05:cd:3e:f7:8d:26:2e:42:8a:73:e0:8c:8c:18:1d:
                    f0:17:aa:82:a6:43:3c:bd:68:ef:cf:a5:eb:f9:fb:
                    37:ff:3f:68:36:ef:08:2d:bf:99:12:6b:67:cd:81:
                    42:d0:b8:13:a7:50:0d:86:1f:f6:64:9f:a4:a4:9d:
                    9b:31:91:44:bd:8f:5b:41:75:31:7a:b6:9f:08:2d:
                    21:ba:8e:0c:02:3f:bd:2a:1d:1c:15:2f:b1:b9:45:
                    d4:91:31:80:7b:35:98:07:81:ce:2b:36:7a:44:87:
                    31:6b:ae:f8:ca:72:c4:f6:10:f3:c7:94:1c:e4:97:
                    89:5b:b7:27:8b:aa:a2:a2:93:3d:88:9d:4b:a8:59:
                    b7:c6:6d:f3:f3:95:16:f6:44:24:90:5a:26:2d:c8:
                    7c:44:18:1c:ad:27:08:e2:6e:8a:f9:b3:1c:19:9d:
                    aa:bc:e9:64:e9:09:79:84:99:d5:f2:5b:1e:d2:dd:
                    fb:55:fa:4a:08:06:d6:c6:82:02:fa:3f:d1:2e:5a:
                    cc:c6:4a:30:7f:3b:1b:f8:c9:7d:09:e8:de:9d:b0:
                    13:f5:0f:ac:6f:27:3b:e2:4c:07:75:52:4f:7a:9f:
                    e7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:54:C6:F1:69:DB:DA:E0:07:D5:FB:6E:C0:A0:11:06:EC:4D:6D:FB
            X509v3 Authority Key Identifier:
                keyid:27:43:1F:29:8D:6D:FE:81:79:63:9F:E3:97:D3:4A:2A:47:E9:6D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/27431F298D6DFE8179639FE397D34A2A47E96D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27431F298D6DFE8179639FE397D34A2A47E96D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/323830343a343231303a3a2f33322d3334203d3e20323637343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4210::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:38:5b:30:2d:d4:3a:89:bd:b0:ce:a2:be:b2:ac:61:dc:d4:
         3e:9d:e8:02:bd:57:ce:04:b5:a2:2f:3b:2f:9b:0c:23:43:52:
         dc:7d:7a:3c:be:40:3f:23:4d:44:84:0f:97:9b:ff:c0:81:5e:
         c2:d6:61:44:f2:4c:bc:3f:41:46:1b:65:e9:d5:f9:07:31:8a:
         fd:78:cb:b9:eb:8e:ed:a8:2d:c2:de:09:d2:11:03:3e:1d:73:
         b3:da:34:c1:73:13:0b:2c:ad:7a:fe:18:28:ed:55:8d:c7:8b:
         29:c9:81:93:dc:21:4d:a3:0d:47:b8:dd:d7:c7:a6:32:79:da:
         b7:ad:eb:6c:4a:33:ae:62:2a:af:0a:64:87:50:7d:c0:e3:a9:
         98:51:03:20:1d:8e:57:e4:6d:d6:1e:47:7d:10:4c:d6:4c:ab:
         5e:f6:35:32:9e:80:e0:c8:2d:7a:b9:e1:66:b2:0a:d3:b6:87:
         ab:9e:74:38:56:1f:ec:72:c5:6e:2b:dc:5a:f2:e4:30:7b:cd:
         f3:95:66:77:fa:8c:f8:b5:60:47:d1:7e:2b:91:ab:6a:89:75:
         86:95:97:30:df:83:80:ea:09:3e:1a:ac:e0:e4:29:af:bd:8c:
         08:97:36:a7:0c:17:9d:ef:16:8b:1a:32:fa:cd:1c:98:6a:f6:
         9f:04:83:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:46:29 2025 by rpki-client