Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa
File:                     323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier:          0QDUz7mgwXXYCMaMIW1+WmkX6UwvgqibL0dHw0LvGGo=
Subject key identifier:   6F:AD:D5:A1:03:FA:B7:0C:41:A7:3E:22:C7:59:F3:F3:DC:50:73:C2
Certificate issuer:       /CN=A09E880C389D905D05A33FAE05CDA14AD03B4CE7
Certificate serial:       2E8107C772DB3696850D378B96D5E3FF0B41C153
Authority key identifier: A0:9E:88:0C:38:9D:90:5D:05:A3:3F:AE:05:CD:A1:4A:D0:3B:4C:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa
Signing time:             Tue 04 Mar 2025 06:47:12 +0000
ROA not before:           Tue 04 Mar 2025 06:42:12 +0000
ROA not after:            Tue 03 Mar 2026 06:47:12 +0000
asID:                     265393
IP address blocks:        2804:3364:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.crl
                          rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 17:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:81:07:c7:72:db:36:96:85:0d:37:8b:96:d5:e3:ff:0b:41:c1:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09E880C389D905D05A33FAE05CDA14AD03B4CE7
        Validity
            Not Before: Mar  4 06:42:12 2025 GMT
            Not After : Mar  3 06:47:12 2026 GMT
        Subject: CN=6FADD5A103FAB70C41A73E22C759F3F3DC5073C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:bc:f1:17:22:e4:0f:69:7b:98:54:c0:26:
                    26:71:3b:b2:12:88:8d:ba:94:3c:1d:8d:12:d4:cd:
                    b9:04:fc:16:7f:ea:eb:18:b9:2f:60:06:1a:b6:6c:
                    13:36:be:7d:d5:c2:5c:25:49:f7:58:ff:bc:5f:ed:
                    f1:4c:6f:13:03:9f:0c:b2:4c:f2:52:c4:29:0f:e6:
                    a8:1c:91:76:40:f7:a7:bc:73:82:b2:4f:c9:ad:2d:
                    f0:4c:b4:1b:72:de:42:03:91:b8:8c:00:f9:a2:d3:
                    70:9e:10:28:fc:44:aa:57:28:20:ca:75:e8:57:e9:
                    c3:f3:db:f7:dd:ed:20:a2:87:14:54:4e:a7:5f:d0:
                    10:50:5d:15:b7:1c:9b:4d:6d:bd:ec:3e:8b:3d:3e:
                    45:30:88:1a:e8:f6:94:71:25:74:01:08:3b:46:02:
                    69:5d:4d:d6:1a:e2:64:a0:94:45:ec:cd:33:72:b9:
                    3d:cd:38:0f:0f:6d:ec:4a:e1:1d:f1:cc:62:bc:29:
                    6b:95:05:bf:e1:7e:ac:bd:d2:83:71:e7:90:e2:24:
                    68:09:95:9c:c2:c9:af:af:06:b6:9b:87:31:65:09:
                    07:9d:7e:e9:99:0c:2f:2f:af:8b:8a:80:be:92:69:
                    9f:56:28:3a:c0:cb:a1:c0:05:74:dd:2d:a1:e5:dd:
                    a2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AD:D5:A1:03:FA:B7:0C:41:A7:3E:22:C7:59:F3:F3:DC:50:73:C2
            X509v3 Authority Key Identifier:
                keyid:A0:9E:88:0C:38:9D:90:5D:05:A3:3F:AE:05:CD:A1:4A:D0:3B:4C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:fb:54:2c:9e:60:5a:6c:37:c6:d6:9f:54:ee:6c:dd:85:a0:
         e5:6e:77:24:98:d6:d2:16:d4:ad:90:9c:0e:ac:65:b3:93:f3:
         2d:d8:8a:ad:ca:44:23:ae:f1:8a:e9:db:1b:e4:3a:dc:d2:fb:
         8c:67:d2:ff:50:ed:16:01:15:81:ca:70:77:00:43:cc:ed:a0:
         0a:ef:4f:d6:64:5d:ef:6e:d8:e9:8f:af:b6:7f:23:ef:88:fb:
         97:91:31:1c:ad:01:12:4e:43:43:66:e4:60:21:62:42:e3:59:
         80:24:90:e0:79:7f:43:06:d2:41:aa:1a:6e:e2:0d:91:25:51:
         84:e7:b5:c1:4f:79:da:2c:f1:25:10:bd:f3:cb:37:20:49:a8:
         4f:18:b6:9c:e8:99:e4:52:01:43:a4:0e:fe:60:d2:64:c6:59:
         9d:36:63:f2:0b:c5:92:e2:6e:ff:51:e5:93:e7:d3:50:ef:3a:
         ce:5b:0e:ae:6b:95:f2:51:6c:83:e5:ee:27:d7:7a:81:96:4b:
         7c:90:3f:31:e1:88:8d:26:7f:d7:76:7f:1e:8e:0f:ee:2e:e4:
         27:56:cc:29:d3:00:f6:5b:a1:f9:51:12:17:8f:66:12:9a:87:
         16:d1:35:ad:0b:e7:99:fa:4f:62:6d:70:0a:1b:92:b8:50:25:
         ce:5a:b3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 18:09:53 2025 by rpki-client