Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/323830343a336131633a3a2f33322d313238203d3e20323636303731.roa
File:                     323830343a336131633a3a2f33322d313238203d3e20323636303731.roa (raw, json)
Hash identifier:          0MxvZak8yZVeMzUPmGYbICrT3+MLQm+m/DefGUXoowc=
Subject key identifier:   D3:A2:5E:5A:A1:EC:FF:40:6B:03:BB:C9:BE:0E:72:0C:51:7A:4F:A4
Certificate issuer:       /CN=5704C8A4F0A08E97025D71F1C624C9280EDADDD4
Certificate serial:       598790EBA6710EC6F17D6299557AE0B0DE14373B
Authority key identifier: 57:04:C8:A4:F0:A0:8E:97:02:5D:71:F1:C6:24:C9:28:0E:DA:DD:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/323830343a336131633a3a2f33322d313238203d3e20323636303731.roa
Signing time:             Fri 02 Aug 2024 01:59:48 +0000
ROA not before:           Fri 02 Aug 2024 01:54:48 +0000
ROA not after:            Fri 01 Aug 2025 01:59:48 +0000
asID:                     266071
IP address blocks:        2804:3a1c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.crl
                          rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 21:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:87:90:eb:a6:71:0e:c6:f1:7d:62:99:55:7a:e0:b0:de:14:37:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5704C8A4F0A08E97025D71F1C624C9280EDADDD4
        Validity
            Not Before: Aug  2 01:54:48 2024 GMT
            Not After : Aug  1 01:59:48 2025 GMT
        Subject: CN=D3A25E5AA1ECFF406B03BBC9BE0E720C517A4FA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:65:99:32:95:46:57:4f:8b:78:98:bc:8e:a0:
                    e9:74:e0:78:9a:f9:b4:a0:4f:89:6c:06:12:a3:69:
                    f1:69:6f:09:42:ad:dd:57:ea:89:91:07:be:8b:90:
                    29:12:ea:a7:18:2d:61:5b:34:72:5f:ac:9c:7a:ee:
                    3e:81:e8:d8:41:21:5b:3c:cd:8c:74:03:45:b4:a6:
                    51:88:d7:aa:c2:23:ea:e1:e8:15:02:01:87:7d:00:
                    7c:07:0f:a5:33:cd:1a:46:49:36:36:45:fd:17:a8:
                    ed:b1:6b:f3:2f:94:e4:7c:d0:b7:65:5e:f5:c6:4a:
                    f8:a5:67:59:26:a4:75:e8:bb:25:93:31:7a:fe:ce:
                    8f:bd:b0:4f:0e:d0:b9:bc:09:80:77:c1:6a:1b:09:
                    52:fe:fa:6c:5c:c6:a4:b5:e8:d4:9b:64:cc:55:8e:
                    32:92:b1:c3:93:ac:a3:32:d0:86:9c:6f:b2:a8:5b:
                    7f:c0:d1:4a:e4:c8:18:cd:d9:c8:0e:52:7d:b4:39:
                    0b:76:2c:fd:aa:92:ce:d5:94:ca:61:13:44:ee:fa:
                    45:73:08:ac:24:3c:6a:2c:52:02:d8:b7:12:da:fc:
                    3e:65:b3:2d:5f:b3:b0:6d:9e:57:a5:aa:bf:0a:14:
                    00:9c:29:24:29:dd:0a:70:eb:33:31:56:52:dd:5b:
                    09:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A2:5E:5A:A1:EC:FF:40:6B:03:BB:C9:BE:0E:72:0C:51:7A:4F:A4
            X509v3 Authority Key Identifier:
                keyid:57:04:C8:A4:F0:A0:8E:97:02:5D:71:F1:C6:24:C9:28:0E:DA:DD:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/323830343a336131633a3a2f33322d313238203d3e20323636303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:aa:24:87:cf:f0:d7:6c:e8:aa:92:3d:a7:d7:54:43:18:5c:
         b1:63:b4:63:81:fb:b3:8a:e4:29:ca:8b:0d:10:ea:22:53:2b:
         0d:73:a9:4b:6e:34:21:12:5d:41:d5:bb:43:39:ae:67:a8:12:
         a0:bc:7a:ed:59:b0:1d:a7:51:b8:20:40:9e:7f:22:25:78:6e:
         2b:e8:e6:c4:73:a0:d2:37:46:5a:83:05:8c:02:ff:ab:b5:ab:
         48:b1:a9:21:78:2a:9d:f8:ec:00:07:91:14:23:7f:f4:d5:94:
         9f:9b:78:80:60:ea:cc:75:d1:6d:1a:42:d3:e5:6b:c3:fc:87:
         15:2c:b3:c6:b0:07:b6:cb:2c:e3:e6:e5:c2:8c:45:f6:ea:ad:
         5a:f0:e2:2d:d5:b5:85:2b:11:bd:12:9e:98:8f:ca:04:5e:9e:
         77:67:1f:de:78:57:d2:63:de:4b:fc:e8:fd:8b:6e:4b:b1:85:
         02:eb:54:6b:e9:47:6c:44:9d:6b:32:5b:bc:58:b6:84:5d:48:
         e5:d9:ec:22:11:2a:27:bf:34:01:49:58:07:e6:2d:7f:9d:92:
         56:19:25:32:c6:43:4b:0d:e1:ab:aa:1d:7d:30:49:2f:cb:20:
         79:15:f9:b2:2e:62:86:5e:49:b4:20:28:87:82:dd:3f:3d:2b:
         de:36:d4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:27:42 2025 by rpki-client