Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/323830343a373361383a3a2f33322d313238203d3e20323730393239.roa
File:                     323830343a373361383a3a2f33322d313238203d3e20323730393239.roa (raw, json)
Hash identifier:          mE6wHgeLSPSdQmGLxSYvzYCmzxhi915GN47MGVMUZoc=
Subject key identifier:   77:33:40:87:A7:B0:E9:C7:5C:2F:63:43:C5:E6:BA:F3:33:9C:67:48
Certificate issuer:       /CN=79B76923CA9A21155FD942CEC21E727585C5B2F7
Certificate serial:       6AC315A3C1472C2FE3AFC744BBDB4A89C0075142
Authority key identifier: 79:B7:69:23:CA:9A:21:15:5F:D9:42:CE:C2:1E:72:75:85:C5:B2:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79B76923CA9A21155FD942CEC21E727585C5B2F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/323830343a373361383a3a2f33322d313238203d3e20323730393239.roa
Signing time:             Wed 05 Feb 2025 11:31:50 +0000
ROA not before:           Wed 05 Feb 2025 11:26:50 +0000
ROA not after:            Wed 04 Feb 2026 11:31:50 +0000
asID:                     270929
IP address blocks:        2804:73a8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/79B76923CA9A21155FD942CEC21E727585C5B2F7.crl
                          rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/79B76923CA9A21155FD942CEC21E727585C5B2F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79B76923CA9A21155FD942CEC21E727585C5B2F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 15:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c3:15:a3:c1:47:2c:2f:e3:af:c7:44:bb:db:4a:89:c0:07:51:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79B76923CA9A21155FD942CEC21E727585C5B2F7
        Validity
            Not Before: Feb  5 11:26:50 2025 GMT
            Not After : Feb  4 11:31:50 2026 GMT
        Subject: CN=77334087A7B0E9C75C2F6343C5E6BAF3339C6748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:40:b2:10:76:67:e9:0b:fe:f3:54:66:12:6b:
                    49:ae:18:17:14:7a:bc:2e:40:85:34:1c:32:cc:73:
                    34:60:e8:27:91:eb:5e:e4:b3:ac:64:0e:04:4d:02:
                    d1:7d:4a:c8:ec:ab:b2:6c:f3:fc:dc:da:86:35:79:
                    ed:40:96:7d:a4:5e:77:70:a1:e7:76:90:cb:8c:c2:
                    00:a8:1a:04:c5:60:01:8e:c4:05:b2:7f:b6:95:89:
                    1a:69:d2:9f:02:c3:d4:35:1c:bf:26:c5:a8:d1:f9:
                    0e:d7:f4:aa:83:23:0c:2b:28:94:97:75:c9:e9:ac:
                    75:a9:33:26:2a:06:d0:19:54:b2:9c:15:b1:a8:a5:
                    a0:f1:b6:31:dd:3e:b3:11:86:53:22:cd:d8:74:61:
                    29:ea:44:d6:f3:14:68:72:24:9e:3e:97:62:2e:8f:
                    4a:05:64:8c:35:98:51:06:cf:dd:a5:47:36:4b:20:
                    3b:1d:95:2e:3d:40:a4:86:be:90:33:5e:9b:98:35:
                    90:01:3d:e8:7e:ff:8e:40:0b:2e:05:3f:5b:0b:4f:
                    71:96:69:1f:a4:27:3c:ec:f4:e6:1f:3e:69:ce:61:
                    4f:03:c7:5f:a8:5d:71:85:e6:e2:61:8c:f0:a4:aa:
                    84:e2:c5:bb:8a:e6:da:45:f1:94:14:0f:6c:bd:41:
                    81:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:33:40:87:A7:B0:E9:C7:5C:2F:63:43:C5:E6:BA:F3:33:9C:67:48
            X509v3 Authority Key Identifier:
                keyid:79:B7:69:23:CA:9A:21:15:5F:D9:42:CE:C2:1E:72:75:85:C5:B2:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/79B76923CA9A21155FD942CEC21E727585C5B2F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79B76923CA9A21155FD942CEC21E727585C5B2F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/323830343a373361383a3a2f33322d313238203d3e20323730393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:cc:9c:9b:63:84:86:04:b4:7f:9d:6b:c4:0e:3a:17:83:c1:
         c7:b0:36:ce:cd:3b:7e:56:93:ec:19:93:c3:73:60:d6:fb:d1:
         db:c7:c1:36:01:f9:56:df:da:fd:d2:2c:a8:79:d9:7d:57:a3:
         aa:61:cb:40:d7:8e:a7:66:bc:79:94:30:2b:0f:d0:a5:a9:5c:
         2d:1b:5f:51:74:ca:64:1d:65:cc:60:74:18:e9:43:8a:4a:d5:
         d1:24:13:e9:b9:1f:e1:62:01:81:bb:54:a9:8b:ae:22:6b:73:
         8e:d9:07:84:b1:83:38:51:33:10:e5:4f:cd:3d:21:b7:5c:ff:
         ae:4e:0a:d5:86:4e:ac:b2:29:13:fa:1b:f5:59:9f:cb:5f:4d:
         c3:49:d5:70:d2:18:38:88:de:5a:5e:78:f7:e9:4a:f5:6a:22:
         05:f7:42:37:26:61:bf:c4:8e:e4:2d:a9:69:94:eb:e1:41:9c:
         b2:f2:eb:3d:71:d0:e2:c1:8f:43:44:3b:02:79:78:a1:eb:99:
         1e:c4:62:3c:dc:32:20:a5:19:35:d1:1f:5b:46:0b:70:a7:88:
         ae:b6:66:cb:5a:8e:ee:a3:91:a8:a3:82:80:dd:96:2a:5b:7b:
         34:0f:d3:66:b2:29:7f:de:f7:fa:b0:b3:ac:17:6d:2a:9d:06:
         bc:e5:7a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:42:19 2025 by rpki-client