Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/323830343a333966633a3a2f33322d3438203d3e20323636303633.roa
File:                     323830343a333966633a3a2f33322d3438203d3e20323636303633.roa (raw, json)
Hash identifier:          uZx6MKqpTg13sIPZCAlz9trqbeJwgRlXEg00ldqRU1M=
Subject key identifier:   6D:4F:76:BC:D1:E0:E7:0C:B9:10:8F:67:2C:88:35:6A:DF:A6:17:38
Certificate issuer:       /CN=98525FF70BD67C78C36BE3190E3463098E95DF2C
Certificate serial:       7EB4963FD9A730BCF0501CC84B07127BBD99F16C
Authority key identifier: 98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/323830343a333966633a3a2f33322d3438203d3e20323636303633.roa
Signing time:             Wed 05 Mar 2025 23:45:32 +0000
ROA not before:           Wed 05 Mar 2025 23:40:32 +0000
ROA not after:            Wed 04 Mar 2026 23:45:32 +0000
asID:                     266063
IP address blocks:        2804:39fc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.crl
                          rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 09:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b4:96:3f:d9:a7:30:bc:f0:50:1c:c8:4b:07:12:7b:bd:99:f1:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98525FF70BD67C78C36BE3190E3463098E95DF2C
        Validity
            Not Before: Mar  5 23:40:32 2025 GMT
            Not After : Mar  4 23:45:32 2026 GMT
        Subject: CN=6D4F76BCD1E0E70CB9108F672C88356ADFA61738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4a:3f:ad:d3:b9:70:af:13:16:5e:5c:4b:ef:
                    ca:a6:4b:fd:8e:08:9d:99:28:ec:03:37:a7:df:07:
                    56:48:a1:63:e7:6f:ae:ef:af:92:2b:3c:51:d0:f2:
                    71:04:c1:a0:e1:73:d1:94:e7:1a:c6:7b:89:8f:14:
                    6b:37:ae:71:67:c9:92:1b:87:81:e6:19:de:46:b7:
                    50:6f:5c:64:5d:4e:98:28:b8:5a:d0:74:59:86:97:
                    d4:02:1b:94:c4:8b:6e:ec:58:25:e2:aa:3b:bc:ed:
                    42:c5:01:d9:43:84:22:bc:62:65:70:10:79:7d:a9:
                    14:59:83:0b:cf:41:77:9e:a8:2e:fa:9c:51:6b:7f:
                    11:e9:24:e0:b2:91:dd:0c:16:0b:e1:4b:7a:53:71:
                    97:34:44:62:72:d6:ab:b2:74:ef:a4:bf:11:7d:6f:
                    c4:63:c2:2f:8e:86:ad:66:bc:db:96:95:3a:cb:8e:
                    2c:2f:38:67:79:55:f2:3b:95:70:8f:7c:0f:78:5a:
                    ed:ce:96:c3:75:58:a3:0f:62:98:52:0d:f6:0e:a8:
                    19:26:76:c7:d8:07:48:ca:aa:3e:61:8a:ca:1b:c6:
                    ce:e5:62:35:ca:3d:23:70:4d:79:11:45:45:75:7f:
                    be:6e:66:da:bd:9c:f8:b2:15:a7:b1:90:68:b8:d4:
                    d4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4F:76:BC:D1:E0:E7:0C:B9:10:8F:67:2C:88:35:6A:DF:A6:17:38
            X509v3 Authority Key Identifier:
                keyid:98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/323830343a333966633a3a2f33322d3438203d3e20323636303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:e4:8d:d1:aa:74:a3:4f:ef:42:50:d0:f8:9b:dc:6c:10:be:
         18:4e:65:0e:ed:20:a7:16:f3:d0:fa:8e:28:d7:81:47:80:5b:
         f5:cc:39:64:97:89:c0:4a:34:67:b4:b4:6b:c0:52:62:98:2b:
         91:5b:e6:d1:ae:cd:b1:79:03:c3:ba:03:7a:d8:0f:27:64:78:
         39:4b:1b:d8:87:db:be:e8:1b:9c:21:02:43:c9:3a:27:d5:2b:
         3e:b0:fd:3e:e2:8a:09:db:6e:cc:e5:0c:1b:ae:c5:2b:28:38:
         b7:e7:3c:cf:e6:35:f3:7c:35:dc:7d:0c:48:45:8e:7c:c6:8f:
         8c:dd:f4:d5:2d:7f:d5:87:db:b1:2f:f0:01:5b:f9:81:39:07:
         cf:ef:46:36:ae:94:e9:a3:b6:a6:c9:89:c0:e5:b4:46:c8:ee:
         06:7e:4d:b5:33:13:92:55:52:5c:63:10:4d:93:fd:32:85:1c:
         f5:3f:bb:44:10:c2:05:62:cb:f4:30:bb:d8:70:bd:d1:cd:6d:
         2f:bf:ba:bc:ba:46:c0:76:aa:6d:e6:eb:c8:dc:11:c3:c4:dc:
         d9:75:f3:07:a5:6f:73:d8:21:82:e8:fc:43:ce:44:a3:f5:8e:
         46:8d:27:24:cf:a4:e6:91:86:1c:07:ba:68:18:5f:69:ba:4f:
         0b:98:ed:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 13:18:08 2025 by rpki-client