Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/323830343a386262633a3a2f33322d313238203d3e20323733373535.roa
File:                     323830343a386262633a3a2f33322d313238203d3e20323733373535.roa (raw, json)
Hash identifier:          3uQTnhhz7H1wtPzniSKTigXw3gRffdvQaJmnZ+hmrrA=
Subject key identifier:   44:75:0B:5A:16:2C:B7:F4:02:62:A3:25:48:A2:B3:C9:0A:B5:28:1B
Certificate issuer:       /CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211
Certificate serial:       34AD7791297B6BAC44DFFFEF4F29D57AB2D5CCF7
Authority key identifier: D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/323830343a386262633a3a2f33322d313238203d3e20323733373535.roa
Signing time:             Mon 02 Jun 2025 15:51:14 +0000
ROA not before:           Mon 02 Jun 2025 15:46:14 +0000
ROA not after:            Mon 01 Jun 2026 15:51:14 +0000
asID:                     273755
IP address blocks:        2804:8bbc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl
                          rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 22:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ad:77:91:29:7b:6b:ac:44:df:ff:ef:4f:29:d5:7a:b2:d5:cc:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211
        Validity
            Not Before: Jun  2 15:46:14 2025 GMT
            Not After : Jun  1 15:51:14 2026 GMT
        Subject: CN=44750B5A162CB7F40262A32548A2B3C90AB5281B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c5:0d:3f:c3:15:e4:cc:65:24:2b:13:16:ba:
                    48:c4:95:e4:03:a5:8c:1b:8f:74:40:a2:49:52:0d:
                    42:e7:e2:a9:10:2a:aa:23:96:02:5c:22:fd:d6:b9:
                    33:10:05:1e:2c:b4:9e:2c:aa:7a:15:bf:00:09:20:
                    4d:11:2f:aa:37:19:90:5d:ff:18:b5:19:f2:98:76:
                    fa:f8:7b:ab:a2:4e:3e:76:39:2e:a9:72:b3:0e:cc:
                    d0:c3:9a:3c:9c:a5:5e:21:fa:a9:ad:56:3c:8b:e1:
                    0a:24:3a:c2:34:64:9a:65:fe:e4:e9:cf:e2:b4:09:
                    6e:02:65:38:53:7f:b1:8d:d5:a7:e5:7a:31:f0:8d:
                    ad:74:ba:af:36:05:3a:27:31:57:70:ac:8f:de:06:
                    84:93:f2:4e:5d:61:d7:6e:4d:b7:22:6f:8e:23:07:
                    d4:94:30:66:30:2c:f7:82:d7:ae:de:18:8f:a1:fa:
                    9a:9e:7d:ed:0d:4d:b1:94:9e:1e:d7:e8:7f:a9:cb:
                    03:f8:83:d7:53:22:75:3c:f7:14:8d:35:db:90:d8:
                    32:45:20:d1:b5:9a:e9:e3:95:bd:ef:eb:a3:aa:69:
                    9a:11:65:73:89:0c:5d:6f:3d:7f:1a:c8:7c:88:cb:
                    08:5a:3c:33:31:b7:b6:56:c3:56:8f:33:a5:39:d4:
                    c1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:75:0B:5A:16:2C:B7:F4:02:62:A3:25:48:A2:B3:C9:0A:B5:28:1B
            X509v3 Authority Key Identifier:
                keyid:D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/323830343a386262633a3a2f33322d313238203d3e20323733373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8bbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:ff:02:56:57:e1:c0:fc:15:00:cb:47:bc:50:4e:fc:34:07:
         6c:0f:5c:7b:e9:10:7c:92:d5:d5:a3:11:ee:10:94:5e:a6:49:
         e4:16:8f:d3:d8:ed:37:bb:b0:6c:74:33:4a:87:d0:90:4d:30:
         15:bc:e4:a8:c2:1a:05:8d:c8:1c:73:e5:38:6a:ad:f0:75:87:
         ce:c9:02:44:3d:53:b0:de:71:00:71:68:5e:89:f2:01:a2:56:
         de:00:d2:bb:4c:78:f1:90:ca:e6:88:b1:21:bf:a2:0a:53:2d:
         bc:b3:03:5f:6c:95:af:03:63:e7:c7:47:a9:b4:a0:e4:5b:0c:
         f9:70:08:fd:fe:a0:62:e5:53:58:ba:2b:72:0a:57:10:f5:bd:
         06:30:2d:c3:22:26:0b:09:ee:ab:b0:a3:1e:81:9a:26:da:7c:
         99:43:c3:cb:7f:e0:cd:35:07:d1:bc:e8:fe:6d:c3:40:24:7d:
         be:1e:51:f2:d9:5a:7e:cb:00:08:bc:8f:5d:ee:9a:f0:fb:1f:
         b5:46:5c:a8:2e:36:b4:83:ca:3a:44:0a:6c:97:71:8b:e3:cc:
         84:c7:aa:a7:1d:73:29:ac:a5:7b:fa:7c:48:50:47:57:c8:d9:
         81:85:64:57:a3:40:cf:fb:6e:75:ef:e1:15:53:24:79:ea:d6:
         55:77:a8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:48:00 2025 by rpki-client