Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/1/323830343a373938343a3a2f33322d3438203d3e20323731333130.roa
File:                     323830343a373938343a3a2f33322d3438203d3e20323731333130.roa (raw, json)
Hash identifier:          HHGnYJbu3Eu2i5HAHY7SiFpj4e0uALsdoWK3og9xtkA=
Subject key identifier:   1F:00:34:53:CD:B1:A7:AF:BD:02:2F:A4:00:34:F3:98:27:AA:3B:51
Certificate issuer:       /CN=D3A7410AF539DF601C7D31EFDDCE90F6D11D3D1D
Certificate serial:       26F73E0C5290FBBD52646203476E8F16AE12A052
Authority key identifier: D3:A7:41:0A:F5:39:DF:60:1C:7D:31:EF:DD:CE:90:F6:D1:1D:3D:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3A7410AF539DF601C7D31EFDDCE90F6D11D3D1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/1/323830343a373938343a3a2f33322d3438203d3e20323731333130.roa
Signing time:             Wed 05 Mar 2025 22:50:35 +0000
ROA not before:           Wed 05 Mar 2025 22:45:35 +0000
ROA not after:            Wed 04 Mar 2026 22:50:35 +0000
asID:                     271310
IP address blocks:        2804:7984::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/1/D3A7410AF539DF601C7D31EFDDCE90F6D11D3D1D.crl
                          rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/1/D3A7410AF539DF601C7D31EFDDCE90F6D11D3D1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3A7410AF539DF601C7D31EFDDCE90F6D11D3D1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 08:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f7:3e:0c:52:90:fb:bd:52:64:62:03:47:6e:8f:16:ae:12:a0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3A7410AF539DF601C7D31EFDDCE90F6D11D3D1D
        Validity
            Not Before: Mar  5 22:45:35 2025 GMT
            Not After : Mar  4 22:50:35 2026 GMT
        Subject: CN=1F003453CDB1A7AFBD022FA40034F39827AA3B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:47:d4:6a:ab:27:21:c5:f9:dd:94:a3:04:f8:
                    6e:7f:05:cd:71:e0:17:f8:67:d4:4a:11:7c:2e:9b:
                    05:18:6e:e6:0d:8a:17:d6:fb:10:4c:47:9d:ea:3a:
                    dc:bf:6d:b8:7b:17:1a:6b:02:40:78:0f:ad:21:66:
                    1d:41:74:3d:a8:9e:58:68:05:75:2c:a4:26:45:b4:
                    dc:0a:90:94:68:af:d0:bb:85:be:af:fa:c6:a2:4e:
                    da:9f:ed:9e:0c:27:f9:ed:75:63:5b:f4:b8:7c:c9:
                    6d:c8:a0:eb:da:ca:ec:70:6d:36:7b:12:79:f6:3b:
                    02:0c:20:3c:f6:8f:52:a0:9f:bd:5a:ca:c3:06:d9:
                    69:00:0e:bc:09:e9:c8:d8:60:fc:35:e3:72:92:90:
                    63:50:26:51:36:68:07:14:53:9f:c0:3a:3b:91:26:
                    17:6f:23:9e:6b:60:f1:e4:6a:22:a1:f8:9d:f6:cd:
                    c1:e5:3c:08:b8:4c:37:bb:c2:cc:42:fa:75:70:a1:
                    49:c0:24:f7:46:e5:0a:92:e3:da:f9:21:5d:a0:b5:
                    7d:6d:e2:39:f4:f9:c3:4f:4c:b9:41:8b:b6:c3:7c:
                    d1:ba:f4:53:b3:5e:bc:cc:e9:c5:fd:14:87:61:0d:
                    ad:d3:e2:74:35:0a:b3:16:16:10:66:b9:45:cb:b5:
                    d6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:00:34:53:CD:B1:A7:AF:BD:02:2F:A4:00:34:F3:98:27:AA:3B:51
            X509v3 Authority Key Identifier:
                keyid:D3:A7:41:0A:F5:39:DF:60:1C:7D:31:EF:DD:CE:90:F6:D1:1D:3D:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/1/D3A7410AF539DF601C7D31EFDDCE90F6D11D3D1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3A7410AF539DF601C7D31EFDDCE90F6D11D3D1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/1/323830343a373938343a3a2f33322d3438203d3e20323731333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7984::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:c3:b1:b4:3b:68:65:7c:41:a5:4d:bf:70:4d:2a:de:7a:34:
         d3:2e:6e:f0:7f:f6:6a:c1:0a:18:41:2c:fa:5e:54:ad:84:fb:
         ae:42:f6:37:5d:05:a2:80:59:d1:6e:be:e8:65:2b:30:fe:53:
         13:06:eb:47:8f:14:5a:28:b8:b1:37:f2:fe:3c:74:17:89:70:
         03:40:59:51:f9:08:4b:16:fa:0e:6b:a3:20:77:76:fe:96:dc:
         87:7c:f9:89:4d:50:af:0c:be:b0:0d:44:1e:18:95:82:36:01:
         7e:7c:3f:c4:fb:9e:bf:f5:ea:4c:50:08:3c:86:ea:31:1a:25:
         0e:81:b1:25:02:12:ec:40:10:6f:ec:79:38:97:91:8d:b9:ce:
         be:03:d1:3f:a9:17:4f:7f:0d:ab:91:8d:bc:12:c0:ad:f8:e6:
         dc:79:dc:ca:23:17:4f:b6:08:f4:7e:5f:49:61:26:f6:87:bb:
         f5:d5:5f:47:15:36:19:2a:6c:4b:ce:f5:20:39:79:47:de:01:
         28:ee:1f:f9:6e:c7:3a:25:65:aa:a1:90:da:92:ae:56:b1:9a:
         8f:e8:c5:33:b2:41:f3:32:40:fe:cd:d9:ae:45:44:b1:73:92:
         2d:04:2e:6e:12:f5:5e:bb:a1:22:ac:1a:ec:7a:a0:c3:bb:37:
         e1:e6:b1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:00:31 2025 by rpki-client