Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a383030303a3a2f33342d3334203d3e20323731313137.roa
File:                     323830343a373638343a383030303a3a2f33342d3334203d3e20323731313137.roa (raw, json)
Hash identifier:          6647ICyGDxaexZybqhNiEQnOiLNuaMVQUwx4gy/DTi0=
Subject key identifier:   2E:00:29:9E:A3:39:02:30:16:C4:B8:72:98:5C:16:D9:C8:43:F2:06
Certificate issuer:       /CN=62D01A32125D7B1F626C38C25BC340B899793CFA
Certificate serial:       49BF425424CF65DE0BC8FE9EFA0549408466D37D
Authority key identifier: 62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a383030303a3a2f33342d3334203d3e20323731313137.roa
Signing time:             Thu 06 Mar 2025 21:39:20 +0000
ROA not before:           Thu 06 Mar 2025 21:34:20 +0000
ROA not after:            Thu 05 Mar 2026 21:39:20 +0000
asID:                     271117
IP address blocks:        2804:7684:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl
                          rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 00:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:bf:42:54:24:cf:65:de:0b:c8:fe:9e:fa:05:49:40:84:66:d3:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62D01A32125D7B1F626C38C25BC340B899793CFA
        Validity
            Not Before: Mar  6 21:34:20 2025 GMT
            Not After : Mar  5 21:39:20 2026 GMT
        Subject: CN=2E00299EA339023016C4B872985C16D9C843F206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:ea:b2:16:c9:77:ee:c9:e4:d6:b1:73:ae:
                    e1:b4:d4:45:5a:d2:b7:d5:f4:cd:31:4b:c3:0d:24:
                    8b:d8:42:ee:c6:1e:6c:23:e5:2e:6d:be:1b:f2:8b:
                    98:c4:47:ed:b6:eb:ad:9e:4c:06:29:8b:cf:92:4c:
                    c6:72:ca:d6:4d:19:1f:fe:fa:b2:81:31:54:92:44:
                    18:37:87:29:c0:3c:20:c0:81:49:11:12:5f:82:0d:
                    95:32:ab:d4:2b:92:d0:af:60:cf:46:77:5c:cf:23:
                    da:84:d8:72:8c:56:e5:9a:04:1e:fa:f0:47:f9:48:
                    ee:c9:ae:ce:c4:dd:6e:5a:3a:3a:f8:43:c0:32:b0:
                    01:d9:c8:f7:b1:fc:42:cf:6f:af:76:a1:f5:39:7d:
                    f2:3a:13:9e:88:96:87:ad:08:84:36:59:72:6d:11:
                    e5:15:12:8c:1b:06:21:e0:ba:1e:53:e7:d1:51:4a:
                    4a:48:94:c1:ab:2f:d7:94:73:72:0e:fe:54:42:a1:
                    a8:3a:c3:0c:53:ec:20:f2:24:15:e1:1f:d7:4d:50:
                    83:da:46:64:92:bc:3e:02:1a:e0:af:b2:b4:a6:e1:
                    55:e5:75:06:03:60:51:00:c9:21:ea:34:71:8f:48:
                    43:37:59:cc:3e:d0:98:69:f6:99:b1:f9:37:a8:32:
                    d0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:00:29:9E:A3:39:02:30:16:C4:B8:72:98:5C:16:D9:C8:43:F2:06
            X509v3 Authority Key Identifier:
                keyid:62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a383030303a3a2f33342d3334203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7684:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         65:fd:67:b1:37:99:e6:8d:98:6e:fa:a1:64:c0:6e:aa:10:55:
         f3:36:f5:4e:27:3c:d8:3f:4d:f0:4c:a8:98:ef:47:a6:eb:cf:
         53:d2:ab:8e:50:52:dc:76:1c:ca:e1:45:1d:24:46:96:66:b2:
         3a:c5:44:9b:cb:10:4b:0d:9f:1e:91:67:4e:15:32:5f:6b:0d:
         b5:28:f6:be:c9:cf:ff:0b:ba:a5:6d:61:4f:d6:0b:50:46:9e:
         5f:84:90:54:f8:4a:ea:1a:b2:7f:8b:c4:db:51:76:8a:8d:84:
         e2:ac:df:ad:b8:31:24:af:4c:65:15:48:99:a9:c2:bb:61:29:
         d4:93:66:65:6b:19:4b:88:e6:85:6b:96:b4:9f:8a:55:11:1d:
         8f:10:0c:77:62:32:3b:64:99:f2:64:43:7a:55:94:79:a8:77:
         95:38:80:68:b8:17:df:12:45:3c:63:2c:05:fc:3a:48:e9:66:
         69:b9:a5:2d:1d:41:5c:a3:c3:d0:e1:4a:54:df:86:39:9d:dc:
         fe:fd:ff:ff:c4:46:3d:0b:65:ac:22:74:2c:be:97:b6:44:2b:
         f6:12:b3:34:be:c5:57:db:fb:17:f2:a0:6d:8b:27:f9:97:9c:
         7f:8b:07:f9:39:64:26:e7:74:aa:47:43:c5:fc:1c:4b:ec:d9:
         8a:94:3d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:41:21 2025 by rpki-client