Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a383030303a3a2f34302d3430203d3e20323731313137.roa
File:                     323830343a373638343a383030303a3a2f34302d3430203d3e20323731313137.roa (raw, json)
Hash identifier:          ZkM+Ud4bzsDsmE8uGooGLDgESBIQEWyr1ST20GvAf3s=
Subject key identifier:   38:DE:02:13:50:30:27:FC:A9:42:FD:1C:49:80:81:D7:93:28:E3:FB
Certificate issuer:       /CN=62D01A32125D7B1F626C38C25BC340B899793CFA
Certificate serial:       2F7E793351310A4C99AFC17057E487A76A99D6AA
Authority key identifier: 62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a383030303a3a2f34302d3430203d3e20323731313137.roa
Signing time:             Thu 06 Mar 2025 21:39:19 +0000
ROA not before:           Thu 06 Mar 2025 21:34:19 +0000
ROA not after:            Thu 05 Mar 2026 21:39:19 +0000
asID:                     271117
IP address blocks:        2804:7684:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl
                          rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 05:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7e:79:33:51:31:0a:4c:99:af:c1:70:57:e4:87:a7:6a:99:d6:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62D01A32125D7B1F626C38C25BC340B899793CFA
        Validity
            Not Before: Mar  6 21:34:19 2025 GMT
            Not After : Mar  5 21:39:19 2026 GMT
        Subject: CN=38DE0213503027FCA942FD1C498081D79328E3FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:43:1f:f4:4b:8c:08:cf:f7:bf:5c:f5:04:d2:
                    37:f6:24:8f:6b:37:ab:d2:f0:e7:57:db:da:67:53:
                    5e:46:e5:d5:02:17:f3:11:34:57:9d:78:66:cf:e2:
                    32:01:66:d9:ef:28:08:6d:23:65:f5:c3:1d:ed:a4:
                    8a:07:37:2e:de:a5:21:94:fb:3e:ad:e7:af:b2:e6:
                    c8:8b:a5:ba:80:b1:02:0e:85:7b:9c:8a:1d:23:74:
                    c0:49:3b:60:83:21:21:38:94:77:11:90:82:b9:40:
                    c2:d4:de:46:2b:45:aa:a4:3e:78:bf:4f:f9:43:f9:
                    42:19:81:df:8a:13:0d:4d:21:6b:9c:90:9c:74:81:
                    d5:b6:57:af:02:6b:60:da:4c:51:9b:02:87:ad:22:
                    9a:3e:3b:16:33:a7:c2:71:98:6d:68:17:f6:f3:96:
                    84:24:e0:26:b4:ec:41:dc:52:6f:1b:9a:eb:f9:1b:
                    e8:f2:27:78:fb:3c:0b:36:b7:c9:a5:d7:42:73:56:
                    4c:ba:cc:a1:59:54:61:03:3c:c0:4d:99:89:d1:3b:
                    a7:fa:94:0e:c4:66:34:01:3b:42:e0:f7:2c:49:73:
                    88:2c:38:cf:16:60:cc:67:4e:ca:c8:b3:b4:55:6a:
                    3d:85:65:f4:6a:5e:28:40:87:7d:ae:04:f0:04:2b:
                    c8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DE:02:13:50:30:27:FC:A9:42:FD:1C:49:80:81:D7:93:28:E3:FB
            X509v3 Authority Key Identifier:
                keyid:62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a383030303a3a2f34302d3430203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7684:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         37:44:a2:1d:db:84:72:86:2e:0b:b4:6a:40:38:ff:36:c0:78:
         d8:b4:42:2c:d5:ac:5b:f1:90:2a:7f:d4:04:b8:47:9e:d2:8f:
         d2:40:14:86:76:0f:e4:37:c7:68:5a:00:26:ce:d5:c1:a1:65:
         4b:71:bb:2c:a2:13:64:a8:90:94:d1:c2:e9:d4:21:a6:69:ea:
         d3:48:8a:89:e8:38:a7:65:ab:b1:18:88:cd:9f:39:a9:13:56:
         04:cf:0a:c6:58:73:d0:13:44:60:d9:0a:a6:8f:12:6c:79:fa:
         b8:6e:93:cc:f4:e3:25:27:db:e0:2a:6c:86:64:cd:16:c3:ce:
         3b:aa:17:13:97:ce:2e:ff:ad:08:71:42:25:69:49:29:d8:86:
         5c:e6:2c:a7:72:cb:1d:d9:1b:2f:d6:bd:4c:55:14:5d:81:25:
         9a:b3:52:85:13:a3:49:dc:76:46:56:64:a5:1d:1e:04:16:dd:
         c4:01:bb:dc:57:ed:d4:9c:1b:5f:1e:01:1c:b0:b2:9c:e4:55:
         db:e8:b7:0f:d2:dc:55:eb:43:de:1d:fb:77:c9:ca:55:fa:2e:
         5c:f4:8a:6d:33:a4:d3:c2:16:fd:3f:b7:fb:da:86:31:05:cd:
         22:c4:9d:88:cb:5a:93:15:75:d7:1d:87:a8:49:ee:52:83:82:
         55:05:e4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:06:20 2025 by rpki-client