Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a3a2f33332d3333203d3e20323731313137.roa
File:                     323830343a373638343a3a2f33332d3333203d3e20323731313137.roa (raw, json)
Hash identifier:          7Ta63lJUOixdDkrvg5mqSw5+ttPw7/ePW+D3dEO2COY=
Subject key identifier:   D8:85:CF:26:24:F2:05:10:59:DC:22:7F:29:4C:58:C1:23:9D:D2:63
Certificate issuer:       /CN=62D01A32125D7B1F626C38C25BC340B899793CFA
Certificate serial:       45C30727B145EE623A4E8B8A4F5D457AF188B6FA
Authority key identifier: 62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a3a2f33332d3333203d3e20323731313137.roa
Signing time:             Thu 06 Mar 2025 21:39:19 +0000
ROA not before:           Thu 06 Mar 2025 21:34:19 +0000
ROA not after:            Thu 05 Mar 2026 21:39:19 +0000
asID:                     271117
IP address blocks:        2804:7684::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl
                          rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 17:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c3:07:27:b1:45:ee:62:3a:4e:8b:8a:4f:5d:45:7a:f1:88:b6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62D01A32125D7B1F626C38C25BC340B899793CFA
        Validity
            Not Before: Mar  6 21:34:19 2025 GMT
            Not After : Mar  5 21:39:19 2026 GMT
        Subject: CN=D885CF2624F2051059DC227F294C58C1239DD263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0e:1a:3f:07:8f:16:f5:a8:dd:12:30:db:1c:
                    b1:9a:08:37:2c:0c:d4:ac:56:2e:a7:ca:13:88:bb:
                    d6:3a:88:b4:15:22:02:9f:ea:67:fb:a5:d3:5b:f8:
                    2e:a6:89:3e:fc:2d:64:c4:51:75:58:af:17:0d:2d:
                    57:dd:c2:9b:64:f2:a6:bd:bd:c0:1c:47:d1:cf:7c:
                    d6:69:65:f2:f6:c6:5a:80:c3:3d:ba:34:23:37:d4:
                    75:9e:70:53:79:32:72:ec:3a:dc:37:08:dc:78:71:
                    d2:e2:2a:bc:43:ef:bc:6a:2b:bd:12:d6:d4:bf:f5:
                    66:58:1a:39:0d:b2:c1:d3:97:3f:1e:48:3d:6c:cd:
                    3d:d7:39:fc:f6:67:4b:2a:bf:f6:be:c8:de:d0:93:
                    51:5b:b8:a2:45:e7:24:36:b0:b9:d3:c8:33:9e:a5:
                    94:0b:b0:a9:82:d4:91:b4:f1:1b:0d:96:f0:bb:1b:
                    70:87:2d:68:09:2b:b4:ac:11:70:54:f3:57:9c:32:
                    ac:98:27:80:88:47:ec:a6:50:a0:78:45:3f:25:dd:
                    c2:d8:43:4d:f0:5e:91:05:72:ea:d8:8c:ff:91:7f:
                    f4:18:63:66:41:fd:8d:71:40:1f:69:59:28:07:3a:
                    d1:40:02:f4:ce:8a:7a:0b:d9:d8:3d:bc:0e:41:7d:
                    d9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:85:CF:26:24:F2:05:10:59:DC:22:7F:29:4C:58:C1:23:9D:D2:63
            X509v3 Authority Key Identifier:
                keyid:62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a3a2f33332d3333203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7684::/33

    Signature Algorithm: sha256WithRSAEncryption
         7b:7c:f5:61:a5:64:05:5f:09:1a:f9:b5:5e:c8:8e:b1:a4:3b:
         63:8e:55:38:22:2a:84:aa:54:56:86:1d:53:55:43:50:84:e6:
         c0:7d:9e:b3:00:24:09:42:0d:a1:af:28:cc:ac:e8:b3:91:a6:
         1c:17:4e:e2:2a:5b:8c:74:9e:2d:95:e2:74:c7:ce:ec:19:0c:
         ab:1d:eb:1f:4c:da:81:d0:78:6c:cb:4d:b0:27:b5:f7:f9:12:
         52:ee:13:b9:64:93:22:94:50:5e:dd:c7:71:25:5a:08:a3:3c:
         89:f9:d4:19:8f:01:9b:15:cf:6b:cf:6e:77:29:dd:17:4c:26:
         e3:3c:4c:e6:8e:75:a2:02:62:60:58:8d:7b:5b:35:a3:93:37:
         aa:86:19:9a:c1:be:f1:dd:d3:4a:bc:25:db:b4:89:56:14:7b:
         b2:0f:b0:2e:3a:e1:66:b4:4b:ca:5c:9e:f5:94:57:92:2b:60:
         59:bc:37:b9:5d:5a:6b:a4:26:ff:3b:d0:9a:43:a9:51:96:b4:
         53:ef:a7:76:b7:ef:24:44:a7:26:0a:35:96:07:3a:01:81:4d:
         75:3b:b5:47:78:4e:e5:bc:63:bf:17:4e:1f:a2:22:50:42:31:
         4d:ef:63:5f:a2:b5:d0:28:64:3f:0f:50:50:c4:a3:86:cc:90:
         e5:89:d3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:55:12 2025 by rpki-client