Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a3a2f33342d3334203d3e20323731313137.roa
File:                     323830343a373638343a3a2f33342d3334203d3e20323731313137.roa (raw, json)
Hash identifier:          J20B7P3vL/y8VHyi6nm/Eg0UI4OLTpNx2QHgb6p21kU=
Subject key identifier:   34:78:B3:E4:E6:2E:67:89:06:3A:FB:E8:73:95:9F:37:3D:D0:C7:F3
Certificate issuer:       /CN=62D01A32125D7B1F626C38C25BC340B899793CFA
Certificate serial:       5E96F14DD86A4427CD4D232C7076FF6C36560A6D
Authority key identifier: 62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a3a2f33342d3334203d3e20323731313137.roa
Signing time:             Thu 06 Mar 2025 21:39:19 +0000
ROA not before:           Thu 06 Mar 2025 21:34:19 +0000
ROA not after:            Thu 05 Mar 2026 21:39:19 +0000
asID:                     271117
IP address blocks:        2804:7684::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl
                          rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 00:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:96:f1:4d:d8:6a:44:27:cd:4d:23:2c:70:76:ff:6c:36:56:0a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62D01A32125D7B1F626C38C25BC340B899793CFA
        Validity
            Not Before: Mar  6 21:34:19 2025 GMT
            Not After : Mar  5 21:39:19 2026 GMT
        Subject: CN=3478B3E4E62E6789063AFBE873959F373DD0C7F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:9f:61:4a:99:52:23:5b:a0:34:f3:1b:8c:
                    1a:0e:c9:9a:52:45:97:a6:47:fb:c4:d7:2d:b8:78:
                    89:c1:c8:f8:c5:43:75:fa:e9:a2:4f:1c:ae:bd:8d:
                    52:58:08:d0:cb:f5:b9:26:42:61:73:a4:e9:9b:d4:
                    01:ad:5a:65:cc:ba:0f:77:ec:f2:f3:f7:b6:e6:2f:
                    00:1f:1f:99:67:90:65:b9:b0:f2:8e:9f:d2:d3:7d:
                    d5:9f:2a:e6:9a:23:35:ef:94:cc:bc:8c:5d:51:99:
                    2f:a2:86:f6:a7:4a:d5:59:77:49:6f:50:e3:12:a6:
                    62:0a:9c:6d:68:a9:53:60:c5:28:85:a9:aa:be:dc:
                    5d:11:5f:17:45:e5:6e:7b:8a:89:8f:6b:6f:bb:f8:
                    f7:e1:fb:96:ee:32:3d:c2:46:b4:e7:a8:9e:78:3e:
                    e8:da:f1:88:11:a9:3c:96:6e:20:51:81:67:0f:81:
                    31:3d:aa:08:1b:de:b9:60:f2:2c:e5:92:0f:3c:1e:
                    73:36:e5:a2:83:0a:9b:41:98:a4:52:fe:30:77:64:
                    4c:03:c7:5d:5d:9f:fc:b9:6d:e5:c4:ac:12:cf:50:
                    65:cf:31:f3:e6:4b:09:e6:b3:23:49:fe:08:71:d3:
                    63:cd:5e:69:48:6d:36:44:8b:cd:0d:62:15:f9:dd:
                    9a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:78:B3:E4:E6:2E:67:89:06:3A:FB:E8:73:95:9F:37:3D:D0:C7:F3
            X509v3 Authority Key Identifier:
                keyid:62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a3a2f33342d3334203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7684::/34

    Signature Algorithm: sha256WithRSAEncryption
         7d:26:df:f7:a8:b5:d4:95:ac:b1:af:fa:eb:79:4c:1d:a1:a4:
         e6:34:03:ef:f0:e1:d3:cf:66:1f:38:56:b8:91:59:d6:ad:a4:
         5a:a3:45:fc:de:63:be:bf:de:84:db:0c:1a:74:9b:5d:16:e6:
         ec:ce:f6:0a:a2:4f:80:a1:80:c2:97:8e:34:f3:d9:8d:e1:ca:
         cf:a7:ea:79:b6:5d:9f:0e:87:27:61:ca:8c:ad:17:be:ad:65:
         0b:c4:40:b4:26:7f:31:ce:08:35:60:43:9e:c4:86:d5:38:c9:
         65:ee:b4:9c:f8:98:ee:86:f0:67:3e:75:eb:db:4b:d4:b4:7e:
         66:36:2c:09:d4:ba:34:b1:87:96:bc:17:fe:89:58:10:95:0d:
         38:de:c1:4f:3b:fb:f3:24:da:a9:52:9e:6d:82:35:ff:17:7d:
         74:ba:ff:20:32:67:47:2d:9b:1f:6f:72:71:0d:5b:e1:12:9d:
         11:ee:90:f9:9a:85:bc:43:0d:55:76:a4:c6:14:ff:cd:2a:14:
         73:c6:db:85:38:b5:b1:a8:5a:ba:17:4e:fc:aa:a5:08:5b:a6:
         a8:fb:be:b9:62:11:01:47:39:e1:e5:1b:36:8c:6f:9f:db:47:
         6f:f5:cf:3a:9f:f9:fe:ab:55:c3:6f:b9:9e:0b:8e:ea:81:0a:
         83:dd:1b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:18:37 2025 by rpki-client