Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a633030303a3a2f33342d3334203d3e20323731313137.roa
File:                     323830343a373638343a633030303a3a2f33342d3334203d3e20323731313137.roa (raw, json)
Hash identifier:          GryAsmUVX1qSQfzEkS1112kCKAlo0tOcfq3z/lrsCl0=
Subject key identifier:   C3:09:A6:C8:B8:11:75:9B:2E:8C:01:FE:F8:4A:D4:C1:4D:CA:A9:70
Certificate issuer:       /CN=62D01A32125D7B1F626C38C25BC340B899793CFA
Certificate serial:       475CE556E0C4DB58105BE9E38EC9A067CB2CA004
Authority key identifier: 62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a633030303a3a2f33342d3334203d3e20323731313137.roa
Signing time:             Thu 06 Mar 2025 21:39:20 +0000
ROA not before:           Thu 06 Mar 2025 21:34:20 +0000
ROA not after:            Thu 05 Mar 2026 21:39:20 +0000
asID:                     271117
IP address blocks:        2804:7684:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl
                          rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 05:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5c:e5:56:e0:c4:db:58:10:5b:e9:e3:8e:c9:a0:67:cb:2c:a0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62D01A32125D7B1F626C38C25BC340B899793CFA
        Validity
            Not Before: Mar  6 21:34:20 2025 GMT
            Not After : Mar  5 21:39:20 2026 GMT
        Subject: CN=C309A6C8B811759B2E8C01FEF84AD4C14DCAA970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:37:21:58:df:42:23:ce:14:af:62:ae:cc:75:
                    5b:67:f9:a3:ea:a3:c7:eb:44:df:60:29:07:3a:20:
                    91:7a:d9:1d:62:7b:e3:30:8e:51:e3:4d:0f:62:8f:
                    20:35:40:81:9d:76:6a:d1:57:09:91:55:52:08:c3:
                    12:c4:ef:f4:8f:ed:52:a8:14:37:d6:f8:34:6d:98:
                    4d:c4:ae:0d:e2:d2:7a:85:af:36:a4:22:17:50:ff:
                    31:4a:89:40:16:f7:67:f9:b2:17:ce:75:27:6c:97:
                    97:a2:9e:0c:31:46:bb:ed:e8:fa:38:c1:00:b9:9e:
                    e0:36:3d:f3:ad:65:dd:d0:46:2d:1f:4a:8a:62:54:
                    a2:0e:7c:31:4f:ef:b0:d0:26:a0:af:7b:57:e0:74:
                    41:57:c7:3c:81:d9:9f:7c:24:0d:75:bd:72:02:d9:
                    9a:84:53:00:f8:c5:c6:ef:4e:00:fb:74:e1:6b:86:
                    f9:dd:cb:0f:70:e9:a6:d2:e6:21:3b:24:23:c6:3f:
                    0a:86:8f:33:1b:2a:2b:88:d1:76:c2:bf:8f:c3:17:
                    fa:d7:0f:b4:30:42:3e:bd:42:71:b3:1f:b2:0a:e4:
                    7c:26:18:1f:6a:8b:f4:28:cd:52:a6:27:d0:45:e2:
                    af:89:df:47:97:d3:cd:80:cd:6f:58:29:4d:16:66:
                    0d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:09:A6:C8:B8:11:75:9B:2E:8C:01:FE:F8:4A:D4:C1:4D:CA:A9:70
            X509v3 Authority Key Identifier:
                keyid:62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a633030303a3a2f33342d3334203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7684:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         37:0e:a3:9c:e2:bc:c8:da:78:ef:3a:3d:42:35:c3:4f:e7:d7:
         45:7f:28:71:16:23:d5:9a:16:34:9c:0d:bb:83:70:be:36:71:
         0c:93:ac:3f:ed:d2:00:31:62:a9:ba:ec:71:25:f7:84:1f:6f:
         fc:04:9f:a5:9a:a3:ae:d8:bb:3c:b5:26:be:f4:bb:f1:7a:da:
         a4:fc:2e:42:21:92:c9:60:04:16:cb:18:35:41:70:56:57:c7:
         40:d1:76:b1:dc:7c:26:51:5c:e7:5e:b3:4b:23:dc:f7:c5:2b:
         cf:ff:0a:85:b9:a2:bb:81:0a:6e:aa:c1:e7:f1:f3:9a:65:54:
         b1:8b:b8:8e:8a:9f:58:c7:29:b2:cf:f1:fd:0b:38:03:02:50:
         6d:45:3a:85:79:a8:cc:43:6b:d9:58:6d:bd:27:e7:97:52:99:
         76:c1:b8:5a:37:ac:d0:05:40:69:52:da:72:de:4f:29:f3:6d:
         f9:43:7f:1c:18:d3:3a:68:37:64:9a:c0:56:14:50:ff:50:f2:
         91:2f:f1:03:a5:31:92:46:ea:5b:cf:56:2e:0e:15:39:a2:3d:
         da:91:4a:ae:67:ad:84:fe:a0:a7:29:f5:49:4e:0c:af:3e:8e:
         0e:2e:2b:d3:70:cd:a3:a2:65:f1:27:f2:25:17:21:be:4b:cb:
         1d:5e:41:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:01:06 2025 by rpki-client