Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a383030303a3a2f33342d3334203d3e20323633343834.roa
File:                     323830343a313239303a383030303a3a2f33342d3334203d3e20323633343834.roa (raw, json)
Hash identifier:          7/yIGt78QtxrLZfFuE2cAs6Yrdeoi4g3zqDdwYrM4VY=
Subject key identifier:   A9:EA:2B:9E:EF:63:9B:31:40:41:79:5C:7D:95:2A:DF:3B:66:60:97
Certificate issuer:       /CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
Certificate serial:       3E824B08ECBE9446E7D2D75991739ABB18C5D86E
Authority key identifier: 77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a383030303a3a2f33342d3334203d3e20323633343834.roa
Signing time:             Thu 03 Apr 2025 13:48:32 +0000
ROA not before:           Thu 03 Apr 2025 13:43:32 +0000
ROA not after:            Thu 02 Apr 2026 13:48:32 +0000
asID:                     263484
IP address blocks:        2804:1290:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl
                          rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 11:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:82:4b:08:ec:be:94:46:e7:d2:d7:59:91:73:9a:bb:18:c5:d8:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
        Validity
            Not Before: Apr  3 13:43:32 2025 GMT
            Not After : Apr  2 13:48:32 2026 GMT
        Subject: CN=A9EA2B9EEF639B314041795C7D952ADF3B666097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c4:3a:69:49:47:a4:48:f8:89:ca:9c:01:96:
                    09:22:aa:b8:b0:6a:e1:a9:92:24:a4:27:82:92:40:
                    e7:d0:2f:8f:26:e0:73:21:a0:5e:53:ef:b7:9a:99:
                    89:68:bc:08:7a:6e:bc:80:ce:7c:2a:db:91:8f:c0:
                    8e:87:92:e1:e3:85:79:62:3c:2d:a1:10:c2:87:ff:
                    1b:36:b4:a7:f6:c3:2c:a6:4c:f0:6e:ec:af:2a:e1:
                    bb:d5:d4:ee:df:13:bc:3a:7d:84:d2:de:13:ae:3b:
                    34:d9:12:be:37:78:f3:f9:4c:4f:8f:f4:08:de:0c:
                    4f:5c:cb:f6:13:f9:91:13:f3:c1:e4:fe:1e:f9:4f:
                    76:0e:37:a1:12:7b:a3:b2:83:87:02:ef:d4:8d:68:
                    1b:15:33:35:f6:27:be:d4:ae:68:39:8e:0d:1d:09:
                    b8:3f:6b:05:de:07:d7:38:03:bf:de:e8:37:41:08:
                    4c:32:c0:37:dd:f1:8e:44:5b:19:23:96:5a:43:1f:
                    2e:64:14:4c:5d:61:c0:d5:d0:f7:e6:94:28:5a:6d:
                    16:f6:6f:14:5a:57:87:32:e2:45:23:bf:c2:52:e1:
                    a7:9c:5d:f1:3e:a4:77:18:a1:b6:97:e8:70:42:53:
                    4b:9a:f2:e2:d2:d2:91:4a:13:b8:63:6d:11:2a:69:
                    88:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EA:2B:9E:EF:63:9B:31:40:41:79:5C:7D:95:2A:DF:3B:66:60:97
            X509v3 Authority Key Identifier:
                keyid:77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a383030303a3a2f33342d3334203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1290:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6c:cc:bf:88:12:39:81:07:a7:22:ce:56:0e:9c:b1:7f:cc:13:
         45:76:ca:ee:87:fb:35:93:65:d8:de:45:7c:68:74:bb:60:2d:
         7d:8b:c2:bc:04:ce:e6:e4:16:d7:1c:6e:ad:33:f9:52:3f:ea:
         9f:31:7d:d6:cf:d9:c2:83:6f:14:5f:2b:d1:ed:25:9e:d6:91:
         cd:81:1a:ab:44:46:49:f6:02:a7:18:d4:1c:f5:bc:36:e7:78:
         fd:a9:b3:6e:62:28:e5:89:6a:de:3f:bc:8f:2e:36:8b:a0:d2:
         07:dd:cd:9e:88:2d:4d:4f:18:5b:35:36:d2:5a:d6:f5:d1:4b:
         5d:9b:49:fb:71:b7:90:aa:27:ee:29:db:12:7c:a9:e0:f5:a8:
         a6:cf:c9:7c:2f:a9:5d:18:91:08:3c:2a:83:01:8a:86:4f:89:
         fc:d5:49:20:d9:ea:8b:97:8d:f3:b5:a1:a3:e3:b1:16:7e:a7:
         eb:ad:db:39:02:32:17:94:c0:80:96:c0:64:2f:ba:a5:25:ca:
         51:10:19:51:f5:fa:3b:b6:ca:db:16:b0:9e:83:3f:e8:0d:07:
         a4:d4:24:81:18:8a:f2:73:23:25:65:e3:e6:e9:d4:a2:ca:0f:
         f6:cd:6c:d4:a8:12:b0:a0:34:58:70:7d:9c:17:ba:50:35:46:
         44:35:a9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:48 2025 by rpki-client