Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a3a2f33332d3333203d3e20323731353034.roa
File:                     323830343a376339303a3a2f33332d3333203d3e20323731353034.roa (raw, json)
Hash identifier:          ylpDRUGrhYrCXCIayWD4IMKVru6doB+0Clhs9skNXu8=
Subject key identifier:   FC:1F:8C:18:0D:99:78:51:9E:29:FC:71:B0:07:E2:0C:96:BE:71:89
Certificate issuer:       /CN=3B9278887F13B27AA11B20954CB918BC341F1426
Certificate serial:       6170593DB2139BD30201AF83A00A6129D23AE516
Authority key identifier: 3B:92:78:88:7F:13:B2:7A:A1:1B:20:95:4C:B9:18:BC:34:1F:14:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B9278887F13B27AA11B20954CB918BC341F1426.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a3a2f33332d3333203d3e20323731353034.roa
Signing time:             Thu 27 Feb 2025 14:51:41 +0000
ROA not before:           Thu 27 Feb 2025 14:46:41 +0000
ROA not after:            Thu 26 Feb 2026 14:51:41 +0000
asID:                     271504
IP address blocks:        2804:7c90::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3B9278887F13B27AA11B20954CB918BC341F1426.crl
                          rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3B9278887F13B27AA11B20954CB918BC341F1426.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B9278887F13B27AA11B20954CB918BC341F1426.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 03:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:70:59:3d:b2:13:9b:d3:02:01:af:83:a0:0a:61:29:d2:3a:e5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B9278887F13B27AA11B20954CB918BC341F1426
        Validity
            Not Before: Feb 27 14:46:41 2025 GMT
            Not After : Feb 26 14:51:41 2026 GMT
        Subject: CN=FC1F8C180D9978519E29FC71B007E20C96BE7189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f9:ed:57:81:86:10:0a:29:6e:66:67:8e:e4:
                    f6:fe:66:63:fe:94:75:b4:cb:62:2f:07:aa:03:c1:
                    d9:c7:1a:28:25:75:f6:88:d1:31:38:d0:1b:0e:bb:
                    fe:02:09:0e:2e:f8:6f:03:da:4a:ff:a0:56:0e:35:
                    61:a0:ef:be:d7:80:aa:ba:ab:07:b7:c3:61:32:ee:
                    68:7b:52:80:61:44:6b:ce:4e:e3:38:05:dd:a8:f2:
                    19:12:94:50:a4:23:eb:8c:f6:75:a0:82:67:db:a7:
                    f6:2d:1f:e8:df:49:c7:a2:7c:e3:77:97:3f:8e:5d:
                    d1:7d:7c:f9:12:7d:2b:02:15:cd:f4:bb:2a:f4:2a:
                    ca:86:56:71:53:cb:8d:5f:90:46:3b:fe:bf:a8:54:
                    bb:c9:b0:eb:8f:65:8f:72:dc:33:70:22:dc:0f:3e:
                    c4:f7:a9:44:6e:cc:13:44:9e:2b:89:62:67:44:42:
                    c6:18:d1:d8:71:d6:89:46:f3:a5:ce:c4:8b:ec:fc:
                    7e:40:51:7c:54:04:36:2a:4c:9a:12:04:ae:5a:5a:
                    62:a2:de:66:99:c4:f8:f1:c6:37:24:58:33:fa:e9:
                    fc:11:1d:cc:ee:cb:3c:18:74:11:59:83:84:72:3d:
                    cf:1f:29:16:a7:ba:66:ec:98:a7:c4:8e:0e:14:1d:
                    00:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1F:8C:18:0D:99:78:51:9E:29:FC:71:B0:07:E2:0C:96:BE:71:89
            X509v3 Authority Key Identifier:
                keyid:3B:92:78:88:7F:13:B2:7A:A1:1B:20:95:4C:B9:18:BC:34:1F:14:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3B9278887F13B27AA11B20954CB918BC341F1426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B9278887F13B27AA11B20954CB918BC341F1426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a3a2f33332d3333203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c90::/33

    Signature Algorithm: sha256WithRSAEncryption
         0e:38:7b:ac:96:70:be:12:c0:36:51:93:d6:d1:ed:fe:bb:44:
         e9:02:a9:80:3b:f4:d5:db:8f:99:28:a5:64:c3:6e:34:ca:b6:
         47:2c:94:98:bb:6b:88:29:c6:18:6d:2a:50:a0:5f:40:43:ac:
         62:68:de:9e:c9:91:e2:62:99:72:08:72:d6:fe:20:c0:29:0b:
         f5:6b:81:31:fa:dc:3e:39:7e:0a:21:09:87:56:77:00:78:e2:
         71:5b:4d:08:97:94:ff:9f:b9:76:c2:d8:74:c6:cd:10:f3:f2:
         de:61:cf:21:47:55:00:5c:9a:a9:91:45:59:1d:fe:66:3e:5a:
         e2:37:4d:74:af:7e:c7:4c:06:cf:96:46:dc:37:30:a8:4b:e6:
         85:a5:88:f2:1f:cb:7d:a9:7e:5f:17:12:92:9c:2c:d3:40:b3:
         36:bb:ea:f8:b0:38:35:70:e7:49:7e:2b:92:4f:0f:2e:b5:43:
         ca:c6:ef:13:9b:f9:8b:b1:c3:1e:f4:ae:e0:7b:53:de:3e:94:
         94:db:f4:db:3f:9e:17:26:a1:be:a8:63:6e:86:52:c9:22:98:
         41:f7:b3:5d:54:33:7d:fe:3f:90:f9:eb:b3:51:b7:89:87:41:
         db:a8:83:26:5d:34:22:c5:20:63:6d:ca:bc:37:10:0a:2c:ed:
         6f:78:9b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:53:14 2025 by rpki-client