Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a383030303a3a2f33342d3334203d3e20323639333732.roa
File:                     323830343a363339633a383030303a3a2f33342d3334203d3e20323639333732.roa (raw, json)
Hash identifier:          xtF/Qpw9vl7NCX1SXsm27WXeeoFwe0CfW7BLUGf7xec=
Subject key identifier:   14:E5:64:66:B1:1A:72:D8:49:CE:0E:CD:14:C9:0A:0D:26:4E:EB:EF
Certificate issuer:       /CN=D4F76BA9615EEF5E66255DB7FC8989EF16037F36
Certificate serial:       31CF23BA524DA20538A4BB37A0FB577B6260CAD9
Authority key identifier: D4:F7:6B:A9:61:5E:EF:5E:66:25:5D:B7:FC:89:89:EF:16:03:7F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F76BA9615EEF5E66255DB7FC8989EF16037F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a383030303a3a2f33342d3334203d3e20323639333732.roa
Signing time:             Wed 09 Apr 2025 13:04:13 +0000
ROA not before:           Wed 09 Apr 2025 12:59:13 +0000
ROA not after:            Wed 08 Apr 2026 13:04:13 +0000
asID:                     269372
IP address blocks:        2804:639c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/D4F76BA9615EEF5E66255DB7FC8989EF16037F36.crl
                          rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/D4F76BA9615EEF5E66255DB7FC8989EF16037F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F76BA9615EEF5E66255DB7FC8989EF16037F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 01:32:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:cf:23:ba:52:4d:a2:05:38:a4:bb:37:a0:fb:57:7b:62:60:ca:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4F76BA9615EEF5E66255DB7FC8989EF16037F36
        Validity
            Not Before: Apr  9 12:59:13 2025 GMT
            Not After : Apr  8 13:04:13 2026 GMT
        Subject: CN=14E56466B11A72D849CE0ECD14C90A0D264EEBEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:80:22:57:5e:3d:3b:35:44:1b:0f:a9:1b:e3:
                    95:ed:3a:7e:77:e3:0d:9f:87:bf:f3:20:47:ad:d7:
                    13:28:9c:a2:b1:04:8d:a1:4b:51:18:67:28:7d:73:
                    fd:ab:02:29:d7:5a:d5:95:35:e8:1e:b6:32:be:7d:
                    c2:da:0f:84:d6:a6:90:fb:88:06:ac:86:ec:13:40:
                    e9:3d:d0:33:4f:46:16:33:2b:34:1d:87:1c:f2:7a:
                    dc:32:75:e5:b2:92:38:b1:44:7d:3a:b1:3e:75:de:
                    f2:58:a2:bd:57:64:1e:64:50:3f:d8:19:e9:bb:f9:
                    3d:58:c0:90:47:d5:b3:ba:eb:cb:8f:80:8f:25:9e:
                    e0:36:bf:db:ed:0e:73:2c:57:5e:a6:0d:b1:69:35:
                    35:d1:c7:c0:08:94:08:75:bf:80:7a:39:a7:43:0d:
                    9d:96:08:bf:6a:97:44:50:7d:04:b7:df:00:3c:fd:
                    3f:5f:d8:37:52:ca:8f:b7:cf:34:cf:25:c2:61:26:
                    3c:a3:6b:83:61:35:4b:44:9c:5c:8e:b1:a9:fa:8f:
                    fd:9d:1e:20:c9:de:4c:2a:90:2c:8b:7a:d4:15:a1:
                    a0:8c:e1:ca:2a:dc:1c:c0:26:3c:41:66:fe:31:95:
                    f6:ed:88:5d:b1:48:f8:3a:14:ed:b3:b7:48:c1:2d:
                    06:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E5:64:66:B1:1A:72:D8:49:CE:0E:CD:14:C9:0A:0D:26:4E:EB:EF
            X509v3 Authority Key Identifier:
                keyid:D4:F7:6B:A9:61:5E:EF:5E:66:25:5D:B7:FC:89:89:EF:16:03:7F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/D4F76BA9615EEF5E66255DB7FC8989EF16037F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F76BA9615EEF5E66255DB7FC8989EF16037F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a383030303a3a2f33342d3334203d3e20323639333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:639c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ac:f6:5e:fb:4a:13:da:bb:47:ea:9d:dd:2a:dc:d7:d0:da:be:
         10:83:10:a8:88:d9:78:f8:8e:cb:e3:0e:e2:46:38:61:22:c3:
         df:ca:5f:22:36:bc:70:eb:9b:eb:a2:2a:c6:83:79:5b:ae:b8:
         cd:1e:66:50:01:3e:57:86:7f:32:5b:a8:84:c5:e4:e9:18:35:
         19:e9:d1:f6:56:ea:7b:8f:b5:4e:72:ad:41:bd:5b:57:74:27:
         2d:74:5d:ee:89:78:50:03:3e:29:60:81:d9:bb:5b:8c:1b:7b:
         a4:0d:01:83:3a:49:f7:38:e3:59:ca:2d:3a:30:b5:4e:af:ab:
         9a:c9:32:6e:69:d0:c8:3a:3b:4f:f2:32:ce:33:d9:38:a3:a4:
         ee:8d:27:b5:78:5a:09:36:1b:50:12:84:04:aa:57:cc:cf:a3:
         86:8f:1b:41:41:60:08:2c:da:bf:69:6b:46:4c:2f:85:5e:3c:
         8b:57:26:21:b3:06:de:2e:31:08:09:17:53:d7:0e:f7:9b:3a:
         0e:8f:de:e6:a0:bf:04:50:7b:3a:2c:b7:7d:a3:ae:8e:cc:9f:
         95:6a:47:ec:18:14:e2:7e:c9:47:2a:c0:a6:ba:50:9e:57:75:
         49:da:24:4b:fc:35:30:65:9f:80:93:28:c3:bc:be:5b:7c:4e:
         1f:2f:0a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:17:42 2025 by rpki-client