Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a3a2f33332d3333203d3e20323639333732.roa
File:                     323830343a363339633a3a2f33332d3333203d3e20323639333732.roa (raw, json)
Hash identifier:          cqOe+324+H78DDjrW1MWf4rwBGXe5kSsjub91CbLRVI=
Subject key identifier:   03:F6:31:E2:B4:07:26:8D:5F:CC:78:A6:E5:F6:B4:95:63:73:A5:AC
Certificate issuer:       /CN=D4F76BA9615EEF5E66255DB7FC8989EF16037F36
Certificate serial:       5ED0E97DD0B50C6111F7AD721E33E76CB9732D61
Authority key identifier: D4:F7:6B:A9:61:5E:EF:5E:66:25:5D:B7:FC:89:89:EF:16:03:7F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F76BA9615EEF5E66255DB7FC8989EF16037F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a3a2f33332d3333203d3e20323639333732.roa
Signing time:             Wed 09 Apr 2025 13:04:14 +0000
ROA not before:           Wed 09 Apr 2025 12:59:14 +0000
ROA not after:            Wed 08 Apr 2026 13:04:14 +0000
asID:                     269372
IP address blocks:        2804:639c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/D4F76BA9615EEF5E66255DB7FC8989EF16037F36.crl
                          rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/D4F76BA9615EEF5E66255DB7FC8989EF16037F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F76BA9615EEF5E66255DB7FC8989EF16037F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 01:32:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d0:e9:7d:d0:b5:0c:61:11:f7:ad:72:1e:33:e7:6c:b9:73:2d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4F76BA9615EEF5E66255DB7FC8989EF16037F36
        Validity
            Not Before: Apr  9 12:59:14 2025 GMT
            Not After : Apr  8 13:04:14 2026 GMT
        Subject: CN=03F631E2B407268D5FCC78A6E5F6B4956373A5AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b0:bd:71:28:96:1a:98:fa:e5:d7:41:5d:e1:
                    85:00:39:03:13:1e:19:f7:b2:bb:64:10:3f:2d:23:
                    47:78:43:c3:be:b4:da:1e:cf:7f:7b:75:33:93:06:
                    1b:e0:30:c3:b8:21:b0:c9:25:9b:b5:b2:67:99:28:
                    a5:8b:75:6e:b1:39:06:e4:84:4e:1e:90:e5:16:44:
                    7a:34:9b:84:71:9e:15:d0:4b:e8:5a:53:9c:a8:85:
                    77:e7:34:21:d4:3a:d0:17:ef:46:66:de:80:4c:38:
                    4d:e4:94:34:e4:24:b8:76:73:96:69:c1:70:9e:6e:
                    1c:02:cc:6d:eb:7d:80:26:91:f6:9e:1f:13:aa:a0:
                    a0:da:81:7d:3b:5a:dc:ec:d2:dd:2b:1e:b9:3d:b9:
                    f7:87:ab:31:0a:7b:3e:39:b7:b4:4a:16:5b:46:7f:
                    38:5a:70:8b:f3:8a:4d:2a:27:9c:96:f4:95:45:64:
                    7d:5b:53:57:e8:79:3a:1d:53:10:1b:98:43:f9:78:
                    36:30:c8:5d:72:f7:ed:37:6f:f4:cc:31:25:ac:e6:
                    ed:6c:3e:b7:9d:b2:7b:f8:8a:3c:8b:c8:82:26:28:
                    81:f4:4d:59:58:42:05:1d:cc:73:4d:47:b5:9b:4c:
                    52:8e:2e:25:c3:da:44:42:95:73:7e:1e:ad:7f:c3:
                    42:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F6:31:E2:B4:07:26:8D:5F:CC:78:A6:E5:F6:B4:95:63:73:A5:AC
            X509v3 Authority Key Identifier:
                keyid:D4:F7:6B:A9:61:5E:EF:5E:66:25:5D:B7:FC:89:89:EF:16:03:7F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/D4F76BA9615EEF5E66255DB7FC8989EF16037F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F76BA9615EEF5E66255DB7FC8989EF16037F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a3a2f33332d3333203d3e20323639333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:639c::/33

    Signature Algorithm: sha256WithRSAEncryption
         7d:6b:b1:88:2f:84:48:dc:6b:a8:2f:27:e0:a1:d4:33:99:8b:
         ce:af:f9:96:a3:fe:62:35:db:52:b1:03:52:5e:fb:19:61:a0:
         e9:89:9e:77:84:8d:fb:d7:ed:b5:9b:65:57:f9:86:55:16:15:
         82:45:7f:f9:16:52:ae:e4:75:1b:a2:33:7f:6a:21:e5:0c:26:
         17:61:3f:c9:c4:95:31:4b:91:37:b5:7b:d4:70:39:a8:11:97:
         a1:5f:b9:86:36:f5:bf:49:b2:a2:85:ac:15:e8:13:c8:69:19:
         65:bf:b7:61:76:cf:bb:54:e1:cf:6e:25:c2:3d:1f:1e:f1:99:
         c3:50:f7:97:76:f5:02:11:34:8f:57:08:94:8d:20:2b:58:cc:
         fa:40:ff:cd:2b:45:31:a1:f0:6d:de:1b:0a:a1:4a:91:78:84:
         ee:be:d7:b7:05:8c:f2:f9:c9:33:d9:1c:39:dd:2f:b3:fc:8b:
         d1:4e:91:17:13:2a:4f:c7:b5:96:9e:c0:11:d5:c1:5d:01:b3:
         f0:e8:42:fb:de:f7:26:41:18:03:ca:e9:a1:cd:90:12:55:89:
         50:b1:38:a9:ad:3a:9c:d2:7d:20:a0:f4:b9:03:e3:7b:c7:82:
         1a:03:53:65:16:6f:63:50:39:aa:f7:7b:e4:22:d3:3b:0e:ce:
         30:b1:81:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:15:42 2025 by rpki-client