Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/323830343a313664633a3a2f33322d313238203d3e20323633313034.roa
File:                     323830343a313664633a3a2f33322d313238203d3e20323633313034.roa (raw, json)
Hash identifier:          G5AAbv33pivu3vzNY7JPwifjM6uOhsc8wAeK1CMPE3k=
Subject key identifier:   00:D7:19:24:10:69:88:34:39:EC:31:02:CF:5E:16:1B:03:AD:D7:8C
Certificate issuer:       /CN=87B1C7EAED276157BEE841B04303FA76647D005D
Certificate serial:       343B519C19AE185B3BF07CC2DDCA62AC985C98CF
Authority key identifier: 87:B1:C7:EA:ED:27:61:57:BE:E8:41:B0:43:03:FA:76:64:7D:00:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B1C7EAED276157BEE841B04303FA76647D005D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/323830343a313664633a3a2f33322d313238203d3e20323633313034.roa
Signing time:             Thu 06 Mar 2025 21:29:53 +0000
ROA not before:           Thu 06 Mar 2025 21:24:53 +0000
ROA not after:            Thu 05 Mar 2026 21:29:53 +0000
asID:                     263104
IP address blocks:        2804:16dc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.crl
                          rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B1C7EAED276157BEE841B04303FA76647D005D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:54:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3b:51:9c:19:ae:18:5b:3b:f0:7c:c2:dd:ca:62:ac:98:5c:98:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87B1C7EAED276157BEE841B04303FA76647D005D
        Validity
            Not Before: Mar  6 21:24:53 2025 GMT
            Not After : Mar  5 21:29:53 2026 GMT
        Subject: CN=00D719241069883439EC3102CF5E161B03ADD78C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:57:c1:ea:50:37:f8:01:37:eb:3c:f4:18:ec:
                    39:be:31:7e:0d:af:31:61:75:6d:4a:70:4d:f2:cf:
                    69:4b:c6:41:ea:26:f6:6c:d1:3a:d9:4f:45:eb:5d:
                    e5:51:7c:7f:20:fe:8c:ad:73:4c:d8:49:db:d7:df:
                    cf:0d:23:c0:c6:4f:5f:6f:6a:60:e7:bb:7b:8c:ce:
                    73:15:cd:9d:60:bb:c7:b3:6c:07:c3:66:bd:4d:c1:
                    b6:44:10:1b:30:68:98:a5:6e:71:5c:98:46:23:b3:
                    10:63:9c:e0:89:bd:a1:4f:a5:ce:a7:31:ed:9e:4c:
                    58:d6:75:f0:ac:16:93:ea:b5:34:74:cf:84:1a:42:
                    02:71:d4:19:40:a0:ad:c6:ca:d7:6c:92:12:29:6a:
                    f4:66:1b:b5:86:17:7a:aa:2f:59:db:ea:9d:d8:0a:
                    14:54:f2:19:5d:a0:4a:b4:fd:4e:0b:8c:17:27:08:
                    a9:bb:b2:14:e8:3e:38:57:da:95:e6:b1:9d:4c:a2:
                    b6:1e:93:d6:c8:93:00:1d:bf:d9:6d:85:8f:54:de:
                    76:91:4b:8c:f5:f4:f8:4d:6b:cf:76:4a:31:bc:f6:
                    9a:cb:3b:f4:96:11:1f:96:33:a3:c7:db:6a:dc:74:
                    08:4c:ae:58:e0:9b:df:ac:8d:d5:a1:f1:f7:a4:f2:
                    2f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D7:19:24:10:69:88:34:39:EC:31:02:CF:5E:16:1B:03:AD:D7:8C
            X509v3 Authority Key Identifier:
                keyid:87:B1:C7:EA:ED:27:61:57:BE:E8:41:B0:43:03:FA:76:64:7D:00:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B1C7EAED276157BEE841B04303FA76647D005D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/323830343a313664633a3a2f33322d313238203d3e20323633313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:10:40:94:b3:ee:b2:4f:df:e7:69:ef:80:fb:91:b6:bf:58:
         00:03:de:87:43:f6:d0:37:64:13:a7:b7:4f:78:11:3d:8c:d9:
         38:2f:7d:e3:69:77:4f:69:ae:b1:32:3b:78:79:6b:01:22:0b:
         60:20:4a:fc:54:6a:07:b9:68:3c:80:aa:3e:96:3b:a9:c5:2c:
         ec:0a:fc:94:a3:81:e9:2d:8b:db:ab:57:56:09:09:8c:c1:2a:
         11:02:89:03:5e:13:31:28:91:71:f6:2e:cf:bc:ff:73:a7:a0:
         04:11:2b:62:db:75:b7:1b:63:d5:d7:08:90:18:26:45:8b:19:
         1d:eb:25:e3:0a:51:04:a9:1a:62:ed:ab:2d:0c:bc:8d:53:04:
         10:65:f0:c8:c6:33:c5:5f:6f:c0:c8:3f:b3:fa:5c:36:91:1d:
         b8:95:7d:ee:a9:30:48:f9:b7:53:cc:d6:60:9b:c2:9c:bf:3e:
         90:fc:ae:4c:bf:b0:28:49:a0:00:a6:87:19:5c:bc:93:8a:c0:
         96:c6:7a:48:67:26:8e:f9:0a:be:19:04:dc:c4:fe:50:7c:3e:
         a0:b9:95:d6:e4:00:1f:b5:8c:cf:f4:05:af:97:a1:46:dd:7a:
         78:d2:bd:4d:14:15:9b:92:b4:7b:46:00:da:bd:fd:37:74:80:
         7d:e3:26:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:18:04 2025 by rpki-client