Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/323830343a373634303a3a2f33322d3332203d3e20323731303939.roa
File:                     323830343a373634303a3a2f33322d3332203d3e20323731303939.roa (raw, json)
Hash identifier:          071BId+7Q/7SRJkhNBFvF5o4ZYEjl+zp7SNfMCF07GU=
Subject key identifier:   D4:2C:03:67:88:64:64:6E:EA:44:73:03:39:8B:46:A9:22:3C:B3:DF
Certificate issuer:       /CN=CA77E72CF3C2DA1DE08E65356718B3E49E8038E5
Certificate serial:       431785D28EF96E24FD8B0A5549399D48898D6B17
Authority key identifier: CA:77:E7:2C:F3:C2:DA:1D:E0:8E:65:35:67:18:B3:E4:9E:80:38:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/323830343a373634303a3a2f33322d3332203d3e20323731303939.roa
Signing time:             Thu 29 May 2025 18:14:42 +0000
ROA not before:           Thu 29 May 2025 18:09:42 +0000
ROA not after:            Thu 28 May 2026 18:14:42 +0000
asID:                     271099
IP address blocks:        2804:7640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.crl
                          rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 22:32:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:17:85:d2:8e:f9:6e:24:fd:8b:0a:55:49:39:9d:48:89:8d:6b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA77E72CF3C2DA1DE08E65356718B3E49E8038E5
        Validity
            Not Before: May 29 18:09:42 2025 GMT
            Not After : May 28 18:14:42 2026 GMT
        Subject: CN=D42C03678864646EEA447303398B46A9223CB3DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d5:c8:25:c7:20:b2:fe:31:53:1c:2d:65:24:
                    da:a6:7d:81:d8:27:64:96:ef:70:5e:a3:40:b9:19:
                    85:65:a5:d7:d1:4f:e0:63:2a:eb:d9:55:83:52:16:
                    1c:47:36:9b:6c:91:8c:4b:2c:c1:62:29:31:1c:9b:
                    85:ca:1c:9b:b9:5b:93:c6:25:b8:17:e2:4d:37:8e:
                    a8:5d:8a:57:df:7e:bb:33:c5:8c:0a:5f:18:9c:f4:
                    0d:cf:cc:e6:4f:1f:9e:76:13:3b:63:ce:b1:51:c9:
                    bb:ad:b5:a1:4a:c0:3d:cf:e7:a4:57:26:21:38:f9:
                    00:4d:7f:f4:10:d8:86:54:31:be:2d:b9:e2:ca:41:
                    bc:75:f1:fd:da:d7:0d:68:bf:8c:94:86:1c:60:5f:
                    d0:ef:d7:ef:44:c1:e2:05:11:38:d1:c9:85:2a:0e:
                    e6:f9:fd:c8:39:3f:93:d0:02:95:97:8d:fb:93:5a:
                    c1:5d:50:67:a9:7a:16:d0:ac:3a:a3:d0:7b:b8:f5:
                    06:b6:ae:74:5c:82:f9:9a:25:0d:f9:77:81:3a:8a:
                    35:f0:07:06:1b:98:be:fa:cb:1c:40:47:ca:52:76:
                    dd:e0:da:1d:bb:11:37:e8:6d:b0:72:35:4f:62:38:
                    6f:70:09:d7:e2:00:05:86:e7:75:cc:24:a5:b0:f6:
                    a8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2C:03:67:88:64:64:6E:EA:44:73:03:39:8B:46:A9:22:3C:B3:DF
            X509v3 Authority Key Identifier:
                keyid:CA:77:E7:2C:F3:C2:DA:1D:E0:8E:65:35:67:18:B3:E4:9E:80:38:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/323830343a373634303a3a2f33322d3332203d3e20323731303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7640::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:00:25:65:79:5c:c0:73:e1:81:09:a4:e8:ac:58:1b:ce:a2:
         8c:cf:53:71:29:b0:8b:5b:56:9f:27:cb:b1:3c:0e:92:a7:fa:
         87:f3:2e:87:c4:89:31:45:c3:48:1d:dc:8b:45:aa:cb:3e:88:
         b8:90:e3:41:ab:20:f5:dc:e3:9c:f6:66:9b:b4:69:62:16:1c:
         16:38:b7:31:a8:40:57:84:99:fd:8e:72:88:1c:7b:79:2a:a8:
         63:ce:17:d2:c2:f4:f9:1b:e5:a1:10:e5:15:46:d8:1d:d1:ad:
         4f:14:0d:11:21:ee:d2:d5:5b:ae:84:08:d8:33:47:8f:d7:7c:
         3f:df:6f:dd:99:aa:29:64:4d:34:48:82:17:d1:a0:5e:22:d1:
         5c:ea:a5:b8:e2:c6:55:4e:9a:6b:d0:cc:8f:e2:f7:44:f2:5f:
         15:93:c6:6a:e7:b9:04:15:e8:bd:51:ff:d8:f9:4a:2e:0a:05:
         3a:e3:e8:7b:9c:46:1d:b2:3c:30:44:c1:ae:fa:27:c9:b7:18:
         41:99:aa:43:e5:57:a6:1e:9e:e9:35:74:84:4c:fe:8c:96:e9:
         f4:1b:5d:a3:20:b8:90:e6:b8:83:d0:f3:b4:e4:c2:1d:d4:ae:
         4f:30:14:df:97:a5:a5:d2:55:bd:eb:df:61:0e:2e:db:03:ee:
         27:cc:05:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:13:28 2025 by rpki-client