Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/323830343a376239343a3a2f33342d3334203d3e20323731343431.roa
File:                     323830343a376239343a3a2f33342d3334203d3e20323731343431.roa (raw, json)
Hash identifier:          kj21xwQzN0LOd8jv93DUO5iHePRdx0FN2TniNIfPjWI=
Subject key identifier:   0E:7C:DB:69:2A:04:C8:A4:23:66:54:5B:F8:50:C2:F0:9D:60:20:E3
Certificate issuer:       /CN=03D348CD504673CC24A6139BE73024EECBC0A420
Certificate serial:       7DA68E13FB9C36C48CAEF20093CF247508A35118
Authority key identifier: 03:D3:48:CD:50:46:73:CC:24:A6:13:9B:E7:30:24:EE:CB:C0:A4:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D348CD504673CC24A6139BE73024EECBC0A420.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/323830343a376239343a3a2f33342d3334203d3e20323731343431.roa
Signing time:             Thu 06 Mar 2025 14:07:48 +0000
ROA not before:           Thu 06 Mar 2025 14:02:48 +0000
ROA not after:            Thu 05 Mar 2026 14:07:48 +0000
asID:                     271441
IP address blocks:        2804:7b94::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/03D348CD504673CC24A6139BE73024EECBC0A420.crl
                          rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/03D348CD504673CC24A6139BE73024EECBC0A420.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D348CD504673CC24A6139BE73024EECBC0A420.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 08:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a6:8e:13:fb:9c:36:c4:8c:ae:f2:00:93:cf:24:75:08:a3:51:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03D348CD504673CC24A6139BE73024EECBC0A420
        Validity
            Not Before: Mar  6 14:02:48 2025 GMT
            Not After : Mar  5 14:07:48 2026 GMT
        Subject: CN=0E7CDB692A04C8A42366545BF850C2F09D6020E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:33:22:c4:0e:1f:56:6b:0a:97:b3:4c:fd:be:
                    fd:66:df:1e:c8:87:6f:7d:4f:0b:c4:77:fc:ad:1c:
                    5e:4d:35:33:75:95:18:fe:db:58:93:0f:36:19:2a:
                    c2:7b:62:3d:51:bf:2c:51:2a:89:7d:3a:81:e4:f8:
                    3c:f0:52:6f:8e:71:2e:5c:61:39:dd:9a:32:85:10:
                    71:7e:03:58:0b:b0:4c:84:0b:27:d2:17:88:47:a1:
                    e3:9a:ae:92:71:10:d7:6b:81:cf:df:16:4a:e5:fd:
                    25:a8:6c:2b:16:c0:5c:05:43:28:ea:ac:dc:57:4d:
                    ac:64:c6:84:c2:21:53:4d:df:a6:f2:94:64:1a:c9:
                    3f:ac:8e:25:e5:53:16:f7:be:d5:b8:70:0f:44:11:
                    9c:2e:7c:42:81:b9:42:fa:91:75:01:93:be:08:24:
                    c5:7e:f4:55:97:ca:3a:6f:9e:a8:7c:0f:38:34:1d:
                    68:ef:5e:5f:1c:0d:b2:50:26:d4:f6:91:3e:db:53:
                    40:74:7b:e4:46:9b:2a:23:ee:ec:d6:b9:6f:41:dc:
                    25:5c:12:a1:45:f3:fd:ab:2f:d7:c1:dd:12:03:d2:
                    e5:83:88:92:21:ef:12:2a:14:54:2d:43:c0:36:43:
                    0d:23:f0:74:c8:a3:62:4c:dc:81:f1:5a:c4:b7:6c:
                    0e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7C:DB:69:2A:04:C8:A4:23:66:54:5B:F8:50:C2:F0:9D:60:20:E3
            X509v3 Authority Key Identifier:
                keyid:03:D3:48:CD:50:46:73:CC:24:A6:13:9B:E7:30:24:EE:CB:C0:A4:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/03D348CD504673CC24A6139BE73024EECBC0A420.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D348CD504673CC24A6139BE73024EECBC0A420.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/323830343a376239343a3a2f33342d3334203d3e20323731343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b94::/34

    Signature Algorithm: sha256WithRSAEncryption
         0a:64:75:e3:d1:6a:f4:25:85:d9:a2:de:19:b2:70:37:d1:1c:
         b5:c6:a0:cf:5e:24:88:a4:d4:21:c9:a0:4f:3f:1d:42:50:12:
         dd:0c:e8:28:55:11:3c:72:8c:e0:11:ed:40:37:54:f6:9e:5c:
         15:1f:7f:2f:4d:36:85:bf:fb:4e:19:0e:58:d5:b2:4f:2c:1c:
         1c:aa:70:bc:c3:fb:a0:a8:17:04:a7:20:6a:4c:6a:37:c6:cb:
         cd:31:73:df:89:66:7d:b8:3e:01:f1:d2:63:3b:f5:8c:f2:88:
         62:18:65:1c:38:0e:a9:ba:00:3e:7b:39:90:0a:2a:0b:97:10:
         18:2d:ff:26:c2:bc:b8:0c:c7:f9:ed:bc:ac:89:b7:08:f8:c7:
         1c:0b:99:28:97:da:b6:60:e7:ef:c0:1b:41:eb:9b:82:b9:cf:
         47:37:e5:5b:11:54:0e:05:08:8a:2e:fc:c7:2f:df:9a:9c:14:
         32:96:08:5b:26:cf:57:67:b3:1c:da:2a:6f:aa:08:d3:09:25:
         a8:bf:73:a0:de:e1:9d:18:29:de:6a:95:d7:27:36:3d:00:62:
         72:8e:75:3c:ed:95:a4:9d:73:66:7e:f5:5c:a1:9a:1a:a1:5a:
         0a:34:05:46:48:9a:44:50:1d:d9:88:6c:cd:86:ef:94:38:93:
         3c:32:9b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:14:29 2025 by rpki-client