Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/323830343a373564633a3a2f33322d313238203d3e20323731303734.roa
File:                     323830343a373564633a3a2f33322d313238203d3e20323731303734.roa (raw, json)
Hash identifier:          nbBjO/P40J8l8RS0mZcmxu4Q1kqD8hSt8YIT+007qW0=
Subject key identifier:   4D:69:8F:72:C1:CF:D5:AA:32:1C:9A:B9:BE:76:DD:B5:1E:FC:8E:5F
Certificate issuer:       /CN=E6D6AABA3F121607795EF4EEE2ACE5F12F58900E
Certificate serial:       38C56FC2DE834724866084B746B1F283C853962B
Authority key identifier: E6:D6:AA:BA:3F:12:16:07:79:5E:F4:EE:E2:AC:E5:F1:2F:58:90:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6D6AABA3F121607795EF4EEE2ACE5F12F58900E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/323830343a373564633a3a2f33322d313238203d3e20323731303734.roa
Signing time:             Mon 19 May 2025 19:03:32 +0000
ROA not before:           Mon 19 May 2025 18:58:32 +0000
ROA not after:            Mon 18 May 2026 19:03:32 +0000
asID:                     271074
IP address blocks:        2804:75dc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/E6D6AABA3F121607795EF4EEE2ACE5F12F58900E.crl
                          rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/E6D6AABA3F121607795EF4EEE2ACE5F12F58900E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6D6AABA3F121607795EF4EEE2ACE5F12F58900E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 00:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c5:6f:c2:de:83:47:24:86:60:84:b7:46:b1:f2:83:c8:53:96:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6D6AABA3F121607795EF4EEE2ACE5F12F58900E
        Validity
            Not Before: May 19 18:58:32 2025 GMT
            Not After : May 18 19:03:32 2026 GMT
        Subject: CN=4D698F72C1CFD5AA321C9AB9BE76DDB51EFC8E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:89:e0:4b:02:8d:a1:e0:2b:83:42:40:d8:7f:
                    a7:67:d0:31:b3:57:37:05:d5:8f:d2:60:d8:75:06:
                    ac:a4:a4:37:42:7d:be:e8:af:3f:d9:fd:62:c2:2c:
                    3c:03:7e:5b:24:c9:b4:1d:d7:a7:10:a7:7a:11:96:
                    f2:9a:d3:af:6e:ed:39:ac:28:d5:30:9a:8d:89:70:
                    f6:e5:2a:18:57:f8:76:ce:cd:b3:7e:1a:f0:a4:ce:
                    92:0b:26:6b:91:ea:f5:d0:b4:97:7b:ae:f1:39:f2:
                    b4:df:fa:74:7a:60:6e:5b:41:99:83:80:91:78:e4:
                    8c:28:60:88:87:51:c7:5e:77:86:4a:36:ac:81:ca:
                    19:45:38:55:26:52:39:7c:24:be:31:4f:68:ca:bf:
                    72:70:cb:9f:ec:44:9a:7b:eb:1d:d0:4c:36:84:5b:
                    1a:ce:ef:d1:7d:ba:78:52:69:d1:2f:c7:34:7e:a2:
                    e8:1c:3e:97:f1:59:a8:6a:a1:91:32:41:43:e4:eb:
                    0f:5b:b5:1b:0e:27:88:54:7b:5b:be:eb:6a:81:3d:
                    84:e4:b7:a5:0f:0f:a0:f9:f8:5f:4d:7d:96:b4:db:
                    9f:33:3c:54:05:ed:70:3c:81:ad:d6:6d:7e:c5:e6:
                    09:d7:1a:05:51:88:b3:b6:ac:1b:51:1f:2e:ab:93:
                    39:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:69:8F:72:C1:CF:D5:AA:32:1C:9A:B9:BE:76:DD:B5:1E:FC:8E:5F
            X509v3 Authority Key Identifier:
                keyid:E6:D6:AA:BA:3F:12:16:07:79:5E:F4:EE:E2:AC:E5:F1:2F:58:90:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/E6D6AABA3F121607795EF4EEE2ACE5F12F58900E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6D6AABA3F121607795EF4EEE2ACE5F12F58900E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/323830343a373564633a3a2f33322d313238203d3e20323731303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:75dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:fd:af:e8:ae:86:59:c4:a0:77:d1:0f:d8:82:c3:38:f4:16:
         a0:3b:d5:85:4b:66:26:d8:48:b9:dc:94:5b:3c:a3:70:fa:1d:
         fb:a6:13:f2:2c:7b:9a:2c:c6:8f:d5:d7:9b:e1:fc:c8:bc:e5:
         fb:f4:1e:f2:d3:5f:c2:cd:ff:91:6a:19:d3:2a:02:33:fa:b9:
         59:8c:1a:f0:b0:d1:2f:f4:e6:59:da:84:2c:9f:d0:e7:b3:b1:
         3b:09:a0:22:07:d2:92:ba:1b:6b:68:81:5f:24:37:57:d1:65:
         14:b6:71:e9:2f:a9:f4:4e:cf:65:3b:8e:94:08:34:dc:3f:3a:
         d6:db:32:c5:e4:67:7c:23:cd:94:7a:26:72:5f:f9:3f:2a:0f:
         19:44:6f:74:ec:3b:1c:34:25:7c:39:fc:3b:e0:45:e4:89:3d:
         a4:5d:0a:8c:76:42:ac:ef:77:8c:f2:be:71:79:50:56:7d:15:
         1b:de:bd:06:7f:80:a8:ee:1c:c4:c3:45:7a:92:c3:64:33:ca:
         82:ff:dc:64:0a:88:2d:20:13:2d:5c:49:17:77:76:6e:40:aa:
         75:09:25:2b:53:b4:e5:cf:60:c1:d9:06:8a:2a:c7:c6:4e:5f:
         2c:4e:ab:a5:5e:4e:55:46:79:bc:22:6f:5f:50:e8:03:95:29:
         cc:f5:69:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:32:52 2025 by rpki-client