Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a363030303a3a2f33362d3336203d3e20323638373730.roa
File:                     323830343a356136343a363030303a3a2f33362d3336203d3e20323638373730.roa (raw, json)
Hash identifier:          PTXEHscD+GXazvFIZMDMBIlPbkEVw4xTp89677tM2Ss=
Subject key identifier:   4C:B5:BE:D8:AF:51:3A:99:C5:95:78:D6:01:F8:5C:0C:3C:39:F7:2E
Certificate issuer:       /CN=7FA00725B865657CC24A17AD7A99947906B51243
Certificate serial:       04380B7210C9E6A17E546770668013ED6E91B1F8
Authority key identifier: 7F:A0:07:25:B8:65:65:7C:C2:4A:17:AD:7A:99:94:79:06:B5:12:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a363030303a3a2f33362d3336203d3e20323638373730.roa
Signing time:             Thu 20 Mar 2025 19:36:49 +0000
ROA not before:           Thu 20 Mar 2025 19:31:49 +0000
ROA not after:            Thu 19 Mar 2026 19:36:49 +0000
asID:                     268770
IP address blocks:        2804:5a64:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.crl
                          rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:13:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:38:0b:72:10:c9:e6:a1:7e:54:67:70:66:80:13:ed:6e:91:b1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FA00725B865657CC24A17AD7A99947906B51243
        Validity
            Not Before: Mar 20 19:31:49 2025 GMT
            Not After : Mar 19 19:36:49 2026 GMT
        Subject: CN=4CB5BED8AF513A99C59578D601F85C0C3C39F72E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:32:78:46:7e:9b:6d:73:c4:c7:80:88:e8:1e:
                    af:0f:b0:2e:a1:cc:97:fe:e3:93:87:a3:e7:03:3e:
                    3d:67:d1:44:f7:e5:f6:1c:1d:d9:7c:df:97:15:1b:
                    90:db:0d:c8:3c:c2:b3:32:d9:c1:0d:b5:6c:e6:9f:
                    9a:a7:80:81:31:68:52:57:dc:eb:8c:f8:37:6f:c5:
                    a8:28:52:87:63:96:20:63:12:ea:a5:12:71:79:f2:
                    e7:03:66:60:85:ff:d8:53:29:e3:e0:2e:43:35:ce:
                    8e:cb:21:ea:25:75:e9:3c:29:34:6f:3a:20:fd:be:
                    9f:f9:90:21:8b:f3:89:5c:20:a3:a6:f2:06:8d:fd:
                    cb:9d:a1:fc:0b:b0:c7:bd:ec:ac:38:e6:7b:6d:7d:
                    d6:7f:3a:c0:1b:e3:11:cc:16:23:3f:74:4e:1f:57:
                    66:f8:b7:eb:f6:31:94:8b:92:c5:a2:b4:a8:36:6b:
                    9e:8c:79:86:bb:7a:59:74:a8:a2:fc:5c:bf:56:0a:
                    83:1c:40:60:d6:a8:3e:e9:78:1b:b1:cb:b8:dc:7c:
                    4b:0d:a3:26:eb:5c:e5:0c:f2:35:96:f1:07:ad:93:
                    55:f4:db:eb:66:0d:5a:ad:6d:11:0e:62:ce:b3:b3:
                    ac:81:6c:9b:8a:2c:d3:ca:5b:43:a5:54:30:06:17:
                    0f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B5:BE:D8:AF:51:3A:99:C5:95:78:D6:01:F8:5C:0C:3C:39:F7:2E
            X509v3 Authority Key Identifier:
                keyid:7F:A0:07:25:B8:65:65:7C:C2:4A:17:AD:7A:99:94:79:06:B5:12:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a363030303a3a2f33362d3336203d3e20323638373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a64:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7f:08:f0:5c:02:b4:dd:2a:df:22:cf:50:f4:3b:5c:69:54:39:
         13:88:4f:24:2d:fe:19:8d:e9:3e:41:54:f9:9e:86:6f:da:ce:
         ac:79:4f:7b:d9:09:53:88:54:e7:28:87:0e:22:59:a5:1b:a6:
         17:3c:fd:8e:b1:b4:be:76:b1:2a:38:e9:76:91:13:26:b3:a7:
         82:cc:c5:5e:dc:0c:ef:60:37:4a:9b:de:90:9e:31:b3:5d:75:
         02:a6:8a:38:e2:b2:a5:60:26:24:51:1b:02:8c:37:f1:cb:4f:
         4b:ed:d4:09:a6:86:e3:c1:c6:f0:cf:df:8a:ab:f9:19:70:00:
         5b:39:95:eb:d7:99:9d:67:54:84:aa:64:cb:eb:ab:1b:2f:cd:
         c7:cc:79:6d:62:2f:c7:3a:f1:96:95:40:aa:14:93:4c:3e:84:
         f1:68:a8:92:d4:e4:9f:a1:07:d6:4e:43:a4:0f:58:5e:60:e7:
         04:bb:fe:32:9f:86:99:d9:45:fa:e3:bf:ad:63:42:b0:97:9d:
         08:f4:b1:02:fd:cb:bb:c7:75:ff:d5:7f:c5:71:dd:ca:a5:f8:
         c0:dd:a2:48:7b:54:47:63:a8:c8:5b:ca:f5:50:dd:bf:38:f7:
         97:6d:3b:14:fe:14:fc:bb:1d:88:70:28:e4:01:a8:2f:66:7b:
         90:e4:9f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:00:20 2025 by rpki-client