Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a3a2f33322d3332203d3e20323638373730.roa
File:                     323830343a356136343a3a2f33322d3332203d3e20323638373730.roa (raw, json)
Hash identifier:          X0nqfdhCjQ4qQJyv0Zt7ak24xC/hDxJ13HgCoHMcPiA=
Subject key identifier:   2E:4F:3E:B3:D7:8F:BB:FA:56:76:54:04:18:D5:80:88:46:3E:CA:0A
Certificate issuer:       /CN=7FA00725B865657CC24A17AD7A99947906B51243
Certificate serial:       4545EDCED336D4477D78FEA098CA4580CD3202EE
Authority key identifier: 7F:A0:07:25:B8:65:65:7C:C2:4A:17:AD:7A:99:94:79:06:B5:12:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a3a2f33322d3332203d3e20323638373730.roa
Signing time:             Thu 20 Mar 2025 19:36:06 +0000
ROA not before:           Thu 20 Mar 2025 19:31:06 +0000
ROA not after:            Thu 19 Mar 2026 19:36:06 +0000
asID:                     268770
IP address blocks:        2804:5a64::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.crl
                          rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:13:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:45:ed:ce:d3:36:d4:47:7d:78:fe:a0:98:ca:45:80:cd:32:02:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FA00725B865657CC24A17AD7A99947906B51243
        Validity
            Not Before: Mar 20 19:31:06 2025 GMT
            Not After : Mar 19 19:36:06 2026 GMT
        Subject: CN=2E4F3EB3D78FBBFA5676540418D58088463ECA0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6e:66:49:c6:9c:34:f8:1d:6f:4f:ab:bf:df:
                    f0:a3:e0:43:21:72:88:5f:10:31:5a:34:98:ce:90:
                    28:8f:1c:ed:59:d5:aa:bd:24:dd:d1:ef:d7:9c:cf:
                    9d:ac:de:33:a2:31:dc:74:9c:c8:a5:d3:27:62:3c:
                    ef:6f:ae:82:1f:99:83:ee:8c:4c:24:fd:69:eb:30:
                    25:7c:d2:65:2b:6d:12:ff:64:df:25:85:6b:7f:3f:
                    05:a9:ba:46:d6:ef:03:88:d9:ce:bd:85:c8:62:3d:
                    15:c2:c9:47:b6:a8:77:45:3c:32:20:55:7d:93:ee:
                    9a:0f:73:28:a5:f7:d4:25:c7:4a:0a:98:5a:1f:df:
                    24:96:2c:df:f7:67:2d:41:84:95:b4:79:82:77:5f:
                    ad:2a:7f:b0:17:57:ed:64:e8:f0:e0:17:ce:b7:83:
                    d1:cd:f9:b3:78:94:f7:b3:70:1b:bf:b7:05:53:77:
                    6a:f8:2c:88:2c:07:5a:09:c6:52:43:22:9f:25:5a:
                    79:92:e9:57:d0:57:b7:b2:0d:1f:d0:cd:89:6e:3f:
                    e2:29:87:14:05:57:8e:8a:b9:c3:4a:f1:6b:d9:9f:
                    2e:37:97:f6:1d:36:dd:bc:96:52:3a:88:bc:63:f8:
                    29:6f:0f:67:a7:93:b8:21:33:3d:c0:a1:59:94:4a:
                    e9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4F:3E:B3:D7:8F:BB:FA:56:76:54:04:18:D5:80:88:46:3E:CA:0A
            X509v3 Authority Key Identifier:
                keyid:7F:A0:07:25:B8:65:65:7C:C2:4A:17:AD:7A:99:94:79:06:B5:12:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a3a2f33322d3332203d3e20323638373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a64::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:a6:27:e5:3a:a0:01:da:e8:39:7c:35:cb:29:10:5d:32:ab:
         7f:9b:5d:96:3a:91:d2:6a:4d:ed:01:bb:d8:1e:59:4c:2f:08:
         e0:62:04:96:9b:aa:b0:43:e6:5d:e7:4e:b0:34:e3:1b:84:31:
         45:fd:1f:c9:86:06:fa:2e:f5:55:30:15:49:2a:3f:b2:43:d4:
         e0:64:c3:e7:85:52:ea:09:eb:88:16:33:8a:71:d1:68:14:03:
         4e:cf:41:52:fc:24:63:53:19:e4:53:c5:a5:1b:bb:62:07:32:
         cb:4f:81:59:4a:e1:3d:a7:b1:f5:b2:e3:d7:13:c8:2e:96:aa:
         c3:52:32:8c:c8:ca:01:fa:d1:cb:89:e5:49:b8:f9:7e:25:ba:
         07:ac:24:42:cf:5a:3a:a3:fe:9b:6a:66:28:ca:58:63:9a:61:
         85:f4:cd:9b:16:79:03:b5:24:19:97:3c:cf:57:a6:8e:36:c8:
         ef:fa:88:a6:c3:c7:f6:66:c7:59:75:c5:99:73:7a:9d:19:88:
         65:9a:fe:3d:c7:30:f6:43:31:c1:8b:b7:73:c3:10:ae:1f:4c:
         14:9d:21:33:9a:c4:ce:fa:34:12:cd:14:3d:8c:94:de:73:5b:
         84:11:c8:71:8f:56:18:e7:17:31:2e:35:37:59:a5:a5:d9:86:
         14:14:16:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:58:08 2025 by rpki-client