Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a3a2f33322d3332203d3e20323633353138.roa
File:                     323830343a313332343a3a2f33322d3332203d3e20323633353138.roa (raw, json)
Hash identifier:          WdGxcnjCOURmsaU1VoAN6vW/QJgJlHiBU5Uzy+8JOnI=
Subject key identifier:   7F:09:98:15:D6:03:E6:4E:24:E9:A1:0A:5C:13:97:36:5F:B7:73:28
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       2762FFA000C5158E7AC3887E3D078993B0CFB5F3
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a3a2f33322d3332203d3e20323633353138.roa
Signing time:             Thu 29 May 2025 14:29:01 +0000
ROA not before:           Thu 29 May 2025 14:24:01 +0000
ROA not after:            Thu 28 May 2026 14:29:01 +0000
asID:                     263518
IP address blocks:        2804:1324::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 01:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:62:ff:a0:00:c5:15:8e:7a:c3:88:7e:3d:07:89:93:b0:cf:b5:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: May 29 14:24:01 2025 GMT
            Not After : May 28 14:29:01 2026 GMT
        Subject: CN=7F099815D603E64E24E9A10A5C1397365FB77328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:50:63:42:93:56:30:4a:12:5a:39:fa:9e:61:
                    a4:d4:13:1e:cc:ed:0a:fa:9b:6d:cb:fa:b1:b5:28:
                    d2:86:81:0e:4c:62:c1:98:98:1f:b0:04:ea:61:1f:
                    7c:8a:c5:13:e7:5b:d1:43:b8:78:b4:f1:6e:75:00:
                    56:73:46:8f:67:9e:2f:29:79:82:51:ee:f8:fc:2b:
                    a3:56:64:5b:e0:c1:11:9e:0a:b7:54:c9:dc:d8:fd:
                    d3:6c:4a:d2:22:4d:a7:3c:da:8f:11:d0:99:31:32:
                    cb:c3:13:dd:1f:73:a8:eb:80:f3:9b:9c:fa:64:e0:
                    85:22:bf:ad:27:00:71:66:11:1c:cc:06:e1:05:e9:
                    ad:3e:e0:17:61:8e:1d:34:a0:de:d7:2f:30:71:72:
                    9b:bb:2d:01:b8:97:0e:71:24:33:b8:43:30:06:a3:
                    cf:3b:e8:ac:a8:d3:56:ac:75:86:57:ca:a3:c5:9e:
                    fa:ef:91:d1:32:d4:51:b2:f5:c5:f6:48:dc:a4:e2:
                    54:ef:91:8a:d9:95:a3:09:3f:1f:6f:0f:cb:17:dd:
                    c3:18:68:c5:bc:56:7b:fc:4e:f9:df:26:92:dd:60:
                    ae:b9:9b:f9:43:74:d7:fc:36:54:b4:6c:6e:2c:2a:
                    f1:b5:f2:fd:aa:a1:c4:fc:60:f7:e7:20:97:11:b2:
                    ba:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:09:98:15:D6:03:E6:4E:24:E9:A1:0A:5C:13:97:36:5F:B7:73:28
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a3a2f33322d3332203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1324::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:2c:a2:d7:98:a2:f2:08:fd:5a:81:65:38:1d:35:5e:47:33:
         54:16:4e:c4:52:47:ea:fe:12:0f:59:bc:d2:0c:b2:79:5b:3a:
         64:02:f9:0f:08:79:6a:ba:6f:5c:dc:d6:c4:20:51:cd:4a:63:
         26:4c:bc:d3:92:b4:dd:53:e7:08:d5:fa:5d:89:e6:8c:d5:47:
         8b:20:60:43:01:17:d3:39:5f:b9:24:8c:3b:2a:ea:d0:62:8f:
         46:3f:db:f1:33:84:e1:68:03:d7:84:e0:69:bd:56:76:0e:d5:
         73:ed:12:a8:42:be:0f:fc:97:06:f6:d8:c3:36:94:fe:c7:2d:
         a1:8d:0a:28:bb:0e:9c:7a:ff:30:34:8a:56:51:45:07:ab:37:
         1c:9f:c1:a8:83:4d:ac:b4:b8:7a:af:4f:10:03:8b:03:f6:99:
         aa:ad:a8:45:47:9f:f4:49:b0:80:f1:77:97:15:4a:34:a4:f2:
         d6:28:88:08:02:59:8b:7c:c2:25:bb:b5:ed:91:81:77:1a:99:
         64:33:50:b1:b7:24:6a:ec:2e:26:02:63:5f:4f:ca:b8:06:41:
         30:5e:18:ee:c3:29:c9:7e:b2:44:70:7d:53:0a:8b:b1:84:59:
         ce:92:c0:41:31:99:b4:3b:2f:4b:a6:67:49:8a:5d:86:c6:ba:
         ae:b3:1e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:56:06 2025 by rpki-client