Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a3a2f33342d3334203d3e20323633353138.roa
File:                     323830343a313332343a3a2f33342d3334203d3e20323633353138.roa (raw, json)
Hash identifier:          4oq4XVZmD8wTFyKhgQWg84WgJ7Y+F25590/7XghaxOo=
Subject key identifier:   A2:A9:28:91:07:19:E0:41:F1:8A:54:8B:25:25:EB:F5:CA:A5:32:4C
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       10B80FF1CF9A99997A7DEEFC7A9B9733C8F0E1BE
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a3a2f33342d3334203d3e20323633353138.roa
Signing time:             Thu 29 May 2025 14:29:02 +0000
ROA not before:           Thu 29 May 2025 14:24:02 +0000
ROA not after:            Thu 28 May 2026 14:29:02 +0000
asID:                     263518
IP address blocks:        2804:1324::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 01:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b8:0f:f1:cf:9a:99:99:7a:7d:ee:fc:7a:9b:97:33:c8:f0:e1:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: May 29 14:24:02 2025 GMT
            Not After : May 28 14:29:02 2026 GMT
        Subject: CN=A2A928910719E041F18A548B2525EBF5CAA5324C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:85:6a:84:41:57:3f:6c:d8:d1:fb:0b:4c:3b:
                    ed:59:19:12:8d:d9:49:e9:3c:1a:90:22:d9:05:b1:
                    62:07:28:c6:d0:80:d9:18:cf:81:18:2c:6b:59:67:
                    2e:e7:b3:20:3d:b8:68:1b:bc:fa:3b:49:ee:6a:36:
                    d9:2b:2d:e8:35:35:b3:91:d9:24:43:e0:3d:34:78:
                    b6:2e:85:8f:e1:2d:b7:e7:d9:96:6b:b8:f9:85:d5:
                    5a:4f:66:94:31:e9:e6:d2:2f:b9:14:bc:92:d5:76:
                    1d:00:ab:5c:47:ee:c5:45:2c:db:31:8e:cb:3a:c8:
                    aa:c0:fc:7c:3e:d6:1d:f9:de:dd:e8:4c:35:76:1b:
                    11:4e:17:84:0f:5e:f4:1b:6a:91:c7:1c:d2:f3:98:
                    5a:58:9d:20:3c:60:70:f3:ca:a9:09:84:51:c0:d8:
                    c6:0a:02:35:04:8d:38:36:70:aa:38:70:b7:c7:0c:
                    ee:99:31:27:8d:19:26:22:0d:a2:cb:37:81:c4:f7:
                    54:0d:24:48:d4:ee:ba:49:1d:a1:d8:1a:32:21:ce:
                    b8:f5:7f:f8:86:1d:8b:2a:f7:35:42:9d:dc:15:f0:
                    69:52:b6:73:34:ed:7d:92:5b:00:64:55:25:68:6a:
                    37:32:24:df:7a:34:80:3d:dd:f0:6b:7e:8d:0c:51:
                    2c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A9:28:91:07:19:E0:41:F1:8A:54:8B:25:25:EB:F5:CA:A5:32:4C
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a3a2f33342d3334203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1324::/34

    Signature Algorithm: sha256WithRSAEncryption
         40:ca:94:5e:3e:e8:7b:b4:25:46:fb:a7:f6:aa:b9:4a:28:d2:
         1b:a8:f6:40:4a:ba:0e:c1:15:62:e7:bb:6a:91:1c:58:a9:fa:
         1f:79:8a:ca:93:18:81:64:85:53:89:88:1b:e3:e5:c6:36:d8:
         9c:a6:76:63:42:6f:b4:ff:0e:e3:12:ce:a5:78:b2:b0:b4:be:
         06:2a:3f:de:92:2e:c0:63:9f:ce:00:92:ab:df:b4:16:bf:6b:
         75:31:ee:02:f7:25:85:73:76:2f:dd:c0:de:64:34:60:ef:78:
         8b:e0:1b:99:18:94:7e:3e:bd:22:55:eb:a0:5f:eb:43:09:50:
         a3:cc:37:52:a2:13:a7:fb:4a:f8:fe:b4:1a:ff:be:1f:a7:95:
         49:ef:64:77:c1:b4:20:6a:c9:0c:85:77:23:26:03:63:4f:7f:
         0c:bd:73:2a:c1:43:75:36:8d:20:79:48:7e:1a:2b:cf:9f:9f:
         94:af:25:68:32:56:e6:ff:25:bc:58:8a:aa:2f:44:c4:eb:84:
         03:73:34:2c:6b:a4:de:f0:e8:00:fd:ee:d8:85:f1:49:99:8c:
         a9:41:85:a0:41:68:2b:34:9d:b4:1b:ed:e9:9c:8c:ea:d3:f4:
         ab:63:de:39:ef:e0:db:f3:9b:37:ad:41:80:79:c1:7f:23:11:
         8b:80:e7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:45:32 2025 by rpki-client