Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a633030303a3a2f33342d3334203d3e20323633353138.roa
File:                     323830343a313332343a633030303a3a2f33342d3334203d3e20323633353138.roa (raw, json)
Hash identifier:          t8tHDuDnx9qpMmzxUPdMrStMQ8w7sQKwiENOsL2NTSM=
Subject key identifier:   33:A0:2E:2B:C7:9E:50:0C:29:9D:4E:84:CF:75:8D:86:F6:11:6B:21
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       19574C89FF14D23552F662730A5CC29F0F071461
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a633030303a3a2f33342d3334203d3e20323633353138.roa
Signing time:             Thu 29 May 2025 14:29:03 +0000
ROA not before:           Thu 29 May 2025 14:24:03 +0000
ROA not after:            Thu 28 May 2026 14:29:03 +0000
asID:                     263518
IP address blocks:        2804:1324:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 01:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:57:4c:89:ff:14:d2:35:52:f6:62:73:0a:5c:c2:9f:0f:07:14:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: May 29 14:24:03 2025 GMT
            Not After : May 28 14:29:03 2026 GMT
        Subject: CN=33A02E2BC79E500C299D4E84CF758D86F6116B21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1a:24:88:f7:9c:ec:88:be:ed:60:21:aa:59:
                    e3:e1:58:a7:75:b2:a0:f9:21:a7:28:4e:c4:f7:22:
                    57:74:1a:7f:00:e9:05:5a:d4:f9:4d:2c:41:5a:69:
                    f7:04:a9:44:f1:d8:6c:ea:9b:1f:90:57:39:34:d5:
                    3e:6e:53:3e:f2:91:b8:ea:93:ca:dc:4a:5f:05:d2:
                    e4:2c:bd:97:1e:d2:f7:af:97:87:82:0b:d9:1d:25:
                    f4:84:52:bb:f1:4e:5b:dd:36:d0:bc:88:57:3b:8b:
                    76:8e:00:86:57:cf:1d:68:06:88:25:94:6c:2d:d0:
                    6b:31:44:3b:ac:d5:5a:14:22:4e:dd:b9:ca:97:25:
                    b8:0c:5f:9a:0d:cd:48:61:56:df:bc:a8:eb:0f:5f:
                    dd:ff:ab:c9:6a:81:ce:b3:cd:29:80:08:d6:17:16:
                    fe:a6:20:ca:1a:4e:21:69:c3:ee:0e:8a:46:aa:af:
                    9f:e6:ef:f0:93:2f:f1:5d:d9:35:fb:15:45:4f:06:
                    82:57:d2:ff:2c:5b:d0:f8:06:ca:46:ae:03:b6:04:
                    42:74:15:ba:5c:0b:d2:e7:a6:16:3e:a9:f6:89:c8:
                    fd:78:52:89:b6:79:0f:c3:81:b7:4e:94:4f:6b:c5:
                    1c:c8:49:03:9e:8d:35:78:95:78:5f:55:9e:98:a6:
                    1f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A0:2E:2B:C7:9E:50:0C:29:9D:4E:84:CF:75:8D:86:F6:11:6B:21
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a633030303a3a2f33342d3334203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1324:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9d:79:fe:79:5b:0d:63:07:17:e4:22:28:f4:b8:65:b1:c9:75:
         fd:71:67:3c:c6:1f:d7:fa:b9:11:b5:36:7d:8e:39:a4:47:d5:
         0d:e2:8d:2c:81:b2:f1:ba:59:b8:7b:75:36:07:fc:60:18:ab:
         09:b1:1b:79:16:6e:e8:d1:e5:e5:77:f0:61:16:ac:29:52:ce:
         ee:fb:e6:bc:f6:a2:e9:04:01:2d:c0:5c:df:4a:73:a3:dd:89:
         09:09:bc:29:4a:36:15:59:95:33:f5:38:52:18:a0:a1:97:aa:
         92:69:c9:af:2f:4c:34:29:4f:4e:85:d4:07:a4:46:c8:1a:2d:
         7b:b3:9e:38:2f:ed:bb:2f:bb:6d:ff:71:09:63:92:a6:5a:c2:
         bc:16:9e:d1:e1:57:b0:fb:89:2f:cc:3c:ad:30:7b:6f:34:b1:
         13:06:84:0b:f7:dc:4d:51:41:6f:76:bc:06:29:dc:7e:fe:f7:
         da:32:de:f2:8f:cb:f4:66:9e:0d:e1:de:cd:ce:65:8f:d5:b0:
         92:78:d5:83:e3:58:83:46:1f:b6:54:6c:8b:9c:af:24:f6:b6:
         55:c0:14:13:7b:26:f7:a4:25:12:75:82:ee:c4:02:85:0f:c6:
         ef:4f:a9:c5:06:1b:64:9b:92:35:26:69:d9:1b:05:75:30:ed:
         fc:b9:9d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:00:31 2025 by rpki-client