Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653766643a3a2f34382d3438203d3e20323633363132.roa
File:                     323830343a6666633a653766643a3a2f34382d3438203d3e20323633363132.roa (raw, json)
Hash identifier:          Qz/JnfShv1xCJmepGrIKwED1ZkpIkAWreKBbpEpblGQ=
Subject key identifier:   47:9A:DE:26:07:29:4A:B6:08:49:36:64:F7:D0:1C:86:39:50:E5:9A
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       74513D36B197762952DE1BA79FC2327D26319001
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653766643a3a2f34382d3438203d3e20323633363132.roa
Signing time:             Sun 18 May 2025 08:42:39 +0000
ROA not before:           Sun 18 May 2025 08:37:39 +0000
ROA not after:            Sun 17 May 2026 08:42:39 +0000
asID:                     263612
IP address blocks:        2804:ffc:e7fd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 14:42:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:51:3d:36:b1:97:76:29:52:de:1b:a7:9f:c2:32:7d:26:31:90:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May 18 08:37:39 2025 GMT
            Not After : May 17 08:42:39 2026 GMT
        Subject: CN=479ADE2607294AB608493664F7D01C863950E59A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e3:45:0e:31:b2:43:d3:cb:ae:dc:cc:c8:19:
                    e8:e1:e7:63:68:60:de:91:8c:55:51:39:e8:7e:73:
                    b7:78:d7:7b:d4:8a:19:1e:a2:06:af:64:67:12:60:
                    2b:71:93:aa:49:e2:f1:e4:09:c0:56:5c:11:7d:03:
                    b6:86:25:6a:cd:34:9b:2c:31:cf:2b:ae:fb:cd:31:
                    cc:23:38:e6:a8:3e:21:ee:a4:12:79:06:62:c3:cd:
                    a4:68:5d:f1:5e:b1:67:1c:2f:1a:dc:1a:1c:ca:be:
                    c5:64:a6:c0:27:e8:d2:35:1a:f4:e9:75:2d:6f:9d:
                    c2:37:b3:78:e2:33:33:00:e5:87:09:06:4b:cc:87:
                    d0:2d:bb:d0:71:46:e1:57:a1:97:27:3b:d3:65:87:
                    b5:73:b7:11:0b:03:f4:b2:17:6e:6d:e4:b8:20:ad:
                    b4:8f:94:41:ae:4f:c4:14:c7:40:80:4e:ca:ef:ac:
                    98:0c:92:de:5c:3e:71:03:6d:ae:82:95:36:be:65:
                    ba:af:fc:b1:1b:4d:cf:2b:23:66:ab:24:5b:40:ad:
                    67:73:77:fe:a9:30:b3:af:dc:44:8a:9d:bf:31:32:
                    a8:dc:d8:e2:ec:1f:9b:8a:28:da:47:43:a0:77:68:
                    26:d0:b6:56:03:4c:57:84:88:96:db:92:3d:1c:5a:
                    a0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9A:DE:26:07:29:4A:B6:08:49:36:64:F7:D0:1C:86:39:50:E5:9A
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653766643a3a2f34382d3438203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ffc:e7fd::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:1c:ba:ec:bf:e6:85:55:2a:87:b3:ed:24:a5:1a:3c:21:2b:
         1d:ec:0b:ad:ec:07:5a:d5:62:f0:da:16:34:e2:fe:74:2d:27:
         6c:ec:1a:01:63:d3:3f:d8:68:cd:2d:da:df:75:bd:63:1c:9c:
         63:84:bf:d9:11:91:e9:05:1f:a7:ad:58:a0:63:8c:6f:cd:82:
         4a:3d:11:ab:8c:1b:52:f1:c7:0c:28:03:47:13:3b:4a:03:92:
         92:2d:af:f0:12:20:b5:c0:00:5e:07:0d:7e:a4:ea:53:27:49:
         94:69:fc:ab:ea:4a:04:a2:6e:ed:5c:42:78:f7:8c:8c:97:20:
         38:aa:54:7a:6d:ae:fc:dc:f3:3c:d2:93:0f:43:b1:1e:3b:2a:
         54:68:02:4e:f2:07:da:98:6b:07:42:00:98:60:30:cc:c0:9d:
         41:9d:7b:f3:1a:e6:84:07:87:08:99:fc:2a:22:db:53:2f:81:
         36:06:51:35:01:45:b0:7a:ec:24:14:6b:66:ad:3d:60:36:49:
         2d:7e:06:c2:4a:28:49:d1:9b:07:2e:a8:6c:0c:06:c4:e9:92:
         73:06:1f:97:4a:aa:cf:3c:ff:2d:3c:fa:f8:dd:71:60:3b:19:
         21:b5:53:84:e6:2c:af:cc:09:fd:4e:c3:c9:d8:97:52:c2:5a:
         1b:b5:62:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:14:35 2025 by rpki-client