Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/323830343a336563633a3a2f33322d3438203d3e20323636363231.roa
File:                     323830343a336563633a3a2f33322d3438203d3e20323636363231.roa (raw, json)
Hash identifier:          tHqlXyqnCCZyA3FtBDeOSMEgIem0rhL5KjTo9sIP/Bc=
Subject key identifier:   F0:E4:49:E3:98:A7:C9:66:12:E5:92:00:F2:36:55:0B:06:2D:55:F5
Certificate issuer:       /CN=7CFFE4F07BF1202AF1654B9754000691AB38F4D2
Certificate serial:       30D3AA874AE6DAEC1A2B98B4885327B5EAC3FBC6
Authority key identifier: 7C:FF:E4:F0:7B:F1:20:2A:F1:65:4B:97:54:00:06:91:AB:38:F4:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/323830343a336563633a3a2f33322d3438203d3e20323636363231.roa
Signing time:             Thu 06 Mar 2025 22:28:03 +0000
ROA not before:           Thu 06 Mar 2025 22:23:03 +0000
ROA not after:            Thu 05 Mar 2026 22:28:03 +0000
asID:                     266621
IP address blocks:        2804:3ecc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.crl
                          rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 06:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d3:aa:87:4a:e6:da:ec:1a:2b:98:b4:88:53:27:b5:ea:c3:fb:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFFE4F07BF1202AF1654B9754000691AB38F4D2
        Validity
            Not Before: Mar  6 22:23:03 2025 GMT
            Not After : Mar  5 22:28:03 2026 GMT
        Subject: CN=F0E449E398A7C96612E59200F236550B062D55F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:ae:0f:5f:ae:77:7d:01:21:93:2e:4b:32:
                    bd:a4:a4:22:10:15:6a:62:35:68:3e:9f:6a:c2:96:
                    f7:79:0a:3b:f9:97:9b:84:cb:c2:85:c0:3c:4f:42:
                    90:78:df:1a:a4:7e:de:63:e7:f5:40:ec:30:90:92:
                    1d:0f:47:6a:5e:db:75:16:37:8c:e8:97:33:03:1b:
                    b1:22:a4:56:98:5c:6d:fa:73:7f:e9:fa:09:69:50:
                    8c:48:e4:5c:a0:29:ec:1d:86:15:74:f7:3a:bf:1a:
                    f9:fa:f5:8e:45:74:2b:ab:1b:ef:4c:72:2b:d7:2b:
                    11:79:ad:b2:5b:7a:21:20:03:62:71:0c:79:1a:bf:
                    53:54:e2:df:ef:5f:e7:43:3c:1b:ee:7c:d9:bd:fe:
                    6d:2f:69:48:9e:54:92:13:38:ef:ff:42:78:ea:c9:
                    8e:2c:83:0f:7c:9f:eb:3b:d0:22:49:41:ef:31:33:
                    d7:cc:80:08:22:6d:d1:db:99:47:c7:8e:f7:6a:b3:
                    68:cd:2e:fa:63:9d:59:c3:f0:12:50:6e:36:9e:7c:
                    12:06:96:c0:24:ab:00:b1:25:1c:11:b2:7c:1c:6c:
                    f6:4b:a8:64:4b:13:ca:9a:16:5a:c4:65:d9:58:85:
                    3c:eb:d3:53:95:44:32:57:30:a1:b8:21:58:80:b3:
                    83:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E4:49:E3:98:A7:C9:66:12:E5:92:00:F2:36:55:0B:06:2D:55:F5
            X509v3 Authority Key Identifier:
                keyid:7C:FF:E4:F0:7B:F1:20:2A:F1:65:4B:97:54:00:06:91:AB:38:F4:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/323830343a336563633a3a2f33322d3438203d3e20323636363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ecc::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:6e:03:a3:d5:4e:75:2f:cb:84:22:a8:d1:cb:df:10:2c:6f:
         66:7d:61:ea:10:02:dd:e1:ac:e1:e7:6b:6c:d3:17:9c:95:e9:
         18:d2:71:73:0c:90:30:16:fb:a8:c0:0a:e8:de:59:52:a2:bf:
         76:0a:0d:9e:e5:51:e0:5f:3f:d4:c5:37:52:2f:64:6b:7d:f9:
         ea:2f:67:95:f8:ed:1e:5a:66:50:92:09:a4:fb:17:70:ab:60:
         36:ce:c7:8d:38:3f:cd:e4:37:a1:5e:f0:0a:aa:03:2b:f4:ef:
         d7:2a:b1:1b:5e:d8:a0:ff:bd:e4:7c:e6:24:fa:14:0a:0f:58:
         6d:ea:ae:07:73:35:63:03:de:90:f8:78:5a:c5:78:89:7b:56:
         6c:28:18:cd:cb:fa:db:31:05:2f:3e:1a:23:f1:a3:c8:68:94:
         03:37:63:98:a5:8b:69:bd:93:9f:12:0e:1a:a1:14:b9:bb:b3:
         26:17:2b:af:25:0b:20:d3:74:43:72:3c:eb:31:29:40:8f:61:
         03:c4:33:b9:8a:72:9e:10:a8:61:ac:7d:25:bf:b3:4f:2e:0c:
         e3:30:22:c5:33:43:17:49:5c:d4:dd:40:6e:e5:04:7a:57:c7:
         09:49:63:07:b5:11:b0:89:35:c8:17:7e:03:41:00:76:b1:d5:
         47:8c:ca:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:41:57 2025 by rpki-client