Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a3a2f33332d3333203d3e20323730373136.roa
File:                     323830343a373034343a3a2f33332d3333203d3e20323730373136.roa (raw, json)
Hash identifier:          ci8OzvkMGdjbrw9i0vywkvVslBXXAdlVoMivlBaZzBI=
Subject key identifier:   35:3D:C7:E0:13:E4:9F:82:D0:DA:EB:D7:45:75:83:9A:78:1B:CB:4F
Certificate issuer:       /CN=70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39
Certificate serial:       79B081B31022B2823A5E44C6EA5DC3F4CD6E0788
Authority key identifier: 70:F7:5C:6F:26:DB:C3:FF:3E:C6:7E:B2:49:E3:8F:BD:8F:00:FE:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a3a2f33332d3333203d3e20323730373136.roa
Signing time:             Wed 19 Feb 2025 20:24:54 +0000
ROA not before:           Wed 19 Feb 2025 20:19:54 +0000
ROA not after:            Wed 18 Feb 2026 20:24:54 +0000
asID:                     270716
IP address blocks:        2804:7044::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.crl
                          rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 03:08:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b0:81:b3:10:22:b2:82:3a:5e:44:c6:ea:5d:c3:f4:cd:6e:07:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39
        Validity
            Not Before: Feb 19 20:19:54 2025 GMT
            Not After : Feb 18 20:24:54 2026 GMT
        Subject: CN=353DC7E013E49F82D0DAEBD74575839A781BCB4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d6:4e:31:bd:e5:52:60:a7:59:bd:c5:31:ca:
                    f8:34:c6:37:45:83:b1:04:cc:c6:0f:76:22:30:ea:
                    9e:6b:b4:51:05:b7:19:fb:db:3b:5b:76:b7:d6:5f:
                    24:2d:06:d2:38:d1:45:4e:46:f5:56:8e:87:b8:a1:
                    a5:2b:9a:2f:2e:90:39:a4:e8:4e:fc:e2:00:64:a3:
                    6b:37:55:aa:c5:4e:3b:a3:b9:09:0f:de:72:6a:a9:
                    94:15:35:a4:f7:42:2d:d5:c5:92:50:1c:d5:94:c9:
                    0d:01:be:58:af:08:da:c8:6c:c4:c5:30:6a:c1:bb:
                    f2:9a:dc:2b:e5:c3:e8:04:c4:b0:41:f4:80:f7:12:
                    b9:6a:6c:a7:19:33:bc:92:16:8b:5e:0d:ad:5c:af:
                    49:4f:44:9e:3d:1b:b1:a2:f8:0a:38:81:6e:72:9c:
                    aa:2e:bd:84:f5:27:04:ee:5d:ab:b8:ad:2a:38:46:
                    5f:67:67:64:3d:58:75:3b:d1:4a:12:22:d8:8d:b8:
                    c2:31:b7:06:a9:81:d0:2c:cd:ec:b4:57:0a:af:c2:
                    be:74:06:b4:c0:c2:3a:a6:12:5e:ee:ed:00:db:69:
                    1d:05:9d:70:e0:94:f4:88:99:86:af:26:75:12:08:
                    5c:b3:09:23:6c:61:06:7a:22:d3:2c:4f:02:fd:a7:
                    e6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3D:C7:E0:13:E4:9F:82:D0:DA:EB:D7:45:75:83:9A:78:1B:CB:4F
            X509v3 Authority Key Identifier:
                keyid:70:F7:5C:6F:26:DB:C3:FF:3E:C6:7E:B2:49:E3:8F:BD:8F:00:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a3a2f33332d3333203d3e20323730373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7044::/33

    Signature Algorithm: sha256WithRSAEncryption
         bc:3f:69:5c:5e:07:a9:d9:5f:dd:7b:ca:32:33:0a:02:27:7a:
         e4:3c:73:3b:a8:8a:83:1c:e6:8a:58:b8:b1:ed:84:6d:dd:d9:
         27:33:38:a7:13:f0:cf:8b:74:97:f0:74:78:94:05:91:0e:a0:
         e8:30:70:78:96:91:88:78:b1:53:88:2b:c5:43:6f:ee:aa:86:
         dd:a7:42:32:8d:6f:51:36:2c:ff:96:e9:a2:dd:01:86:ee:29:
         b0:01:d8:c0:2f:de:b2:6a:e2:f5:76:e6:ce:d7:55:79:04:77:
         d0:48:c4:3f:8f:c2:4a:d1:c6:d3:8a:cc:9d:58:ad:b8:ab:6e:
         e1:46:83:d5:96:dd:40:dc:18:9a:52:d9:0d:d9:4f:8e:15:e8:
         51:a3:81:b4:07:02:6d:d8:b5:09:5d:ca:9d:2e:15:c3:e4:54:
         35:57:94:6d:35:fa:01:7c:2e:bc:8b:b8:d4:af:d5:5a:7d:d6:
         b6:dd:4a:94:e9:b2:a7:19:aa:84:82:de:ba:15:44:98:82:b9:
         0d:9d:ce:b7:5a:e0:f0:77:23:cd:04:0f:ef:cc:5d:66:e1:19:
         48:9a:f0:27:0e:eb:4e:b5:a1:8b:5d:df:c4:ea:0d:0c:e0:34:
         71:bd:24:f1:08:35:09:5d:7e:c8:61:3d:47:74:87:3e:09:55:
         f0:37:02:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:15 2025 by rpki-client