Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/323830343a376661383a3a2f33342d3334203d3e20323731373031.roa
File:                     323830343a376661383a3a2f33342d3334203d3e20323731373031.roa (raw, json)
Hash identifier:          m1NECNUHoM6bSayE4GwW5mZCtN+IMF1bOGemdsH7xBQ=
Subject key identifier:   CF:D3:BB:7D:E0:1F:90:A9:6D:F8:64:22:6B:A8:A9:FD:31:54:48:BE
Certificate issuer:       /CN=05563772FA5F7F02E46B10D42952096452B02F7E
Certificate serial:       7EAEBCEAEC5F51AB93124996744455DA1E0FC21E
Authority key identifier: 05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/323830343a376661383a3a2f33342d3334203d3e20323731373031.roa
Signing time:             Tue 13 May 2025 14:00:22 +0000
ROA not before:           Tue 13 May 2025 13:55:22 +0000
ROA not after:            Tue 12 May 2026 14:00:22 +0000
asID:                     271701
IP address blocks:        2804:7fa8::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl
                          rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 17:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ae:bc:ea:ec:5f:51:ab:93:12:49:96:74:44:55:da:1e:0f:c2:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05563772FA5F7F02E46B10D42952096452B02F7E
        Validity
            Not Before: May 13 13:55:22 2025 GMT
            Not After : May 12 14:00:22 2026 GMT
        Subject: CN=CFD3BB7DE01F90A96DF864226BA8A9FD315448BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7e:9a:d1:a6:a2:b1:55:03:be:e6:de:93:83:
                    95:08:3b:e5:fb:cb:d0:b1:da:d0:c6:24:ab:37:29:
                    97:3d:b4:b0:57:3b:d9:ff:65:3c:55:7d:7a:dd:4f:
                    5e:e7:47:c2:77:0e:c3:16:6d:8c:a5:33:b9:2b:9f:
                    aa:56:69:6d:98:2c:70:7c:15:ed:ec:be:26:7b:c2:
                    32:41:91:d0:61:3c:e0:06:19:cb:c9:27:c2:ec:66:
                    dd:b3:26:04:8a:c8:2d:c5:7e:a0:1d:10:ee:0a:9f:
                    e1:e4:e0:3d:1e:12:cd:23:f6:1c:9d:a6:6a:e7:29:
                    20:f1:21:80:bc:b4:cd:eb:08:d6:4c:fe:a9:bf:17:
                    e7:a0:3a:59:cd:f4:8b:67:f1:a3:69:06:95:26:77:
                    f8:0f:3e:68:d7:e4:f2:73:ca:05:e3:ff:3f:95:b0:
                    c3:00:52:64:c7:65:76:fc:6b:6f:7c:2b:ec:f3:b1:
                    60:b0:4f:1d:8a:ca:ff:d4:71:68:ce:9c:42:25:2b:
                    ed:7f:8f:7c:14:c4:4a:1a:dc:84:9c:be:e0:03:37:
                    03:5f:c2:39:0e:f6:33:81:88:5e:2c:ae:88:e5:e6:
                    63:2b:76:67:6e:09:41:31:7c:69:d2:db:ce:4a:2b:
                    2e:4c:53:9a:00:b2:57:c0:e6:d9:71:ba:ec:4e:5a:
                    16:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D3:BB:7D:E0:1F:90:A9:6D:F8:64:22:6B:A8:A9:FD:31:54:48:BE
            X509v3 Authority Key Identifier:
                keyid:05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/323830343a376661383a3a2f33342d3334203d3e20323731373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fa8::/34

    Signature Algorithm: sha256WithRSAEncryption
         87:80:15:75:1d:f1:fa:ec:22:93:c2:69:c2:21:92:e0:83:aa:
         7b:0e:d6:7a:63:dd:7e:d4:ac:d9:51:45:0c:35:bc:fa:75:54:
         dc:d7:5e:4c:22:9d:84:11:84:41:bc:ea:f5:77:5b:99:fb:54:
         81:10:37:ff:27:00:cb:fb:3c:e3:99:65:dc:cb:f8:57:42:7b:
         a6:79:f6:fc:b4:a8:d3:d6:7d:14:16:22:c2:c5:89:0f:2f:17:
         1f:52:e2:49:db:8d:50:ce:55:23:70:58:aa:95:9e:e9:e6:8f:
         c8:f8:d5:74:9a:b9:96:cf:77:20:69:90:93:98:6b:7c:78:1f:
         a9:59:4f:b6:31:73:ec:74:e3:5e:f5:52:87:35:3b:ea:1c:ab:
         af:1d:8b:d9:00:f5:44:31:6c:1f:87:f5:6f:c5:bc:5f:b2:cb:
         78:db:70:58:67:f1:1b:7b:7a:7c:a8:e6:f9:d4:4b:fd:be:6e:
         10:4b:c6:c7:26:77:ac:24:91:5e:2b:82:0b:b8:19:d7:7b:76:
         e2:b4:ac:de:36:e4:15:8f:50:b3:6e:79:29:10:e5:a8:51:f2:
         b2:09:3e:05:65:01:23:34:71:d0:46:25:16:c4:42:ae:56:f1:
         80:5b:17:3f:57:24:f1:df:0d:5b:4f:79:81:76:d8:cc:c2:db:
         c3:f8:9d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:08:32 2025 by rpki-client