Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a353130303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a353130303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          +1qlqbO+9bkquEn3ngfJGAn65M7jPJAdIQqBGGq6m2Q=
Subject key identifier:   BD:F5:D3:04:0E:A2:0F:E1:51:BE:DF:91:D3:87:0D:9C:9C:22:7F:81
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       2D95C3ECC35E1DB19B5EF3C7EBD6B88E301B7D93
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a353130303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Fri 02 May 2025 23:14:32 +0000
ROA not before:           Fri 02 May 2025 23:09:32 +0000
ROA not after:            Fri 01 May 2026 23:14:32 +0000
asID:                     270764
IP address blocks:        2804:7110:5100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 00:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:95:c3:ec:c3:5e:1d:b1:9b:5e:f3:c7:eb:d6:b8:8e:30:1b:7d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: May  2 23:09:32 2025 GMT
            Not After : May  1 23:14:32 2026 GMT
        Subject: CN=BDF5D3040EA20FE151BEDF91D3870D9C9C227F81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:26:39:5c:6e:0f:35:ad:e1:be:e1:3c:cd:a6:
                    dc:83:a6:e2:81:1f:b1:27:f5:5b:5c:6d:9e:eb:b8:
                    a6:3b:3d:96:4f:6d:0f:6a:5d:b4:83:ce:f7:5b:7b:
                    ad:cf:19:38:06:ed:8f:35:cc:25:57:b6:7d:45:81:
                    24:01:52:c6:a5:fc:06:d1:c2:a6:54:60:df:2e:d1:
                    4f:16:99:c0:b3:06:f8:b8:f8:5b:bd:d8:f1:3d:3e:
                    7f:6c:4e:7e:31:51:58:6a:1a:af:d7:d6:9d:a5:ed:
                    d9:24:94:22:2a:db:22:c2:ab:74:16:6c:14:a0:2e:
                    d9:a1:ec:9a:c7:22:03:df:ac:ef:e2:ef:59:47:99:
                    17:be:7a:10:ea:f4:f7:e5:d2:2f:5b:78:05:a0:3b:
                    43:c6:06:f1:ac:a1:58:0f:cf:f2:46:80:94:83:91:
                    d2:73:30:23:ff:c0:78:8c:cb:ca:7b:98:91:24:2b:
                    f7:48:d6:76:f5:b8:41:7a:60:db:8f:09:3b:14:8e:
                    1c:f1:e5:16:84:71:83:fe:c2:09:83:fe:3b:e9:19:
                    bd:4c:f1:7d:f2:e0:18:9d:a0:00:cf:27:a5:ed:f2:
                    7a:d8:0b:fe:62:54:0f:be:c5:07:48:51:c9:e5:74:
                    ae:5f:78:8a:2a:3e:e8:1e:41:1b:0d:5a:a6:85:65:
                    e4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F5:D3:04:0E:A2:0F:E1:51:BE:DF:91:D3:87:0D:9C:9C:22:7F:81
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a353130303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:5100::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:4c:98:ec:af:88:a5:ba:8e:cd:a9:14:c3:f6:bb:40:fd:53:
         9e:27:99:59:49:d8:5d:b1:a9:95:62:03:fb:d7:b2:6f:56:a1:
         56:27:60:66:51:c0:44:c6:3c:c0:1e:d1:2f:99:33:03:56:2e:
         9e:82:6c:80:54:f0:67:09:88:81:b0:1c:87:19:69:6b:1d:63:
         13:3e:4e:b8:8f:a5:64:fd:a7:eb:a3:06:86:dc:a1:5b:9b:8c:
         11:2f:d8:0a:13:61:3c:c9:73:5b:2b:b4:88:0d:4d:f8:72:18:
         bc:19:77:4f:86:aa:4e:09:78:7c:64:f0:69:b6:83:e1:1f:ab:
         76:81:8c:dc:7b:43:86:4c:d7:82:b8:98:c6:04:e3:44:a5:06:
         ff:ea:08:17:e6:e0:ae:2d:15:7b:80:29:32:f6:1e:b9:d0:32:
         e3:1b:e2:bb:cf:0e:7e:fc:bb:05:b7:54:c7:fa:58:3f:52:bb:
         68:49:0b:69:8f:97:62:25:a8:48:5d:c3:35:dd:bd:bb:a1:de:
         84:71:8c:0d:9d:69:54:4f:df:bc:90:7e:0f:13:5b:8a:e4:16:
         f2:30:d4:1b:16:6c:b2:0d:71:b8:6f:26:c8:10:d9:a6:ef:e6:
         18:83:d9:e3:0d:b0:2e:ff:a2:a8:53:fa:0e:0c:51:02:a9:38:
         84:cc:b9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:40:32 2025 by rpki-client