Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a363130303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a363130303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          wHEzbSLQxKdv9phuL/8RgE+OBZBMNxdJJltjPxi2qnU=
Subject key identifier:   63:A6:F0:9C:C0:5D:9A:A3:A5:F0:D9:9B:B6:F7:FE:51:10:24:37:A2
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       5CF7EBED63E4CC4886A40C354F91D2B0B7A93ECE
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a363130303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Fri 02 May 2025 23:14:32 +0000
ROA not before:           Fri 02 May 2025 23:09:32 +0000
ROA not after:            Fri 01 May 2026 23:14:32 +0000
asID:                     270764
IP address blocks:        2804:7110:6100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 00:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f7:eb:ed:63:e4:cc:48:86:a4:0c:35:4f:91:d2:b0:b7:a9:3e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: May  2 23:09:32 2025 GMT
            Not After : May  1 23:14:32 2026 GMT
        Subject: CN=63A6F09CC05D9AA3A5F0D99BB6F7FE51102437A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ed:89:d9:12:ca:10:af:65:ab:fa:10:cc:c4:
                    b3:e3:ae:e3:54:67:38:46:a8:4e:74:73:d9:12:dd:
                    f7:e1:1a:ce:5b:fe:91:37:d5:b7:cc:3a:3f:7d:49:
                    51:65:1d:02:8f:9e:7d:fa:79:79:e8:87:d2:7c:9c:
                    af:28:b1:85:39:1a:02:0d:0b:e8:5f:ea:c6:f1:a6:
                    91:e9:d6:0f:17:75:fa:45:b9:b4:e0:5d:81:71:29:
                    30:ac:10:ad:26:94:b2:81:42:5f:d3:41:57:a1:96:
                    33:c3:6c:af:05:80:09:57:a6:3e:03:6f:94:56:c8:
                    02:6c:18:1b:62:8c:e5:54:3d:4b:b9:46:89:cd:ad:
                    6c:06:b5:66:07:63:03:6f:22:35:b4:4c:89:6a:52:
                    84:82:4d:fc:70:3e:20:39:33:50:4d:64:63:20:10:
                    23:d0:e0:07:76:62:d0:ee:07:d2:de:36:f5:41:b1:
                    dc:57:3b:10:b3:4f:73:84:72:9b:3b:1e:60:90:19:
                    b8:5b:0e:11:40:58:af:56:69:7b:15:4a:68:84:1a:
                    36:ab:cc:72:ff:fb:0f:85:4b:b9:fe:44:86:39:2e:
                    eb:b3:24:96:58:07:df:58:d5:50:b8:cf:d2:8b:02:
                    5d:e3:2f:10:bd:7d:d3:a7:48:62:2b:00:2b:32:5e:
                    43:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A6:F0:9C:C0:5D:9A:A3:A5:F0:D9:9B:B6:F7:FE:51:10:24:37:A2
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a363130303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:6100::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:da:11:50:cf:c4:e8:65:18:83:71:8f:d6:26:4b:6c:ed:d3:
         4a:0c:03:a0:3b:1a:ed:a5:eb:d4:d7:1e:fe:09:2b:81:a2:fd:
         42:c2:2e:6e:10:d2:a7:ef:36:ab:ed:fa:85:11:f7:6f:78:95:
         4d:0e:2e:45:04:10:99:a7:48:4e:52:5d:56:6a:aa:2d:ef:46:
         6c:47:a7:59:f1:3c:71:e3:64:17:5b:8d:12:f6:3f:e8:3b:85:
         83:dc:8d:44:f4:20:e5:2b:0b:4d:dc:99:23:51:cf:e1:a3:bb:
         9d:c9:30:08:c0:29:76:58:42:59:3b:ce:b0:32:eb:b3:62:3d:
         4a:72:92:cb:6f:c9:69:b6:7b:51:43:9e:b7:5d:ca:0d:f2:34:
         c8:aa:a8:44:d3:10:75:05:f1:e3:2f:16:c6:09:4b:60:53:c7:
         cd:c4:04:03:28:ee:1d:f0:03:07:e8:b2:ea:0d:f2:0c:17:cc:
         64:c2:2f:64:98:f6:97:51:b8:29:12:d0:98:5b:b4:9a:a9:86:
         2d:8c:e0:ae:f6:81:87:5d:b7:96:3c:05:dc:1f:32:8f:0e:97:
         75:7f:64:ca:12:86:3c:d6:17:70:74:c0:d4:97:30:43:0a:13:
         ae:4a:69:d4:1b:ad:63:bb:fe:52:44:82:ac:7d:6e:b1:02:eb:
         88:96:7e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:25:52 2025 by rpki-client