Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a373130303a3a2f34302d3430203d3e20323730373634.roa
File:                     323830343a373131303a373130303a3a2f34302d3430203d3e20323730373634.roa (raw, json)
Hash identifier:          0oh4NG2eXGFT6cbE9XPBU6XmnvvySRmQ1cf5gLrzeiY=
Subject key identifier:   B9:C4:73:73:89:58:A7:EE:B3:C4:70:A5:34:1D:1E:B4:58:B0:A4:B2
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       62E206CD8B625941EA70995EC6AA20BA066F29DF
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a373130303a3a2f34302d3430203d3e20323730373634.roa
Signing time:             Fri 02 May 2025 23:14:33 +0000
ROA not before:           Fri 02 May 2025 23:09:33 +0000
ROA not after:            Fri 01 May 2026 23:14:33 +0000
asID:                     270764
IP address blocks:        2804:7110:7100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 00:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e2:06:cd:8b:62:59:41:ea:70:99:5e:c6:aa:20:ba:06:6f:29:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: May  2 23:09:33 2025 GMT
            Not After : May  1 23:14:33 2026 GMT
        Subject: CN=B9C473738958A7EEB3C470A5341D1EB458B0A4B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9f:ab:89:66:4d:64:54:09:89:4b:b5:02:93:
                    4b:29:a4:f1:29:96:c6:43:13:d3:54:3f:61:13:dc:
                    4a:18:c9:d8:cd:cc:c5:b5:89:51:49:74:0c:98:f9:
                    7f:26:28:87:86:d4:3a:01:bf:9a:86:e8:61:ca:66:
                    b2:f2:cc:b5:c3:a7:5c:21:a7:b2:94:ca:37:57:01:
                    2e:41:d6:9b:68:bd:a1:4a:d5:37:fd:1a:bc:38:f2:
                    b2:d3:77:d7:55:60:67:b8:e3:1f:52:0c:11:f1:e3:
                    e0:22:1f:0f:47:f0:7c:c1:9b:0f:a3:c0:02:e4:57:
                    88:9d:e4:a3:d6:3e:54:80:e1:bc:f7:56:7d:42:b4:
                    6f:ed:43:13:9d:bb:93:72:08:8c:53:00:3d:18:7e:
                    da:c9:39:65:d2:8c:fd:d4:30:6a:0d:fe:e4:b4:7f:
                    bb:e5:74:53:eb:79:62:fa:b2:ca:c8:f2:76:ba:56:
                    1e:02:43:75:27:43:d8:5f:8b:55:54:71:ba:63:f7:
                    e9:c9:f4:86:33:57:26:41:87:15:2c:65:0f:ac:04:
                    24:49:0c:b3:6f:a9:74:ec:6e:14:7a:8f:d8:81:78:
                    98:e8:4c:a2:91:ae:f7:4e:e3:7b:60:e3:33:4b:2c:
                    14:b4:10:49:6a:7b:a7:19:a4:2a:b2:a8:f3:b0:9c:
                    fc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C4:73:73:89:58:A7:EE:B3:C4:70:A5:34:1D:1E:B4:58:B0:A4:B2
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a373130303a3a2f34302d3430203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:7100::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:df:b0:12:5b:cd:db:eb:b2:e2:f2:79:ad:6d:29:7a:5a:3c:
         cf:82:10:8c:28:2f:41:04:f6:58:0c:b1:8b:1b:7d:1f:4b:4f:
         ff:58:a4:24:1f:dd:e2:1b:76:00:29:88:de:08:c9:9d:e5:0d:
         a6:3a:db:99:70:f2:f2:7b:76:d2:14:5f:7e:48:b2:67:1e:6b:
         12:3b:08:76:c1:36:5f:3c:f3:56:71:b9:a2:82:a3:d4:43:3d:
         53:be:b5:8e:f7:88:e1:0e:7d:7c:e3:4f:18:8a:82:6d:a7:5d:
         69:54:b7:f9:cc:2c:3b:ca:d1:2c:a4:19:bd:ed:30:9a:fe:f6:
         50:d5:ae:44:ac:0d:6f:67:33:aa:a0:fe:a1:4a:18:a7:09:dd:
         b8:cb:e7:04:bb:36:13:40:d7:f8:a9:b3:e6:1a:c7:d9:63:ce:
         98:1f:24:81:8d:e4:c7:97:3f:b4:fa:26:56:54:ce:7a:fb:6d:
         d0:10:5d:5b:fb:95:18:87:07:9b:f8:f2:a3:f8:65:ba:b6:0c:
         c8:c3:e9:e2:e1:48:44:d7:fb:67:33:10:0c:60:bf:69:fa:96:
         27:82:df:b2:53:2f:fc:84:2b:bb:0d:7b:72:42:91:1e:95:f3:
         3c:8d:81:26:64:f7:c7:c4:95:49:c3:9a:95:69:60:f2:97:9a:
         c8:59:48:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:05:28 2025 by rpki-client