Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/323830343a376532633a3a2f33322d3332203d3e20323731363037.roa
File:                     323830343a376532633a3a2f33322d3332203d3e20323731363037.roa (raw, json)
Hash identifier:          iOYyO2C1e9u69gfJ9XxFj3ua/3PCauvHSVjH/O2Wr14=
Subject key identifier:   2F:E6:44:B8:52:63:78:1D:40:FD:04:01:7E:B3:AE:AB:59:5C:03:03
Certificate issuer:       /CN=DE1BAD7F162F23137492FDE80491DD14E69C31FA
Certificate serial:       7998BFD1A02E1CF40C67C603E3F9ACED4327DB39
Authority key identifier: DE:1B:AD:7F:16:2F:23:13:74:92:FD:E8:04:91:DD:14:E6:9C:31:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1BAD7F162F23137492FDE80491DD14E69C31FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/323830343a376532633a3a2f33322d3332203d3e20323731363037.roa
Signing time:             Mon 05 May 2025 21:42:39 +0000
ROA not before:           Mon 05 May 2025 21:37:39 +0000
ROA not after:            Mon 04 May 2026 21:42:39 +0000
asID:                     271607
IP address blocks:        2804:7e2c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/DE1BAD7F162F23137492FDE80491DD14E69C31FA.crl
                          rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/DE1BAD7F162F23137492FDE80491DD14E69C31FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1BAD7F162F23137492FDE80491DD14E69C31FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 17:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:98:bf:d1:a0:2e:1c:f4:0c:67:c6:03:e3:f9:ac:ed:43:27:db:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE1BAD7F162F23137492FDE80491DD14E69C31FA
        Validity
            Not Before: May  5 21:37:39 2025 GMT
            Not After : May  4 21:42:39 2026 GMT
        Subject: CN=2FE644B85263781D40FD04017EB3AEAB595C0303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:36:69:f8:59:39:7d:2d:0d:c6:0a:01:bd:dd:
                    f9:03:b5:7e:b1:55:4b:95:11:bd:fe:37:69:9f:d3:
                    52:b2:60:76:b2:3b:ac:d5:cb:ad:c0:0a:6c:35:39:
                    fd:2c:0b:e7:6e:92:a7:2c:36:53:96:83:7f:59:34:
                    10:45:8e:05:48:38:f6:f5:b3:09:98:37:12:3e:d3:
                    66:bb:e1:14:d7:98:a6:09:42:68:02:40:48:a4:d0:
                    47:3e:80:89:a6:02:9f:9d:e1:aa:43:b4:56:14:a2:
                    73:35:14:63:16:10:23:3f:fa:66:27:11:7b:f6:22:
                    0f:e1:d6:8f:57:0a:96:9f:83:57:df:6b:89:0b:a4:
                    fc:f3:f0:3a:25:cd:f9:ea:27:4b:08:50:71:bf:44:
                    74:bb:06:44:54:86:4e:6f:bc:03:8e:ea:9c:81:5e:
                    f1:e5:c1:75:3a:ff:15:6c:8e:a7:1c:65:32:0b:63:
                    b2:3e:5c:18:71:7b:60:f8:a2:72:cc:d7:0f:96:08:
                    14:49:82:f7:42:66:4b:c2:f7:f1:e0:1c:06:ca:85:
                    a6:8a:1f:e9:3b:c2:2d:0c:cc:c4:53:69:37:dd:f5:
                    3c:cd:48:2e:a1:ec:36:be:b5:db:a1:2f:87:3f:72:
                    2f:f6:cb:bd:4f:c6:39:c9:8d:d6:68:d2:3a:3c:63:
                    44:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E6:44:B8:52:63:78:1D:40:FD:04:01:7E:B3:AE:AB:59:5C:03:03
            X509v3 Authority Key Identifier:
                keyid:DE:1B:AD:7F:16:2F:23:13:74:92:FD:E8:04:91:DD:14:E6:9C:31:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/DE1BAD7F162F23137492FDE80491DD14E69C31FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1BAD7F162F23137492FDE80491DD14E69C31FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/323830343a376532633a3a2f33322d3332203d3e20323731363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:3c:44:96:0b:67:bf:5a:7c:09:fb:31:07:8a:33:5b:e2:65:
         f2:d5:85:fb:4f:5a:0d:2e:ab:9b:29:d8:4a:16:57:36:0a:f6:
         c8:d3:a8:3e:8f:60:fd:3a:c1:65:22:a8:0c:dd:67:d1:25:52:
         55:40:bd:82:79:bd:87:1f:e6:d8:e7:22:5b:d1:45:0b:ed:b0:
         fe:3b:df:01:e0:b8:50:fb:f2:b8:a0:5f:fb:77:06:98:74:ad:
         6b:78:5f:b9:68:84:96:ef:35:e5:1f:f1:f0:3b:54:88:f9:c4:
         af:05:f0:ad:97:68:62:ee:a2:18:d7:91:74:95:6b:c5:a2:e9:
         79:c5:8c:9a:fb:5a:49:b8:b0:2a:2e:ce:6c:df:4e:7a:0a:26:
         e0:35:9b:92:6f:dc:f6:c2:aa:af:ea:2f:1c:f1:1f:94:88:81:
         9b:65:e6:b7:02:dd:13:5f:89:0e:a0:2e:bf:54:86:94:23:31:
         f4:21:0f:8d:11:b1:1a:ee:30:6c:5c:d6:9e:45:54:28:96:1f:
         2c:32:61:f9:4a:d3:b8:5f:72:f6:35:18:e8:b5:d1:e9:48:4e:
         81:c3:c8:40:a0:aa:b5:d7:93:a8:83:13:53:dc:56:1d:c6:b9:
         77:f3:7c:15:14:ca:5f:5d:3e:dd:69:31:20:82:a1:c5:16:7e:
         10:b5:ad:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:00:36 2025 by rpki-client