Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a3a2f33322d3438203d3e20323731303432.roa
File:                     323830343a373536303a3a2f33322d3438203d3e20323731303432.roa (raw, json)
Hash identifier:          pADDBO6JgnMUsIV+OzKRQY/VDEhbygvqJSE9SMBNV3M=
Subject key identifier:   07:B4:F8:1F:D2:5D:0C:5D:4C:2E:E3:61:C2:4B:28:04:96:7E:57:70
Certificate issuer:       /CN=7B5564D1ADD58A3BAA49E23DAF5A6B5A67C691EB
Certificate serial:       387AE1B89B98AE3A47753A7D40A00D1CB3855A92
Authority key identifier: 7B:55:64:D1:AD:D5:8A:3B:AA:49:E2:3D:AF:5A:6B:5A:67:C6:91:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5564D1ADD58A3BAA49E23DAF5A6B5A67C691EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a3a2f33322d3438203d3e20323731303432.roa
Signing time:             Tue 06 May 2025 15:05:48 +0000
ROA not before:           Tue 06 May 2025 15:00:48 +0000
ROA not after:            Tue 05 May 2026 15:05:48 +0000
asID:                     271042
IP address blocks:        2804:7560::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/7B5564D1ADD58A3BAA49E23DAF5A6B5A67C691EB.crl
                          rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/7B5564D1ADD58A3BAA49E23DAF5A6B5A67C691EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5564D1ADD58A3BAA49E23DAF5A6B5A67C691EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 05:48:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7a:e1:b8:9b:98:ae:3a:47:75:3a:7d:40:a0:0d:1c:b3:85:5a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5564D1ADD58A3BAA49E23DAF5A6B5A67C691EB
        Validity
            Not Before: May  6 15:00:48 2025 GMT
            Not After : May  5 15:05:48 2026 GMT
        Subject: CN=07B4F81FD25D0C5D4C2EE361C24B2804967E5770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e5:67:ee:4a:c8:3a:32:cf:46:fe:95:6f:ff:
                    54:29:66:d2:0c:ba:ea:24:0f:a0:33:e1:fb:f9:32:
                    8e:ed:f4:44:19:a0:bb:8a:d8:e3:87:61:1b:e4:a0:
                    5f:50:0a:fe:b4:b5:10:70:f5:f2:ca:ab:56:e7:1a:
                    20:ac:e8:e3:c7:df:01:27:25:9f:f6:f8:ec:ad:15:
                    b2:15:93:15:dd:e1:ef:27:12:cb:ce:26:3d:9e:ba:
                    aa:4e:14:9d:ea:a4:0b:77:72:a9:ec:34:05:bb:fd:
                    9c:41:4b:61:ae:41:f4:2e:77:5b:1d:0e:40:36:80:
                    a9:06:30:11:fc:43:30:06:0a:b3:8d:6c:ca:eb:d9:
                    fa:3e:1f:e6:c6:e3:02:06:72:4a:ac:62:7b:2f:ec:
                    ca:b7:b7:a9:b6:40:e7:2c:ac:4e:b0:65:43:04:88:
                    8d:8c:75:b2:37:41:08:76:d7:fa:e3:7e:40:b6:ad:
                    49:b8:bf:1f:c9:77:a3:6c:5c:3b:95:4d:a0:92:2f:
                    fd:3b:bc:14:e8:fd:c5:ae:f2:32:e0:4c:0f:ee:09:
                    f7:ac:e7:29:04:54:f3:04:af:f8:e1:b0:34:ef:9f:
                    b9:e0:c4:51:61:b1:35:4d:f8:c2:8c:ed:a3:1e:9f:
                    b0:b6:7d:a3:6f:e4:7a:a5:63:6b:68:5e:75:33:04:
                    48:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B4:F8:1F:D2:5D:0C:5D:4C:2E:E3:61:C2:4B:28:04:96:7E:57:70
            X509v3 Authority Key Identifier:
                keyid:7B:55:64:D1:AD:D5:8A:3B:AA:49:E2:3D:AF:5A:6B:5A:67:C6:91:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/7B5564D1ADD58A3BAA49E23DAF5A6B5A67C691EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5564D1ADD58A3BAA49E23DAF5A6B5A67C691EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a3a2f33322d3438203d3e20323731303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7560::/32

    Signature Algorithm: sha256WithRSAEncryption
         d9:14:18:a5:b9:ba:65:4e:c9:84:8b:73:30:9a:d0:af:aa:5a:
         0a:46:5d:87:ab:bf:1c:76:00:9e:1a:82:b2:63:3b:56:9a:d0:
         d9:9d:7b:ab:44:c2:1f:a7:ea:6a:57:f6:0e:f5:82:73:6d:c2:
         76:09:e5:79:fc:c5:f6:44:61:5e:91:45:52:4b:13:86:54:23:
         4e:dc:5e:ac:2f:d4:e8:04:b0:d2:70:63:42:1e:24:b9:43:8b:
         08:c8:4b:16:11:be:6a:68:9d:99:98:8f:5a:72:42:93:b2:af:
         01:9a:9b:59:81:d4:e2:08:b6:84:c6:ea:52:e6:a7:53:d7:34:
         bf:e7:a0:7e:b6:3e:08:07:a8:42:57:92:b9:ce:40:b8:9c:e1:
         31:25:6d:a5:98:0f:50:25:ff:a3:45:ab:f3:b7:63:9b:02:de:
         d3:ec:69:a0:cd:f3:b6:09:1f:ce:ef:19:5d:df:f0:f8:6d:8c:
         5a:b8:d8:53:60:4f:cd:fa:27:94:4f:3d:0a:73:1a:8b:d7:71:
         86:1b:76:11:17:bd:33:d7:61:14:3b:6a:00:a7:29:42:ba:f4:
         bc:9c:c1:29:f8:03:0d:70:24:3a:9a:66:dd:b4:35:ef:16:a1:
         a2:e7:9f:3e:ab:21:44:3c:c3:24:69:78:73:d9:30:3d:34:43:
         15:91:f8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:29:46 2025 by rpki-client