Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/323830343a316163383a3a2f33322d3334203d3e203631383835.roa
File:                     323830343a316163383a3a2f33322d3334203d3e203631383835.roa (raw, json)
Hash identifier:          hgbebWRxJH711YUS+ZshiJSddOzcAmuyU3X5EXPVldc=
Subject key identifier:   9F:50:5E:E4:46:4F:68:AF:5E:19:27:53:2B:2B:48:32:97:16:DD:37
Certificate issuer:       /CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
Certificate serial:       6C297D552EA538138EB15BF49C6ADA36A7A2F901
Authority key identifier: 3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/323830343a316163383a3a2f33322d3334203d3e203631383835.roa
Signing time:             Mon 05 May 2025 19:16:52 +0000
ROA not before:           Mon 05 May 2025 19:11:52 +0000
ROA not after:            Mon 04 May 2026 19:16:52 +0000
asID:                     61885
IP address blocks:        2804:1ac8::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl
                          rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 08:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:29:7d:55:2e:a5:38:13:8e:b1:5b:f4:9c:6a:da:36:a7:a2:f9:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
        Validity
            Not Before: May  5 19:11:52 2025 GMT
            Not After : May  4 19:16:52 2026 GMT
        Subject: CN=9F505EE4464F68AF5E1927532B2B48329716DD37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:7d:9e:21:f0:e5:95:b5:c3:78:3e:f6:77:f6:
                    bd:d8:e3:51:7a:5c:54:e5:b1:0c:dd:68:0c:cf:16:
                    ba:a6:25:23:53:9f:b3:f8:58:1e:96:c7:77:97:e3:
                    72:22:1d:8b:9b:55:35:4f:2b:7d:6a:41:67:38:7d:
                    ec:a6:ca:b1:9d:d5:ed:15:73:20:2d:f2:59:9c:5d:
                    0e:37:14:39:c1:ab:bf:29:db:8b:de:82:09:f6:56:
                    96:c6:46:d9:dd:17:43:cf:c2:5e:9d:7a:72:80:2c:
                    22:f0:cf:29:7b:71:e6:5f:d1:70:df:74:86:c1:3d:
                    cf:34:e0:75:8e:b5:df:c2:31:80:f8:c1:aa:8c:57:
                    89:6e:80:3f:16:40:12:1f:50:3f:44:0e:ed:27:03:
                    62:77:f9:b0:0f:e3:e2:d6:cd:7a:a2:d7:17:71:df:
                    8f:1a:e2:68:d9:c3:cb:c8:2c:3b:0b:93:5c:72:19:
                    d9:2e:1b:71:af:08:6b:a4:6d:75:f7:38:89:05:42:
                    8c:0a:d1:89:b9:63:53:b0:f8:fc:cd:f9:a0:5e:9b:
                    65:42:bd:66:09:41:2f:e6:ff:8c:b9:ee:04:5e:9b:
                    bc:87:61:5b:be:14:70:64:24:13:aa:8b:1e:19:4d:
                    eb:58:42:ac:9c:13:3e:6d:87:36:6d:66:45:b1:81:
                    c0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:50:5E:E4:46:4F:68:AF:5E:19:27:53:2B:2B:48:32:97:16:DD:37
            X509v3 Authority Key Identifier:
                keyid:3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/323830343a316163383a3a2f33322d3334203d3e203631383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ac8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:e7:18:bd:be:29:bd:a5:ef:80:d6:a2:04:78:4e:c6:9b:01:
         77:92:89:03:b3:64:c2:4b:f0:0b:ec:2c:8b:84:fa:1c:62:b0:
         7a:12:22:5b:55:0a:4d:72:a9:08:39:cf:e9:4d:74:79:7c:04:
         8d:6c:4b:b9:cb:1d:ad:8e:f1:70:c6:f3:89:fd:b2:bc:74:a4:
         51:66:e2:7b:4e:95:39:e7:a9:20:2f:76:c7:e6:3e:b0:2e:55:
         10:7d:01:80:de:e0:8a:fb:7b:33:4c:a4:57:ac:1e:84:45:e0:
         a1:ae:96:c5:42:1a:4f:8d:64:58:c2:96:9d:2d:66:ee:2d:cd:
         4d:5b:f8:a1:73:c5:f4:62:cb:11:e7:16:51:c4:b6:35:e9:74:
         b7:e2:53:65:ea:53:26:34:bc:8e:ab:8f:1f:91:7d:9b:ca:d3:
         46:91:c5:cf:08:d9:ff:5a:ab:39:2c:08:f0:9b:fc:6e:f0:af:
         67:19:89:1b:1e:a6:7a:ca:31:30:ae:f6:14:90:0a:3a:fb:33:
         e6:ba:1e:47:2e:56:6f:00:23:86:0b:15:37:47:4e:34:b7:2e:
         0a:86:5c:a0:ca:eb:30:12:86:f5:dc:12:d2:20:84:91:ca:a3:
         71:0c:93:b7:9b:28:9b:ac:05:97:56:2f:92:5c:c6:49:32:d1:
         3c:60:a3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:45:54 2025 by rpki-client