Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a3a2f33322d3438203d3e20323637333936.roa
File:                     323830343a346364383a3a2f33322d3438203d3e20323637333936.roa (raw, json)
Hash identifier:          bqYXXfEQJ7ynYHhQPonZJxpqMMsAjcz8KKbatLQNpOE=
Subject key identifier:   4C:3D:AE:43:27:6E:A5:16:42:1D:DD:76:3F:A8:DE:34:F9:65:FF:A5
Certificate issuer:       /CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0
Certificate serial:       2687AF39315C8E88277815DDC121E9E1882B7D2B
Authority key identifier: F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a3a2f33322d3438203d3e20323637333936.roa
Signing time:             Wed 07 May 2025 19:31:18 +0000
ROA not before:           Wed 07 May 2025 19:26:18 +0000
ROA not after:            Wed 06 May 2026 19:31:18 +0000
asID:                     267396
IP address blocks:        2804:4cd8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.crl
                          rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 23:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:87:af:39:31:5c:8e:88:27:78:15:dd:c1:21:e9:e1:88:2b:7d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0
        Validity
            Not Before: May  7 19:26:18 2025 GMT
            Not After : May  6 19:31:18 2026 GMT
        Subject: CN=4C3DAE43276EA516421DDD763FA8DE34F965FFA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cc:f8:13:8d:99:e2:e8:f1:16:4e:4f:f8:5e:
                    13:62:87:e8:d3:5a:05:81:91:ea:bd:b3:9b:1e:c8:
                    28:47:bb:69:47:24:22:33:bf:02:f0:95:5c:e4:28:
                    32:b4:b9:0c:1b:c1:88:bf:66:72:dd:91:24:81:ee:
                    43:49:03:34:69:8d:f2:bc:cf:30:7a:ec:bf:19:e0:
                    36:fb:02:dd:6a:96:d4:9e:1d:79:aa:39:d5:fd:27:
                    f3:91:36:5a:71:83:f2:6a:93:ff:61:53:05:57:4f:
                    99:ea:89:b1:04:4f:3c:15:be:79:b2:fd:88:38:37:
                    f8:57:1c:de:98:b9:c5:6f:97:ce:d9:8e:dc:e4:1c:
                    9c:c8:26:4f:0e:6a:22:b5:db:a2:f4:e1:12:d2:49:
                    d0:07:30:54:02:09:32:70:2a:3f:45:48:2d:f6:5b:
                    32:b7:25:06:76:b3:5a:b4:57:37:9d:63:1f:a1:26:
                    42:c0:04:bf:22:5f:3d:45:a3:5b:ef:13:96:8b:09:
                    bb:02:d3:8b:f2:5f:c7:2c:55:28:10:b3:2e:8d:ec:
                    c5:6b:c1:3e:a6:af:08:5f:5b:16:03:4a:a4:ee:0a:
                    25:54:04:e7:88:92:51:06:42:00:8a:e5:5a:4a:c9:
                    90:39:51:80:ca:8f:a6:67:4d:49:2c:9b:37:cc:f4:
                    f8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3D:AE:43:27:6E:A5:16:42:1D:DD:76:3F:A8:DE:34:F9:65:FF:A5
            X509v3 Authority Key Identifier:
                keyid:F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a3a2f33322d3438203d3e20323637333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:d4:53:e2:76:47:bb:6c:46:0a:58:1f:1d:55:3a:ed:69:58:
         06:7d:9c:3f:f5:29:a0:74:90:74:75:3e:ea:8b:5c:bd:0b:4f:
         42:64:19:ef:a8:e7:66:c4:12:3b:64:0c:70:28:6a:64:26:c4:
         f8:6c:8f:34:ab:c5:07:6f:2d:e2:d4:82:a4:18:2d:19:7f:8d:
         78:c1:b3:68:c1:86:47:e6:94:7e:8a:5b:6a:a7:bb:c3:f7:11:
         26:be:a4:8e:8b:e5:54:4a:e7:d8:b0:84:aa:0c:39:cd:21:85:
         13:65:7a:7e:68:93:ec:f3:fb:a3:08:58:1c:e8:d1:96:51:ec:
         05:a4:bd:48:65:dd:7f:41:5c:7e:cc:40:5f:83:47:ee:b2:6a:
         41:1f:63:30:34:be:27:99:3b:73:e1:6a:5c:0a:91:d1:a5:d5:
         77:b9:e0:c9:ea:e5:60:bd:52:ba:a8:f1:dd:46:0f:29:a5:e5:
         7d:b3:39:f2:b4:87:c0:04:93:47:88:c2:c2:f7:d6:29:e5:d8:
         80:d5:43:25:b1:5b:df:ed:1b:52:f6:b2:57:96:bc:f6:0b:53:
         de:17:73:40:a6:46:95:67:42:2f:49:d5:60:f2:7a:61:28:63:
         b0:77:34:5b:0f:b9:af:ad:35:25:1d:e4:3d:61:c1:ab:dc:25:
         d1:06:6b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:22:44 2025 by rpki-client