Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a383030303a3a2f33332d3333203d3e20323731313636.roa
File:                     323830343a373734343a383030303a3a2f33332d3333203d3e20323731313636.roa (raw, json)
Hash identifier:          9c/Vv3pmZ5CXw4NUWRozYcmOTc1afAQ0zUfVqRBq+Pk=
Subject key identifier:   24:71:05:13:F7:EF:9A:C5:38:CC:29:74:36:58:AB:E5:66:A6:3B:F0
Certificate issuer:       /CN=0343B8928CA78A1D3548AF9EB5A390CF7664FEBA
Certificate serial:       0BC6CAABB0AFC811CD03EEDE8CF03BBAD7A21037
Authority key identifier: 03:43:B8:92:8C:A7:8A:1D:35:48:AF:9E:B5:A3:90:CF:76:64:FE:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a383030303a3a2f33332d3333203d3e20323731313636.roa
Signing time:             Thu 31 Jul 2025 00:08:26 +0000
ROA not before:           Thu 31 Jul 2025 00:03:26 +0000
ROA not after:            Thu 30 Jul 2026 00:08:26 +0000
asID:                     271166
IP address blocks:        2804:7744:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.crl
                          rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 11:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c6:ca:ab:b0:af:c8:11:cd:03:ee:de:8c:f0:3b:ba:d7:a2:10:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0343B8928CA78A1D3548AF9EB5A390CF7664FEBA
        Validity
            Not Before: Jul 31 00:03:26 2025 GMT
            Not After : Jul 30 00:08:26 2026 GMT
        Subject: CN=24710513F7EF9AC538CC29743658ABE566A63BF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3e:5f:52:f0:af:dd:93:d8:50:96:3f:07:09:
                    0c:a1:fa:6a:10:5a:9b:07:c0:5d:cf:65:ef:9b:ca:
                    86:5f:d9:ac:6d:9a:c4:5c:f1:74:f8:6a:67:49:36:
                    b9:0b:e3:6f:e4:f8:36:17:db:dd:e7:ce:10:6d:aa:
                    00:16:3a:b7:7c:9a:93:3b:73:a9:32:e6:41:5f:c2:
                    1a:95:94:3b:2b:37:2b:6a:18:8c:5f:43:a2:3d:0e:
                    d2:9a:f9:44:db:1d:e8:9f:e0:a0:d1:9f:be:5b:75:
                    e6:86:07:2e:27:de:54:e4:7c:02:dc:c6:3a:ea:cc:
                    2a:82:bf:13:98:ff:8f:76:6a:55:69:ce:06:47:82:
                    c1:80:fc:86:ae:8e:78:e1:51:68:7f:ef:69:8c:90:
                    d4:21:b0:da:d8:4e:d9:ed:a4:27:78:cf:bc:73:31:
                    5d:22:21:63:09:39:75:68:87:c6:6e:7d:cd:31:d0:
                    2f:a1:82:57:07:0e:9c:ef:ab:f3:ae:c7:8a:da:ba:
                    91:8c:5e:bc:17:4e:72:4c:4f:3a:ff:e3:71:9e:4d:
                    4f:dc:0c:04:c5:3f:33:e0:51:30:62:91:79:53:4d:
                    28:68:65:f0:9b:24:69:14:bc:f0:23:bd:ff:2b:10:
                    d8:11:ea:10:49:53:2a:11:9c:a1:a8:49:ca:26:f2:
                    49:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:71:05:13:F7:EF:9A:C5:38:CC:29:74:36:58:AB:E5:66:A6:3B:F0
            X509v3 Authority Key Identifier:
                keyid:03:43:B8:92:8C:A7:8A:1D:35:48:AF:9E:B5:A3:90:CF:76:64:FE:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a383030303a3a2f33332d3333203d3e20323731313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7744:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         00:08:11:95:14:4b:8d:1d:56:87:fa:ee:87:91:c3:d7:c9:e2:
         8a:7f:60:a4:b2:8f:07:b2:a4:c1:82:a5:ee:7e:65:2c:91:d0:
         0c:14:99:6c:10:b5:f6:93:b4:85:d8:3b:cc:d5:df:14:c8:a6:
         53:9f:be:60:17:24:63:f2:f9:5c:9c:97:24:19:da:6a:3c:3f:
         80:8d:50:c9:a9:8b:c7:4f:2a:ff:5c:e8:97:86:01:97:95:68:
         d3:97:1a:b3:e9:10:b5:df:da:a0:db:a2:d8:14:1d:36:52:fb:
         df:9a:bb:93:0b:e6:df:ed:37:1b:a7:b2:0e:21:2b:63:c1:0a:
         9c:90:7c:47:e4:4c:14:33:78:39:c8:05:fd:67:c3:88:db:3c:
         bb:e9:c5:27:03:6e:d6:50:dc:51:ea:2b:a4:37:9b:31:f3:4a:
         66:a5:99:62:8a:50:ee:f4:30:b9:c5:45:d0:08:36:7a:a5:1a:
         15:58:fd:44:7a:de:d9:39:77:44:b6:a5:94:eb:84:1a:c9:60:
         50:ce:35:f2:60:18:7b:a9:17:f4:57:ba:6a:9b:05:94:3d:c7:
         a3:ec:7d:1e:35:e8:64:49:18:d9:cb:48:8f:61:1f:bd:7f:d6:
         f6:da:a6:66:35:37:bb:48:ae:37:58:c8:2a:70:ce:aa:f5:9f:
         91:56:7d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:56:05 2025 by rpki-client