Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a313030303a3a2f34382d3438203d3e20323635333834.roa
File:                     323830343a333334303a313030303a3a2f34382d3438203d3e20323635333834.roa (raw, json)
Hash identifier:          6bYxEKkaWkMUTFp7/5AVL44rvZelcBN17c+q+RwPndw=
Subject key identifier:   3F:C4:E4:C0:EC:4D:7C:90:93:38:6C:A8:08:51:28:D7:CF:CD:DE:92
Certificate issuer:       /CN=1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5
Certificate serial:       2A02AC828DB6C6E3A3A972DFFDD75CE156F1207F
Authority key identifier: 1B:7A:42:89:6A:4F:BF:2E:2E:2B:04:94:30:0A:B6:F0:09:4E:F9:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a313030303a3a2f34382d3438203d3e20323635333834.roa
Signing time:             Sat 14 Jun 2025 01:03:52 +0000
ROA not before:           Sat 14 Jun 2025 00:58:52 +0000
ROA not after:            Sat 13 Jun 2026 01:03:52 +0000
asID:                     265384
IP address blocks:        2804:3340:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.crl
                          rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 05:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:02:ac:82:8d:b6:c6:e3:a3:a9:72:df:fd:d7:5c:e1:56:f1:20:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5
        Validity
            Not Before: Jun 14 00:58:52 2025 GMT
            Not After : Jun 13 01:03:52 2026 GMT
        Subject: CN=3FC4E4C0EC4D7C9093386CA8085128D7CFCDDE92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:75:bb:bf:f7:06:21:1d:72:90:ec:75:30:5d:
                    18:a6:25:07:c8:ed:88:fa:d0:24:da:97:c1:70:59:
                    de:e0:3c:5e:d0:67:bb:85:20:90:62:27:ce:62:f8:
                    7d:df:84:59:a2:69:d7:a0:db:82:cc:9b:af:19:51:
                    08:8b:70:7b:73:a0:cc:5f:d1:c1:7a:ee:48:60:0f:
                    67:ab:ea:20:67:23:9f:bb:f0:1a:8d:b5:9f:f7:f3:
                    d1:16:bd:c9:e7:65:6c:8c:47:0a:c5:29:d4:fa:19:
                    d3:28:ff:62:42:f7:98:d1:87:b4:ff:70:b9:87:2c:
                    57:4e:69:b8:4a:79:cd:e6:5e:1e:68:e8:7c:cd:01:
                    7e:d8:16:40:27:01:3e:44:78:68:b6:d6:f7:e2:4b:
                    7b:ba:5a:66:33:7d:b0:c9:ed:e3:a2:31:db:99:b6:
                    fe:90:f3:2e:92:37:dc:ce:f6:e2:6c:7e:04:f0:7d:
                    0f:48:5d:f4:13:4f:4a:2a:18:8a:c5:b0:c9:63:cd:
                    9d:a7:21:31:5e:46:62:48:cd:88:71:7a:d9:64:d5:
                    ca:eb:e1:f3:4e:28:58:15:20:ef:32:37:6a:cc:03:
                    4d:02:11:b5:3d:05:14:78:0c:da:a4:80:e9:ce:f3:
                    97:29:86:3c:97:3b:12:19:3f:94:a1:b1:62:66:83:
                    28:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C4:E4:C0:EC:4D:7C:90:93:38:6C:A8:08:51:28:D7:CF:CD:DE:92
            X509v3 Authority Key Identifier:
                keyid:1B:7A:42:89:6A:4F:BF:2E:2E:2B:04:94:30:0A:B6:F0:09:4E:F9:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a313030303a3a2f34382d3438203d3e20323635333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3340:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:6c:a5:9e:3f:84:36:f3:47:79:fc:a6:79:45:7e:9d:59:1c:
         d0:0b:3e:1b:3f:87:e6:a4:93:73:8a:6b:b2:60:97:c8:06:a7:
         b4:7d:d3:19:60:bb:90:d5:64:65:99:a7:b3:68:10:c0:64:a2:
         1f:bb:22:f9:bb:25:52:6e:c2:aa:14:f0:b6:5d:43:38:dd:f0:
         d3:fc:84:1f:76:df:7f:d3:05:dd:c1:ce:dc:de:08:0c:58:df:
         40:51:2c:42:1e:4b:19:87:3c:f9:66:6d:b5:aa:cd:e8:ca:25:
         e1:2e:41:3a:3a:e6:e1:95:57:e6:5c:9a:94:33:a5:0f:0b:ef:
         db:2e:45:60:bf:8c:78:31:63:b8:7c:d4:da:5e:f4:ba:b7:7a:
         a8:53:42:6e:e8:14:bb:9a:af:b7:e7:61:8e:bb:0b:93:d9:7b:
         73:fe:de:74:c8:d1:32:69:e4:ef:9b:35:19:7e:e2:f3:37:e6:
         fa:30:70:e3:57:c0:2c:2b:6d:5a:74:a2:b7:8e:fc:6b:a1:57:
         93:1a:98:e5:f5:81:41:6f:fd:85:81:5f:a1:e0:29:62:95:f6:
         ad:00:41:42:92:db:1b:a5:83:8d:e3:bd:a0:7c:76:5e:e4:ce:
         ae:52:b0:62:de:1b:46:de:d3:be:0b:db:f9:21:97:77:d2:26:
         80:7f:1c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 13:52:01 2025 by rpki-client