Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3w7rh7r94tNhE51b1U3eW8hUhBUDeFsS7f31BFDT8oBL/0/323830343a353233633a3a2f33322d313238203d3e20323638353034.roa
File:                     323830343a353233633a3a2f33322d313238203d3e20323638353034.roa (raw, json)
Hash identifier:          2uJh51doWua4yEA01q3Dt0lrA414PdaSs+li9o5Cdb0=
Subject key identifier:   09:77:1C:61:DE:50:51:F7:2A:E9:A6:58:0E:04:0E:D6:D5:83:C3:76
Certificate issuer:       /CN=724E697E1673A7C11A6F50E51FCE489942BAAA02
Certificate serial:       7E7C7BA0DE46CB216DA3807BCE4FD8B923BB2170
Authority key identifier: 72:4E:69:7E:16:73:A7:C1:1A:6F:50:E5:1F:CE:48:99:42:BA:AA:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/724E697E1673A7C11A6F50E51FCE489942BAAA02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3w7rh7r94tNhE51b1U3eW8hUhBUDeFsS7f31BFDT8oBL/0/323830343a353233633a3a2f33322d313238203d3e20323638353034.roa
Signing time:             Thu 24 Apr 2025 17:09:02 +0000
ROA not before:           Thu 24 Apr 2025 17:04:02 +0000
ROA not after:            Thu 23 Apr 2026 17:09:02 +0000
asID:                     268504
IP address blocks:        2804:523c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3w7rh7r94tNhE51b1U3eW8hUhBUDeFsS7f31BFDT8oBL/0/724E697E1673A7C11A6F50E51FCE489942BAAA02.crl
                          rsync://rpki-repo.registro.br/repo/3w7rh7r94tNhE51b1U3eW8hUhBUDeFsS7f31BFDT8oBL/0/724E697E1673A7C11A6F50E51FCE489942BAAA02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/724E697E1673A7C11A6F50E51FCE489942BAAA02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 23:24:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7c:7b:a0:de:46:cb:21:6d:a3:80:7b:ce:4f:d8:b9:23:bb:21:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724E697E1673A7C11A6F50E51FCE489942BAAA02
        Validity
            Not Before: Apr 24 17:04:02 2025 GMT
            Not After : Apr 23 17:09:02 2026 GMT
        Subject: CN=09771C61DE5051F72AE9A6580E040ED6D583C376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:19:99:44:a5:31:55:1a:c8:75:9f:eb:fa:7b:
                    0c:73:52:5f:7a:8e:b1:85:94:c3:23:a5:ff:67:18:
                    fd:5c:3e:5c:44:1c:97:f1:72:81:d2:eb:dc:32:8d:
                    76:5e:23:d8:8a:68:54:17:be:98:b9:6f:4e:c8:a7:
                    c9:5b:ea:10:88:f1:d9:c1:da:17:19:d4:22:2a:33:
                    2e:f7:78:db:03:88:b7:1c:10:2d:45:02:97:30:a2:
                    3e:78:4c:db:18:f7:8a:f6:1e:91:fe:cc:98:be:de:
                    17:71:39:76:dd:a5:fc:df:02:34:eb:9e:5b:2c:ae:
                    45:54:4a:bb:a4:8b:9d:51:55:84:7e:64:c0:fe:8b:
                    4e:ae:05:56:00:74:83:1e:51:28:a8:8a:43:d3:c5:
                    52:e7:af:61:46:0f:53:b6:d3:56:ff:2b:fd:5c:56:
                    6f:29:70:21:97:48:da:96:fd:3c:45:4e:71:29:bf:
                    ea:04:e7:11:ec:5d:3d:7b:9a:9e:07:56:11:b7:a4:
                    93:0c:38:20:0f:1e:dc:54:c1:55:cd:c1:5d:59:7b:
                    fe:32:26:a3:73:cb:e4:8f:10:38:38:11:af:44:1e:
                    6e:2d:7d:b3:9b:a0:ca:ca:1b:54:9c:c1:27:86:d2:
                    62:a8:16:25:fc:79:d8:f3:c4:54:e2:54:5a:84:3c:
                    ac:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:77:1C:61:DE:50:51:F7:2A:E9:A6:58:0E:04:0E:D6:D5:83:C3:76
            X509v3 Authority Key Identifier:
                keyid:72:4E:69:7E:16:73:A7:C1:1A:6F:50:E5:1F:CE:48:99:42:BA:AA:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3w7rh7r94tNhE51b1U3eW8hUhBUDeFsS7f31BFDT8oBL/0/724E697E1673A7C11A6F50E51FCE489942BAAA02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/724E697E1673A7C11A6F50E51FCE489942BAAA02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3w7rh7r94tNhE51b1U3eW8hUhBUDeFsS7f31BFDT8oBL/0/323830343a353233633a3a2f33322d313238203d3e20323638353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:523c::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:ac:05:bb:e8:6d:4a:d7:b6:de:95:25:73:42:20:da:67:9f:
         0f:5d:51:bd:27:8e:40:ff:58:1c:6b:d4:dc:22:79:7b:c6:f3:
         ed:32:d0:dc:a4:8d:e3:5d:db:6e:95:6e:c5:53:07:41:6f:15:
         df:2e:ec:fc:fc:30:e2:8a:30:04:f8:ff:b9:44:6d:c3:c4:fa:
         27:06:d0:55:a9:c5:52:59:e1:09:e3:39:6e:1f:1d:33:3d:54:
         39:0b:e2:2e:24:71:1d:f1:94:8a:50:20:9e:b8:ee:a9:57:f2:
         77:42:84:87:9b:34:75:cd:db:63:1d:4c:f9:fa:63:dc:c3:21:
         a1:bf:d4:ed:46:13:52:5f:0e:c1:9c:55:9f:73:46:7e:c2:e3:
         b8:f3:ff:77:d2:a6:29:4a:31:cc:d8:fb:7b:e6:85:fd:a1:81:
         b9:c5:fd:88:be:06:8f:cd:f8:d9:dc:75:e3:b0:0e:f5:5b:a3:
         1e:12:13:10:d3:0c:25:39:fc:07:c6:5d:e2:a4:bc:ec:a3:56:
         ef:67:1f:4a:35:47:e9:62:9a:2d:a1:27:11:3c:fc:69:b1:1a:
         34:6d:ca:04:f8:bf:6d:60:98:0a:24:9b:16:7a:e1:73:e6:22:
         b0:e7:59:1b:78:17:6b:d8:eb:ed:ad:c9:ad:03:c9:55:12:58:
         0f:40:1b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 10:35:54 2025 by rpki-client