Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/323830343a373537633a3a2f33342d3334203d3e20323731303530.roa
File:                     323830343a373537633a3a2f33342d3334203d3e20323731303530.roa (raw, json)
Hash identifier:          JLW8JmF1mHNHPgFpHaxoNr5MUApnWoi6lBWEXXicmm8=
Subject key identifier:   5F:82:0A:BC:B7:93:DD:44:C3:99:6A:F4:78:AE:AE:8F:2F:05:20:C6
Certificate issuer:       /CN=77FC05774545175D19D108F204EAE421372252B0
Certificate serial:       129BD1A71A96965D2752769C49B49126E775A8D8
Authority key identifier: 77:FC:05:77:45:45:17:5D:19:D1:08:F2:04:EA:E4:21:37:22:52:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77FC05774545175D19D108F204EAE421372252B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/323830343a373537633a3a2f33342d3334203d3e20323731303530.roa
Signing time:             Thu 05 Jun 2025 16:10:59 +0000
ROA not before:           Thu 05 Jun 2025 16:05:59 +0000
ROA not after:            Thu 04 Jun 2026 16:10:59 +0000
asID:                     271050
IP address blocks:        2804:757c::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/77FC05774545175D19D108F204EAE421372252B0.crl
                          rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/77FC05774545175D19D108F204EAE421372252B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77FC05774545175D19D108F204EAE421372252B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Jun 2025 20:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:9b:d1:a7:1a:96:96:5d:27:52:76:9c:49:b4:91:26:e7:75:a8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77FC05774545175D19D108F204EAE421372252B0
        Validity
            Not Before: Jun  5 16:05:59 2025 GMT
            Not After : Jun  4 16:10:59 2026 GMT
        Subject: CN=5F820ABCB793DD44C3996AF478AEAE8F2F0520C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cf:78:26:04:50:38:66:dd:aa:ff:2f:d4:38:
                    95:73:ca:81:f6:fc:fb:28:fb:6c:9f:c0:1b:3c:e3:
                    2c:28:11:0d:3b:46:1d:e5:6c:10:57:0b:42:61:fc:
                    d2:a2:82:14:08:15:36:cf:fa:91:d3:02:4b:de:0a:
                    5b:09:13:b0:1a:24:04:30:a7:48:01:8f:5c:87:de:
                    1b:11:2d:38:12:dd:ec:68:df:7a:7a:c5:8c:f0:02:
                    10:b8:18:0d:90:dc:19:65:ec:ef:90:6a:b6:00:83:
                    8e:c9:7d:b8:e3:3e:99:b7:4a:68:08:4f:00:3d:50:
                    64:d5:b3:6c:09:ef:99:45:73:f4:0d:61:1f:ea:2c:
                    a0:45:13:4f:17:2f:5e:78:61:c1:e6:af:f0:2a:ee:
                    24:c1:12:a9:b0:be:fe:a4:d2:b4:44:1f:03:1b:19:
                    92:a9:37:77:87:7e:76:9f:93:8c:f4:25:f0:64:3c:
                    b3:a1:77:19:34:70:46:1f:c1:69:27:00:14:31:ea:
                    c1:4a:21:06:87:f4:e0:52:f3:6e:6d:39:bc:54:8c:
                    d1:8a:8e:1a:a0:7b:44:b3:6f:99:fb:da:ca:9d:53:
                    f7:c6:1b:db:4f:67:89:e2:ec:fb:bf:1e:d1:45:af:
                    83:c2:0e:f2:b8:31:de:bd:1a:62:24:b7:76:67:26:
                    28:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:82:0A:BC:B7:93:DD:44:C3:99:6A:F4:78:AE:AE:8F:2F:05:20:C6
            X509v3 Authority Key Identifier:
                keyid:77:FC:05:77:45:45:17:5D:19:D1:08:F2:04:EA:E4:21:37:22:52:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/77FC05774545175D19D108F204EAE421372252B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77FC05774545175D19D108F204EAE421372252B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/323830343a373537633a3a2f33342d3334203d3e20323731303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:757c::/34

    Signature Algorithm: sha256WithRSAEncryption
         8a:c1:08:29:55:df:c4:b2:b6:49:39:da:33:21:bb:46:f8:aa:
         a6:94:0a:52:84:a4:67:83:18:b8:db:f4:b1:ff:c7:13:f2:e3:
         d8:69:aa:d3:e7:d3:bc:42:04:73:a5:4f:8c:c2:f0:ad:90:dd:
         16:12:ff:8e:59:d8:dd:38:64:77:37:f8:a3:24:e0:0a:39:c0:
         e6:fc:3f:bd:e6:84:e4:f8:e1:41:0b:c5:45:c6:ff:c9:f5:e7:
         43:72:cf:f5:0a:c8:78:97:cc:28:e0:94:30:ac:29:e1:41:be:
         cd:87:07:9a:a0:ca:c2:fc:6f:04:f3:43:6c:7a:6f:fb:eb:6f:
         db:ef:d3:31:d8:fd:a4:3e:0d:01:a2:d8:4d:49:94:b8:d3:8e:
         6f:18:b3:b2:1e:f8:81:1e:aa:c3:96:83:18:47:91:7d:f2:bc:
         33:2d:2e:e0:e0:3e:1c:84:5d:f5:69:56:a0:06:ec:b4:9f:2c:
         fc:77:03:1f:cf:f3:04:09:5b:06:cc:c2:17:82:ea:6b:bb:a2:
         42:ba:fb:fc:3f:7b:58:6e:d4:1d:17:1f:01:57:3e:9e:cb:c7:
         f0:33:c7:a5:04:ad:3e:a0:84:53:a0:52:87:6e:df:73:b2:59:
         59:ff:f4:47:58:8c:9d:d7:c3:e9:89:29:a0:fd:54:ff:db:fc:
         a0:18:64:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:14:01 2025 by rpki-client