Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33332d3333203d3e20323638333038.roa
File:                     323830343a346632383a3a2f33332d3333203d3e20323638333038.roa (raw, json)
Hash identifier:          I/aqgxGbp5ZqDjPmCzjriRDWl3sX2qMortLoVzDbWXg=
Subject key identifier:   23:7E:A0:71:3A:35:1C:B5:27:0D:7E:BA:87:5A:CB:36:7C:D7:A0:3B
Certificate issuer:       /CN=7F02CF06C24FE53ED352072AD2B5F97F3CF893F1
Certificate serial:       5A415E6E42E958CD64BE8A990535BCB1CC01AD87
Authority key identifier: 7F:02:CF:06:C2:4F:E5:3E:D3:52:07:2A:D2:B5:F9:7F:3C:F8:93:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F02CF06C24FE53ED352072AD2B5F97F3CF893F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33332d3333203d3e20323638333038.roa
Signing time:             Fri 02 May 2025 18:50:17 +0000
ROA not before:           Fri 02 May 2025 18:45:17 +0000
ROA not after:            Fri 01 May 2026 18:50:17 +0000
asID:                     268308
IP address blocks:        2804:4f28::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/7F02CF06C24FE53ED352072AD2B5F97F3CF893F1.crl
                          rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/7F02CF06C24FE53ED352072AD2B5F97F3CF893F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F02CF06C24FE53ED352072AD2B5F97F3CF893F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 05 May 2025 10:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:41:5e:6e:42:e9:58:cd:64:be:8a:99:05:35:bc:b1:cc:01:ad:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F02CF06C24FE53ED352072AD2B5F97F3CF893F1
        Validity
            Not Before: May  2 18:45:17 2025 GMT
            Not After : May  1 18:50:17 2026 GMT
        Subject: CN=237EA0713A351CB5270D7EBA875ACB367CD7A03B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f9:ae:30:a0:a7:8a:02:19:be:33:51:fc:1a:
                    78:9f:ed:3c:cc:3f:c9:25:d5:43:45:e6:e0:03:a7:
                    c4:10:23:51:b5:37:65:05:1a:82:91:24:27:75:9f:
                    70:60:fd:db:a6:1b:db:60:9f:46:90:20:50:7c:51:
                    77:ab:2c:06:23:a1:6a:cf:5c:5f:05:62:05:ae:37:
                    8d:e6:8c:8a:03:7e:1a:f4:12:97:75:b5:4d:a4:7a:
                    28:67:91:10:a2:f3:49:e0:0d:98:a3:40:3b:22:be:
                    bb:07:05:17:fb:9f:fd:3d:3f:ff:01:42:2b:12:ee:
                    c2:d8:34:ee:97:83:01:d7:54:2b:c1:fd:15:0e:4b:
                    cd:64:c0:4a:d7:e3:1f:0d:ba:02:04:53:82:40:59:
                    f1:4a:e5:e9:b9:8e:d9:02:cb:1a:1c:53:59:05:fc:
                    da:04:7f:43:7e:c5:20:26:bb:c0:9d:6e:4c:d1:82:
                    93:43:6d:ac:88:60:d5:66:9e:f8:56:0b:9e:a3:4d:
                    62:eb:21:bf:e2:10:f4:88:ae:bf:09:59:56:5e:fa:
                    06:b3:be:73:e5:66:cf:6a:e9:a5:b6:12:76:d4:43:
                    93:b3:f9:6b:c9:e4:d6:ec:12:c8:ec:8e:86:5c:49:
                    55:6b:b0:bd:c8:96:3c:7c:c2:da:67:60:58:9e:5b:
                    a0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:7E:A0:71:3A:35:1C:B5:27:0D:7E:BA:87:5A:CB:36:7C:D7:A0:3B
            X509v3 Authority Key Identifier:
                keyid:7F:02:CF:06:C2:4F:E5:3E:D3:52:07:2A:D2:B5:F9:7F:3C:F8:93:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/7F02CF06C24FE53ED352072AD2B5F97F3CF893F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F02CF06C24FE53ED352072AD2B5F97F3CF893F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33332d3333203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f28::/33

    Signature Algorithm: sha256WithRSAEncryption
         76:b5:74:5f:5f:32:02:94:e6:41:d2:4e:be:ec:a4:d2:6d:ec:
         75:d2:ae:88:f9:93:38:9e:6b:80:be:fd:3f:f7:f5:7c:be:af:
         4a:07:bc:eb:18:3a:2a:26:3e:3a:07:6c:ae:df:4b:66:3c:a2:
         91:94:1c:69:b9:a2:60:b6:90:95:9d:55:87:0f:48:7c:f8:f3:
         61:9a:37:1f:25:3d:54:57:89:e5:6e:ff:e7:8a:bc:6d:9c:28:
         95:e0:28:c1:ae:2d:58:87:07:63:9d:58:ef:bf:d8:71:c9:e6:
         a5:b5:62:d9:2d:0e:16:e8:07:1c:be:b0:45:99:3c:e2:c0:e2:
         0d:5b:64:d7:60:2a:9a:48:73:43:2d:94:e4:aa:ab:ed:93:63:
         e6:ca:61:3f:4a:7a:49:b1:85:90:80:5e:d9:2a:57:23:f5:3d:
         93:d1:2c:48:b5:20:b6:9e:e9:fd:f2:ba:7a:75:b8:7e:6e:ca:
         35:3e:88:73:79:e6:e3:72:6a:6e:7c:33:e4:32:c2:ff:15:b6:
         f7:09:d1:65:48:79:4a:74:94:78:5f:05:ce:6c:22:63:0c:07:
         ba:cb:7d:08:dd:d0:6e:06:6b:aa:33:99:56:48:98:c7:1b:10:
         f6:75:c8:48:ec:5e:5f:4c:83:9f:e6:7c:a1:ed:ad:0f:c9:f9:
         66:ef:4a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 01:51:32 2025 by rpki-client