Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/323830343a376663343a383030303a3a2f33332d3333203d3e20323731373038.roa
File:                     323830343a376663343a383030303a3a2f33332d3333203d3e20323731373038.roa (raw, json)
Hash identifier:          GHBVxgnBfHRhdMdttxO2cVBkYjtiXfaqedtAdO+CMrM=
Subject key identifier:   2B:56:4D:3B:4F:CC:DD:0E:3F:69:C1:93:8E:C5:44:79:E7:ED:E6:99
Certificate issuer:       /CN=7040E70A343ED61D14BF33985442CD6EB7927B4D
Certificate serial:       7E5D6AAB26BA33C9D07389F07D4E4B94D7762602
Authority key identifier: 70:40:E7:0A:34:3E:D6:1D:14:BF:33:98:54:42:CD:6E:B7:92:7B:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/323830343a376663343a383030303a3a2f33332d3333203d3e20323731373038.roa
Signing time:             Tue 29 Jul 2025 22:34:44 +0000
ROA not before:           Tue 29 Jul 2025 22:29:44 +0000
ROA not after:            Tue 28 Jul 2026 22:34:44 +0000
asID:                     271708
IP address blocks:        2804:7fc4:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.crl
                          rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 04:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:5d:6a:ab:26:ba:33:c9:d0:73:89:f0:7d:4e:4b:94:d7:76:26:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7040E70A343ED61D14BF33985442CD6EB7927B4D
        Validity
            Not Before: Jul 29 22:29:44 2025 GMT
            Not After : Jul 28 22:34:44 2026 GMT
        Subject: CN=2B564D3B4FCCDD0E3F69C1938EC54479E7EDE699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3a:ec:a9:24:22:63:99:9b:73:a3:80:d9:50:
                    f0:e2:28:46:04:da:ab:f7:e8:04:33:c4:97:b0:ae:
                    6f:b3:65:6c:69:40:84:3a:4a:76:63:54:d8:6f:35:
                    76:15:5e:ca:05:9f:f9:62:82:45:e5:be:70:c3:29:
                    04:df:a4:e7:58:9b:34:27:c2:64:2c:15:17:f2:de:
                    ee:c3:b4:2c:cb:a7:43:a2:57:61:7a:55:b6:de:35:
                    9d:28:53:fb:7d:20:4e:9a:92:14:67:1f:88:a7:0d:
                    c2:bb:cb:18:6a:78:47:2d:9f:e5:2c:4d:77:f4:98:
                    16:19:57:fa:1d:15:a2:aa:94:61:ef:50:e6:e2:b9:
                    cc:48:86:e7:73:8f:c0:bc:a3:5e:66:5a:3a:76:a3:
                    30:30:87:78:3b:ce:00:e1:d5:94:9b:d9:0e:37:bc:
                    b5:6e:d2:9e:5d:1d:45:15:2c:76:45:8d:2f:bd:60:
                    0c:99:e4:bb:eb:03:43:53:07:25:dc:c2:3a:ca:dd:
                    03:db:7f:17:41:22:6d:00:36:32:18:62:76:29:98:
                    8c:c9:64:cf:d3:5a:01:fd:f4:78:ee:48:31:a1:c4:
                    0e:0f:34:ca:34:6f:d3:dd:d4:26:3e:ff:81:ea:a3:
                    e3:9c:fd:04:2c:c3:4b:a4:b7:2c:bf:ae:59:44:92:
                    65:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:56:4D:3B:4F:CC:DD:0E:3F:69:C1:93:8E:C5:44:79:E7:ED:E6:99
            X509v3 Authority Key Identifier:
                keyid:70:40:E7:0A:34:3E:D6:1D:14:BF:33:98:54:42:CD:6E:B7:92:7B:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/323830343a376663343a383030303a3a2f33332d3333203d3e20323731373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fc4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7f:b5:91:c6:ea:50:e7:35:a4:73:ca:30:18:f0:a3:11:f3:09:
         16:d5:aa:ae:3a:19:8a:77:e8:0f:8d:a3:a8:e1:88:43:92:3e:
         ea:22:47:f4:5c:aa:8d:21:15:1c:a8:ed:71:cb:db:fc:19:fe:
         51:bd:f3:cf:f4:0b:2c:01:1e:ac:68:e1:1d:a6:cb:d2:76:6a:
         87:d0:74:6b:0f:54:96:17:47:a3:ab:d5:2e:79:a2:a4:72:ef:
         bc:19:9b:d0:c0:97:15:72:f6:91:f5:33:d8:c4:f1:4f:73:59:
         83:d3:fb:fd:32:eb:90:39:3e:fd:51:97:01:33:3f:4e:0d:87:
         48:3e:b6:73:0c:1d:fc:ba:a4:06:8f:4c:75:ae:e2:e2:56:a8:
         17:13:56:5f:1f:7a:43:a5:bb:65:90:35:55:c2:c6:ac:d2:a3:
         32:5b:5b:f6:f6:65:f5:ae:5b:5c:ba:81:2f:0a:e0:f6:c6:aa:
         7b:8e:56:96:8c:75:c1:fd:3b:61:bd:e2:78:cd:c3:18:67:5a:
         76:bb:98:16:05:d2:56:97:da:23:ba:46:c7:f4:c7:7c:4d:85:
         18:ff:14:eb:64:76:9d:b1:a6:95:a5:54:b7:2b:ae:36:a7:1d:
         c9:09:ec:f5:05:95:de:e5:60:e3:69:a2:49:5d:78:7e:7b:8a:
         ed:69:d4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:16:37 2025 by rpki-client