Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/323830343a376663343a3a2f33332d3333203d3e20323731373038.roa
File:                     323830343a376663343a3a2f33332d3333203d3e20323731373038.roa (raw, json)
Hash identifier:          Mhbw2LZdn2s8A8jdRjcT+74OYsv0DSHzcOPokMjEygU=
Subject key identifier:   AF:ED:C7:89:35:7A:EC:FF:64:99:99:C1:C0:B7:C6:05:33:1C:43:05
Certificate issuer:       /CN=7040E70A343ED61D14BF33985442CD6EB7927B4D
Certificate serial:       4957F613EB2C89D6853A335D1941DF7133E1A26F
Authority key identifier: 70:40:E7:0A:34:3E:D6:1D:14:BF:33:98:54:42:CD:6E:B7:92:7B:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/323830343a376663343a3a2f33332d3333203d3e20323731373038.roa
Signing time:             Tue 29 Jul 2025 22:34:43 +0000
ROA not before:           Tue 29 Jul 2025 22:29:43 +0000
ROA not after:            Tue 28 Jul 2026 22:34:43 +0000
asID:                     271708
IP address blocks:        2804:7fc4::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.crl
                          rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 02:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:57:f6:13:eb:2c:89:d6:85:3a:33:5d:19:41:df:71:33:e1:a2:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7040E70A343ED61D14BF33985442CD6EB7927B4D
        Validity
            Not Before: Jul 29 22:29:43 2025 GMT
            Not After : Jul 28 22:34:43 2026 GMT
        Subject: CN=AFEDC789357AECFF649999C1C0B7C605331C4305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:36:c2:40:43:86:75:ed:6f:5b:00:8a:49:32:
                    f0:bc:8c:73:24:71:b8:66:bc:25:55:de:98:6c:26:
                    97:4a:a4:96:91:a8:be:70:36:dd:da:b9:19:30:e3:
                    80:d2:9d:77:40:62:46:9a:0c:27:8d:2d:8e:5a:88:
                    ba:be:0d:dc:a3:cc:c0:25:83:4e:4b:68:f5:ef:a4:
                    5d:39:74:95:a7:2f:8d:a1:71:21:0d:86:ed:7a:d1:
                    2f:e5:d7:11:17:58:d3:5c:45:b6:2e:29:61:c2:c8:
                    0b:d4:c3:46:de:75:30:e5:eb:48:95:05:94:23:cc:
                    d0:04:f4:f1:96:4e:e1:d9:aa:e3:d3:86:70:e7:b8:
                    6b:d3:40:9b:21:5e:5b:e8:af:07:43:66:6f:cb:09:
                    a3:3b:98:f5:9d:96:b5:5e:e8:fd:23:ea:4b:95:d4:
                    64:f1:58:c1:6b:e8:f1:85:33:88:9d:d0:8f:4e:c8:
                    5d:bf:1f:d2:20:28:4c:45:03:51:d5:33:ff:aa:86:
                    2c:3b:05:f2:dd:96:78:fe:15:5f:c6:1c:1c:b2:9e:
                    c2:f1:24:16:b3:2e:6b:71:d3:42:fb:0f:d8:5e:a0:
                    6a:94:ca:e4:26:df:b6:ce:71:26:85:6b:29:3d:98:
                    b1:35:04:8d:30:a0:27:cd:42:c0:30:9b:7c:ef:74:
                    94:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:ED:C7:89:35:7A:EC:FF:64:99:99:C1:C0:B7:C6:05:33:1C:43:05
            X509v3 Authority Key Identifier:
                keyid:70:40:E7:0A:34:3E:D6:1D:14:BF:33:98:54:42:CD:6E:B7:92:7B:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/323830343a376663343a3a2f33332d3333203d3e20323731373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fc4::/33

    Signature Algorithm: sha256WithRSAEncryption
         23:8b:78:df:2d:27:b7:99:e9:0e:61:59:bc:64:d2:98:94:ef:
         05:31:29:96:e3:b7:8c:ec:94:f9:ec:f5:08:33:3d:44:63:46:
         70:bd:5c:13:79:1f:bc:3d:8f:cf:07:32:62:fe:31:a5:87:e6:
         24:13:a3:21:35:f0:b6:d1:c2:ee:49:5c:8e:6d:62:ba:e3:8e:
         40:5f:82:7a:48:ab:57:43:5b:95:ef:77:c1:9b:ae:03:df:11:
         8a:22:c1:ec:e1:a8:94:a5:9e:62:25:44:19:44:55:74:0e:4e:
         27:c5:ac:72:16:1b:25:5c:80:07:1e:d3:9e:3a:39:c1:ba:7c:
         db:97:47:aa:3e:62:e3:c0:11:df:e3:1f:ec:0f:a2:7e:3c:53:
         34:51:79:e2:1d:c2:b6:49:c1:d1:ff:a4:6a:c8:64:57:0d:ea:
         4c:6e:7f:42:f6:2f:b8:53:bf:99:3d:06:59:d6:cf:78:e6:f2:
         11:7c:00:7d:c0:fe:7c:5f:57:ce:3a:bf:f4:61:0e:c1:9e:2b:
         b4:67:17:de:17:46:84:19:00:a1:a2:e7:88:42:b5:84:1e:10:
         f5:1e:06:1e:4b:bf:d0:b7:45:8a:fa:67:2a:fc:12:fe:17:96:
         40:c0:3e:b1:d8:5b:3e:02:f7:5b:89:9c:59:f4:47:03:92:ff:
         a6:5b:a6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:49:45 2025 by rpki-client