Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/323830343a373066343a3a2f33322d3332203d3e20323730373538.roa
File:                     323830343a373066343a3a2f33322d3332203d3e20323730373538.roa (raw, json)
Hash identifier:          +Z/eXsB5QQHYDEaadosilrdq8kvwPNKsnNFyir6zuqA=
Subject key identifier:   7B:D7:2F:4B:5F:EF:21:9A:95:9D:AF:E3:C0:55:E7:9E:C3:7E:7B:1B
Certificate issuer:       /CN=7BEEBD056146455EA8F344FAB5588758068DAA8A
Certificate serial:       62D39C49D00E07479C6DA63AEB9E5362DCC80004
Authority key identifier: 7B:EE:BD:05:61:46:45:5E:A8:F3:44:FA:B5:58:87:58:06:8D:AA:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BEEBD056146455EA8F344FAB5588758068DAA8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/323830343a373066343a3a2f33322d3332203d3e20323730373538.roa
Signing time:             Tue 17 Jun 2025 15:49:46 +0000
ROA not before:           Tue 17 Jun 2025 15:44:46 +0000
ROA not after:            Tue 16 Jun 2026 15:49:46 +0000
asID:                     270758
IP address blocks:        2804:70f4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/7BEEBD056146455EA8F344FAB5588758068DAA8A.crl
                          rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/7BEEBD056146455EA8F344FAB5588758068DAA8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BEEBD056146455EA8F344FAB5588758068DAA8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 14:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d3:9c:49:d0:0e:07:47:9c:6d:a6:3a:eb:9e:53:62:dc:c8:00:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BEEBD056146455EA8F344FAB5588758068DAA8A
        Validity
            Not Before: Jun 17 15:44:46 2025 GMT
            Not After : Jun 16 15:49:46 2026 GMT
        Subject: CN=7BD72F4B5FEF219A959DAFE3C055E79EC37E7B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9e:21:22:48:18:98:03:20:15:79:a2:e7:fe:
                    fd:0b:b2:34:c3:aa:58:4c:a3:37:b8:52:94:1f:e0:
                    07:70:16:31:68:4b:12:34:f4:29:86:a7:95:d3:f9:
                    8f:93:90:55:1b:9b:8d:34:5c:11:00:5d:fa:d1:b2:
                    ea:b7:0a:36:26:e5:0e:06:19:05:e3:5c:da:42:31:
                    80:63:59:6c:4d:d0:61:f1:88:35:9a:26:ce:ac:29:
                    9d:f8:05:d2:77:a0:56:8f:9e:8d:41:cf:8d:d5:7b:
                    89:2c:42:14:d5:f9:92:10:fa:53:d4:53:3b:43:6e:
                    b4:b5:0e:5f:0f:ca:8a:44:4e:1b:df:68:44:52:d4:
                    c1:d9:e2:94:36:3f:44:e3:58:56:b3:0f:e5:66:eb:
                    56:6e:ef:e6:60:e9:2f:89:89:c4:5f:02:d1:2b:ba:
                    46:40:ae:86:d3:bd:ad:a5:98:f0:ed:5d:ff:b4:aa:
                    5b:84:de:b5:d8:fa:7a:12:ac:1f:28:ca:19:c1:28:
                    31:66:c9:4e:3d:64:14:fa:45:52:df:b4:a3:3c:0b:
                    ce:66:23:0b:05:73:b2:22:5b:91:e1:9c:46:d7:2d:
                    16:ad:d6:8c:e2:d8:02:02:8d:7d:7d:6d:f0:ab:4c:
                    ad:4d:07:f2:76:34:04:1a:90:06:b3:3c:fc:e7:d0:
                    4b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D7:2F:4B:5F:EF:21:9A:95:9D:AF:E3:C0:55:E7:9E:C3:7E:7B:1B
            X509v3 Authority Key Identifier:
                keyid:7B:EE:BD:05:61:46:45:5E:A8:F3:44:FA:B5:58:87:58:06:8D:AA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/7BEEBD056146455EA8F344FAB5588758068DAA8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BEEBD056146455EA8F344FAB5588758068DAA8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/323830343a373066343a3a2f33322d3332203d3e20323730373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:b9:06:42:a0:60:d6:3e:12:30:2d:93:3b:26:0e:3a:72:c3:
         bc:10:06:47:8a:ef:37:a0:61:af:e3:c9:3f:46:8f:a8:e0:b1:
         1e:9b:38:25:12:3d:ac:6f:a3:b9:e1:31:33:6e:9b:0a:10:d1:
         ec:bc:64:ed:9d:a1:8b:9f:b3:d8:d0:b1:f9:ad:8d:82:ed:a2:
         3d:28:9f:98:21:14:9c:fe:bb:1d:fd:ac:57:c7:bb:a2:1e:61:
         60:e5:2d:05:cb:81:5a:e1:2c:e7:62:12:e9:93:c7:bb:ca:70:
         67:6f:1a:b4:57:36:fd:e7:3a:3f:cc:79:d6:c7:d3:dd:13:16:
         49:41:67:0a:bd:dd:c6:08:65:80:ad:57:11:69:58:be:69:52:
         f2:d2:55:f3:99:77:57:62:a4:29:6c:2e:67:75:7a:fd:b3:eb:
         a5:de:2a:58:dd:00:c2:56:84:18:2d:88:4c:3c:61:61:ca:db:
         5a:4d:62:40:63:ca:96:12:cc:e8:e5:79:d4:f1:15:a7:98:17:
         cf:22:88:b5:57:2f:7c:eb:2a:13:f9:48:48:23:e0:50:6d:4b:
         1f:c6:ba:e9:3d:91:d4:a0:0b:5c:a9:68:ca:c3:98:78:03:8b:
         68:e7:a7:b9:70:3c:da:b8:f3:42:8b:6b:e8:59:55:15:45:5a:
         8b:29:9a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 15:26:20 2025 by rpki-client