Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/323830313a38303a336532303a3a2f34342d313238203d3e20323731323436.roa
File:                     323830313a38303a336532303a3a2f34342d313238203d3e20323731323436.roa (raw, json)
Hash identifier:          XUzXrTsTCyuigPr0WihWKO07DQmS04dUm56lhY63NLU=
Subject key identifier:   07:68:8B:77:E7:73:1E:B8:00:78:7E:26:D1:3E:C4:40:60:2B:57:92
Certificate issuer:       /CN=D6D9739B5280D82829AFAD531E39D5FA86E04AD0
Certificate serial:       745295C8229600D13769DEE234B77710E58A530A
Authority key identifier: D6:D9:73:9B:52:80:D8:28:29:AF:AD:53:1E:39:D5:FA:86:E0:4A:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/323830313a38303a336532303a3a2f34342d313238203d3e20323731323436.roa
Signing time:             Sat 08 Mar 2025 15:29:36 +0000
ROA not before:           Sat 08 Mar 2025 15:24:36 +0000
ROA not after:            Sat 07 Mar 2026 15:29:36 +0000
asID:                     271246
IP address blocks:        2801:80:3e20::/44 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.crl
                          rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 06:19:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:52:95:c8:22:96:00:d1:37:69:de:e2:34:b7:77:10:e5:8a:53:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6D9739B5280D82829AFAD531E39D5FA86E04AD0
        Validity
            Not Before: Mar  8 15:24:36 2025 GMT
            Not After : Mar  7 15:29:36 2026 GMT
        Subject: CN=07688B77E7731EB800787E26D13EC440602B5792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:aa:59:a8:ba:50:c4:0f:f6:00:fe:de:bb:e4:
                    48:21:8f:ab:74:e8:e3:02:c4:b5:a1:86:59:ff:b8:
                    dd:3b:74:a7:a5:ba:0a:66:4d:78:12:51:72:a3:19:
                    26:10:a9:ab:ff:0e:a6:22:a9:68:18:ff:76:68:6f:
                    43:7d:01:69:e1:9d:df:2f:2b:c8:67:ee:66:45:29:
                    85:0e:b1:1f:9c:ee:f4:de:d0:0c:81:b6:1f:de:ec:
                    af:1f:16:be:6c:45:b8:f8:58:95:5a:4b:91:55:17:
                    00:ce:71:f4:80:6f:a0:97:34:fc:c7:f9:3e:1b:fe:
                    71:e2:49:ee:cb:10:66:5c:b3:a9:af:1b:fc:1d:40:
                    a0:e6:6b:00:44:24:45:ef:89:b1:35:2c:ec:a9:b1:
                    ff:36:ba:fc:0c:fa:62:6e:16:69:bc:b7:a6:63:2d:
                    de:6e:21:14:33:15:00:d6:04:11:c5:df:03:d3:b5:
                    a8:56:92:40:2c:f1:cc:cd:16:39:4f:aa:7d:ba:f7:
                    b5:f5:83:f6:68:ca:c2:08:8a:15:cb:3f:27:c0:6e:
                    90:7e:72:eb:6e:4d:7c:f5:bd:72:08:c8:f6:fe:0c:
                    7b:d1:9d:63:e4:af:ee:81:0f:70:77:f8:5e:aa:53:
                    ac:7c:bd:b1:64:b7:d3:2d:c8:dd:fc:2f:ca:e7:a5:
                    66:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:68:8B:77:E7:73:1E:B8:00:78:7E:26:D1:3E:C4:40:60:2B:57:92
            X509v3 Authority Key Identifier:
                keyid:D6:D9:73:9B:52:80:D8:28:29:AF:AD:53:1E:39:D5:FA:86:E0:4A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/323830313a38303a336532303a3a2f34342d313238203d3e20323731323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:3e20::/44

    Signature Algorithm: sha256WithRSAEncryption
         7e:99:b9:fa:19:6e:d5:c8:ef:82:2e:a5:d4:1c:28:88:b2:36:
         d7:f2:ea:e4:e2:1e:61:ff:18:e1:9c:0f:b7:17:ba:42:23:f6:
         2f:79:02:3a:ff:68:fc:ff:25:a0:5b:36:fb:87:52:51:9e:4d:
         3e:bd:fe:48:ff:41:54:cf:c1:c7:50:ff:39:6a:5c:d9:a1:05:
         7e:63:df:97:fe:25:65:21:e3:b7:9c:15:9f:ab:45:28:34:57:
         71:74:ab:69:84:a2:76:46:6a:b0:44:38:f1:a3:11:5c:bd:f7:
         5c:3d:7c:6c:80:73:74:07:dc:fb:d2:c0:d6:7b:21:39:65:fa:
         e2:db:d7:5c:1d:22:d1:44:e8:b7:d7:61:b6:d3:bd:2b:c8:65:
         34:44:2b:de:17:33:d2:5a:9d:47:82:0f:b5:6b:dd:40:cf:86:
         a5:a5:79:70:08:f2:dc:04:19:21:0e:95:15:ad:03:5b:dd:78:
         4f:d7:79:f9:fa:4f:6e:1e:cd:24:8c:db:c6:66:ce:92:48:ce:
         8c:a0:b9:00:12:91:dd:37:ad:b3:a9:f1:b4:31:2e:3e:25:3b:
         1f:43:10:dd:8b:e2:fd:f3:6c:26:26:de:0b:83:15:d4:90:a6:
         7f:78:70:21:b4:4f:f9:5f:92:ad:21:b4:89:48:83:51:c2:7a:
         20:56:54:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:29:13 2025 by rpki-client