Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a3a2f33322d3332203d3e20323731313636.roa
File:                     323830343a373734343a3a2f33322d3332203d3e20323731313636.roa (raw, json)
Hash identifier:          xj0HXmCi3+nuO9evTuFxKMPwLUzzhbRjUwq9ukBX1Lc=
Subject key identifier:   08:6E:7B:67:11:33:B6:FB:F7:B8:04:52:B6:58:CB:4C:04:D3:F2:32
Certificate issuer:       /CN=0343B8928CA78A1D3548AF9EB5A390CF7664FEBA
Certificate serial:       5779E36E4F2D9DBC0D634633B2BF2A88A1894F5F
Authority key identifier: 03:43:B8:92:8C:A7:8A:1D:35:48:AF:9E:B5:A3:90:CF:76:64:FE:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a3a2f33322d3332203d3e20323731313636.roa
Signing time:             Thu 31 Jul 2025 00:06:57 +0000
ROA not before:           Thu 31 Jul 2025 00:01:57 +0000
ROA not after:            Thu 30 Jul 2026 00:06:57 +0000
asID:                     271166
IP address blocks:        2804:7744::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.crl
                          rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 00:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:79:e3:6e:4f:2d:9d:bc:0d:63:46:33:b2:bf:2a:88:a1:89:4f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0343B8928CA78A1D3548AF9EB5A390CF7664FEBA
        Validity
            Not Before: Jul 31 00:01:57 2025 GMT
            Not After : Jul 30 00:06:57 2026 GMT
        Subject: CN=086E7B671133B6FBF7B80452B658CB4C04D3F232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d5:a9:ec:aa:b4:db:de:85:3e:48:e8:ab:55:
                    ee:d9:fc:0b:c0:b4:d0:a1:3f:85:43:99:f7:e4:4f:
                    56:49:12:6e:bb:0f:99:57:7f:44:5d:23:a7:02:e0:
                    e3:47:a7:76:2d:24:ca:f6:8f:e6:0b:6a:5a:3b:26:
                    7d:b5:7d:d4:35:a5:af:04:e5:6e:a8:49:ae:62:29:
                    83:fc:d7:b2:67:22:ed:7e:26:f4:e5:8e:86:6d:10:
                    de:eb:eb:8b:f6:10:0d:c7:58:c0:4d:e6:23:6c:e7:
                    aa:2e:a0:25:48:ab:36:b7:8a:e3:4e:48:1b:ff:24:
                    97:1e:fb:20:28:82:2f:5f:50:60:6a:d7:be:e9:d6:
                    3c:b9:a7:18:36:cf:43:12:9a:7b:48:a1:a9:b7:63:
                    81:ea:f6:69:56:f1:f7:21:f2:ff:61:b8:a4:fd:67:
                    df:ad:86:5a:c1:3d:08:76:e6:93:9e:99:04:66:3b:
                    e6:f4:3e:c3:52:f0:cb:2b:d5:c4:57:3d:37:7f:48:
                    b6:1c:a5:37:90:5e:6d:32:8e:ea:fc:a3:3d:4a:51:
                    ed:b3:4c:50:f6:96:ff:86:5b:9b:74:42:b1:a4:b7:
                    95:ed:3f:9d:68:6e:a4:dc:96:6f:4b:91:d2:6b:21:
                    1d:d1:eb:be:ea:a8:87:a6:a8:39:75:11:1d:7f:25:
                    35:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6E:7B:67:11:33:B6:FB:F7:B8:04:52:B6:58:CB:4C:04:D3:F2:32
            X509v3 Authority Key Identifier:
                keyid:03:43:B8:92:8C:A7:8A:1D:35:48:AF:9E:B5:A3:90:CF:76:64:FE:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a3a2f33322d3332203d3e20323731313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7744::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:51:bc:c3:64:4e:a9:e0:04:1b:9b:eb:15:c2:d6:59:2d:48:
         fa:aa:7b:20:22:42:e7:b4:51:85:3d:67:69:61:42:af:99:66:
         8c:9a:e7:78:36:bd:37:83:8b:13:6c:5d:19:eb:c3:6a:f6:bb:
         66:0c:39:dd:04:20:cf:bc:7c:c1:58:0b:54:46:ff:dc:2d:16:
         c6:c9:f0:4b:a3:b1:6f:37:f7:e8:f3:f5:09:81:f8:2a:5a:6e:
         17:f1:84:46:99:cd:6f:19:8f:59:88:4a:60:07:bf:86:df:9b:
         62:14:97:38:19:1e:c5:13:b0:13:0d:0b:cd:c3:ba:27:1a:5f:
         02:d0:7a:47:60:67:9e:13:d7:92:c5:86:0b:0c:a0:8d:4e:7f:
         65:fe:75:bc:eb:f1:c3:ee:25:4e:f6:b0:e4:51:73:15:45:b3:
         c5:e3:86:4a:ec:6f:af:58:81:d9:ae:94:8a:ac:7b:9a:68:fc:
         0b:56:14:7a:97:f0:ad:ad:2f:b2:68:90:56:ac:cf:24:b7:ad:
         f0:7b:9e:e0:c1:10:d2:5d:d7:13:a5:42:3e:9b:12:7c:f4:e0:
         97:23:e1:a6:a2:b5:79:69:17:e3:81:53:20:85:dd:1a:7b:74:
         99:f7:75:e6:83:ad:c9:21:a5:e8:7f:54:28:6b:61:f4:a8:7d:
         05:43:c1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:15:54 2025 by rpki-client