Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/323830343a386535303a343030303a3a2f33342d3334203d3e20323733343137.roa
File:                     323830343a386535303a343030303a3a2f33342d3334203d3e20323733343137.roa (raw, json)
Hash identifier:          JG9QxupPHof9x09IrcAafnIV9CHPJravr9NNkOjGGME=
Subject key identifier:   6C:8E:32:17:97:FD:7F:30:48:1B:8E:1F:89:2F:C7:C2:F0:94:70:A9
Certificate issuer:       /CN=0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1
Certificate serial:       060C3C447E2F762CDF2023C6E24EF9680A78147E
Authority key identifier: 0E:A5:8A:AB:56:6A:B7:47:E7:DD:6A:0E:CB:4C:77:5E:67:07:D6:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/323830343a386535303a343030303a3a2f33342d3334203d3e20323733343137.roa
Signing time:             Wed 11 Jun 2025 22:03:12 +0000
ROA not before:           Wed 11 Jun 2025 21:58:12 +0000
ROA not after:            Wed 10 Jun 2026 22:03:12 +0000
asID:                     273417
IP address blocks:        2804:8e50:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.crl
                          rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 17:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:0c:3c:44:7e:2f:76:2c:df:20:23:c6:e2:4e:f9:68:0a:78:14:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1
        Validity
            Not Before: Jun 11 21:58:12 2025 GMT
            Not After : Jun 10 22:03:12 2026 GMT
        Subject: CN=6C8E321797FD7F30481B8E1F892FC7C2F09470A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:50:86:78:8c:12:46:5d:37:54:68:9e:a6:ff:
                    77:50:8e:8d:8e:64:2e:fe:55:87:fc:aa:bd:fd:4a:
                    14:69:63:66:e8:3b:dc:cc:e4:8d:01:db:0a:56:74:
                    97:d3:a4:e7:8a:0f:6d:02:45:ae:ae:6e:d5:ac:28:
                    b7:51:dc:30:bc:e8:60:6b:54:ae:c4:42:17:38:37:
                    22:57:a0:85:fd:6a:c7:19:47:53:9c:70:b6:51:c1:
                    45:38:3b:28:f3:ae:7f:d4:6b:5f:50:8c:b2:89:8b:
                    75:76:28:8f:8d:32:17:67:b8:17:47:17:75:ab:3e:
                    b4:e5:95:39:de:b4:e1:41:40:2f:3f:8a:b0:a7:28:
                    04:b0:92:23:c5:c1:37:e7:1a:9c:13:f4:c8:10:2e:
                    3a:49:7a:43:9c:78:0c:cb:39:e6:8a:28:b9:93:74:
                    ce:f1:77:2b:e4:4b:8f:b7:ea:82:39:ff:fc:83:5f:
                    1e:a0:31:27:91:0a:86:f8:0a:ed:74:81:d2:8a:b3:
                    9a:76:03:d7:ed:4a:72:f4:81:f4:67:81:57:88:ba:
                    f6:90:b5:a7:3c:ef:93:95:80:ee:e9:fd:60:4b:41:
                    bc:9a:b9:25:39:d7:3c:15:8d:66:fa:06:66:2e:77:
                    8f:f1:ff:1e:a5:b9:ae:f3:f9:c3:a1:e8:59:2b:24:
                    e3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8E:32:17:97:FD:7F:30:48:1B:8E:1F:89:2F:C7:C2:F0:94:70:A9
            X509v3 Authority Key Identifier:
                keyid:0E:A5:8A:AB:56:6A:B7:47:E7:DD:6A:0E:CB:4C:77:5E:67:07:D6:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/323830343a386535303a343030303a3a2f33342d3334203d3e20323733343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e50:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b8:d0:c9:55:d5:ba:8c:35:86:e1:dd:67:35:1f:70:6c:fd:17:
         50:67:9d:c4:f3:a2:2f:55:e6:31:0a:97:6e:ed:6c:d2:04:09:
         3b:98:3e:43:14:7c:29:b9:f0:8f:13:52:6b:0e:43:e8:be:36:
         ab:4c:84:f1:15:2a:8f:89:25:2a:da:d9:51:21:0f:4f:a2:0b:
         fb:7a:32:9c:4b:52:6f:0f:36:be:cf:35:90:d0:b4:ad:e5:e1:
         40:fa:6b:fc:5e:b0:92:11:bb:15:6f:ab:e1:46:a8:36:da:8c:
         cc:ce:ec:fe:43:72:87:6c:a2:b3:03:d3:21:e9:92:98:34:a3:
         1e:1b:e8:27:20:1b:14:91:61:b1:3d:b8:f5:d4:d8:8c:93:dc:
         3c:cb:52:f0:22:16:eb:5f:7b:78:31:4f:26:88:2e:40:69:f2:
         44:fa:82:71:7b:bc:46:41:50:ed:ad:94:12:a8:6c:48:68:5d:
         86:74:d7:5a:16:64:49:02:e0:8b:89:03:07:7f:36:bb:ae:9a:
         91:b2:f4:e2:3a:75:e5:5d:07:51:2f:70:99:e6:fa:3c:8e:23:
         46:54:31:f3:8c:1c:42:27:70:b6:4b:d3:1c:d2:75:5c:66:06:
         11:0e:e8:83:97:7a:fc:84:f9:5a:4c:00:76:e8:eb:ed:22:da:
         95:ac:25:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:08:19 2025 by rpki-client