Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/323830343a386535303a383030303a3a2f33342d3334203d3e20323733343137.roa
File:                     323830343a386535303a383030303a3a2f33342d3334203d3e20323733343137.roa (raw, json)
Hash identifier:          6v2j7LwLIKQ0eJnpIDIuaoQf8ECL/I0FIP3MWge9yHg=
Subject key identifier:   9B:96:01:97:9B:86:0A:58:43:F3:9C:70:DE:B4:64:BB:AA:E9:18:AD
Certificate issuer:       /CN=0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1
Certificate serial:       4E2E39C59FAAD40FFBE51BEBD69C255F7AC79BAA
Authority key identifier: 0E:A5:8A:AB:56:6A:B7:47:E7:DD:6A:0E:CB:4C:77:5E:67:07:D6:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/323830343a386535303a383030303a3a2f33342d3334203d3e20323733343137.roa
Signing time:             Wed 11 Jun 2025 22:03:13 +0000
ROA not before:           Wed 11 Jun 2025 21:58:13 +0000
ROA not after:            Wed 10 Jun 2026 22:03:13 +0000
asID:                     273417
IP address blocks:        2804:8e50:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.crl
                          rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 17:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2e:39:c5:9f:aa:d4:0f:fb:e5:1b:eb:d6:9c:25:5f:7a:c7:9b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1
        Validity
            Not Before: Jun 11 21:58:13 2025 GMT
            Not After : Jun 10 22:03:13 2026 GMT
        Subject: CN=9B9601979B860A5843F39C70DEB464BBAAE918AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:04:08:f3:82:85:6a:a6:88:6b:26:b7:c2:
                    df:be:26:f7:e0:c1:81:3b:4d:50:28:26:54:c1:71:
                    37:c7:c3:f2:35:b7:2a:8b:0a:af:de:ca:cc:90:7c:
                    fb:fa:06:da:32:83:33:08:d3:71:18:ce:9f:12:f0:
                    f9:08:83:4d:6e:b9:8c:17:52:15:57:3c:37:9b:dc:
                    cf:c7:d7:df:b2:da:d6:ca:01:07:a7:a2:7b:2c:f4:
                    dd:bd:51:e1:69:8c:61:0b:8d:fe:3c:45:77:c8:47:
                    e9:20:03:4d:93:a3:35:bd:ba:8d:55:4c:98:12:09:
                    50:7c:f7:6e:a7:2b:cb:a6:e4:08:65:1e:40:a6:dd:
                    c2:e8:70:cb:12:10:ec:c4:2f:03:1e:9b:97:da:71:
                    fd:80:2d:06:bc:1b:c0:2e:37:db:68:49:77:2b:71:
                    f8:0c:82:b0:41:e2:73:73:73:8b:72:95:50:1c:aa:
                    b0:1d:78:5b:21:4c:d9:47:30:c0:47:27:a3:28:5d:
                    ce:36:e7:ce:ef:19:5b:4a:9b:46:21:d8:5f:3e:7f:
                    2c:6e:1c:68:69:c1:28:cb:b5:67:44:2d:58:d8:23:
                    d6:ef:75:30:07:6a:44:6f:be:4d:85:f6:28:0d:26:
                    94:8b:9e:f0:a9:18:e6:86:43:9e:f3:00:1e:52:a2:
                    e1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:96:01:97:9B:86:0A:58:43:F3:9C:70:DE:B4:64:BB:AA:E9:18:AD
            X509v3 Authority Key Identifier:
                keyid:0E:A5:8A:AB:56:6A:B7:47:E7:DD:6A:0E:CB:4C:77:5E:67:07:D6:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/323830343a386535303a383030303a3a2f33342d3334203d3e20323733343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e50:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         32:aa:78:f4:a7:3d:e7:99:ea:82:82:61:8c:e3:91:f8:90:8b:
         1e:e1:c7:80:19:6d:1d:ad:a7:93:a4:f3:c1:3f:88:50:b4:f7:
         28:c9:21:20:90:3d:af:11:bd:6d:83:cc:87:32:eb:67:4d:8a:
         95:c1:39:74:a4:16:38:84:18:7a:d5:32:c4:62:1e:9d:dd:61:
         93:12:05:3e:69:47:48:63:ec:98:0a:6e:12:77:99:e2:31:8d:
         ba:4d:1e:e6:e0:02:0d:02:75:1d:34:7b:5e:1c:3b:23:01:13:
         b8:07:09:35:1e:89:2f:8f:13:b9:72:9c:de:15:ee:a2:19:b7:
         12:b0:db:81:9f:a7:b9:fc:85:5c:d7:7a:92:1d:36:ec:df:83:
         ca:24:21:70:b7:d7:f6:62:58:34:cf:04:3f:f4:26:ec:a9:d9:
         7d:01:15:1c:95:43:48:ab:19:2a:8e:69:b2:ae:7a:cf:74:9c:
         1c:b2:a8:5a:79:75:2e:92:ec:2d:65:ca:a4:e1:8c:c2:2d:a0:
         62:6c:53:c2:02:b6:b8:da:ba:6b:3c:d5:38:39:ad:e6:f2:1e:
         00:cb:25:3a:9e:04:0f:26:e9:74:16:a8:a5:cf:a3:1f:90:51:
         4b:09:93:17:78:f9:2f:32:0f:3d:48:10:a2:9c:f7:6b:49:0a:
         bd:39:67:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:39:54 2025 by rpki-client