Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a613030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a613030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          WA7GkdxiFB2UEya0BOmH89EamOLEY3xHU/M5FETAJ5o=
Subject key identifier:   59:1D:BC:5D:29:7C:5A:40:E4:B0:AD:79:6D:88:8D:80:8B:43:78:70
Certificate issuer:       /CN=BDF984AA7B5F31ECB2ECE2B568883C09865443CB
Certificate serial:       2307632C822B692686786B0DF53B4083D661F9AC
Authority key identifier: BD:F9:84:AA:7B:5F:31:EC:B2:EC:E2:B5:68:88:3C:09:86:54:43:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a613030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Fri 16 May 2025 13:17:47 +0000
ROA not before:           Fri 16 May 2025 13:12:47 +0000
ROA not after:            Fri 15 May 2026 13:17:47 +0000
asID:                     270760
IP address blocks:        2804:70fc:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 02:19:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:07:63:2c:82:2b:69:26:86:78:6b:0d:f5:3b:40:83:d6:61:f9:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF984AA7B5F31ECB2ECE2B568883C09865443CB
        Validity
            Not Before: May 16 13:12:47 2025 GMT
            Not After : May 15 13:17:47 2026 GMT
        Subject: CN=591DBC5D297C5A40E4B0AD796D888D808B437870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dc:43:fb:4a:32:1c:96:7a:5b:a6:91:97:6a:
                    4f:1a:75:14:b9:ef:40:79:4c:7b:bc:27:c1:1b:16:
                    ae:83:76:5b:8c:2e:0d:1b:0b:4c:96:ff:53:4f:b5:
                    f9:c5:4c:10:96:9a:d9:bc:72:41:eb:17:9f:dd:1c:
                    45:87:9e:00:6e:6e:8b:f6:f7:d7:ab:31:02:65:bc:
                    10:ac:f2:1f:f0:c0:75:c1:a2:d3:02:aa:5a:62:0a:
                    01:20:c1:e6:4b:92:78:fc:94:c9:af:13:ef:74:c2:
                    ec:75:8d:e4:90:32:f5:4c:45:0f:80:6c:40:e0:f0:
                    63:f6:b0:ca:05:78:50:97:2f:d3:8b:8c:f3:43:48:
                    7a:57:50:74:63:3f:44:cf:3a:3c:8a:e3:cb:68:81:
                    97:81:6b:89:55:4f:41:0c:b3:c9:c2:a2:a9:61:2a:
                    74:e4:ed:0c:61:97:3c:eb:37:3d:6c:ac:ba:60:db:
                    79:21:ea:3b:ad:ef:24:8d:e5:91:27:16:eb:43:3e:
                    86:55:62:22:58:29:21:be:e9:61:21:19:77:68:2a:
                    85:89:3a:55:3a:df:98:39:16:ee:25:28:36:77:f9:
                    61:6e:d8:1d:7d:c7:01:2b:3e:17:01:9b:12:af:18:
                    21:1b:c9:0b:44:f8:8c:65:19:68:e5:e3:d7:de:4b:
                    7f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1D:BC:5D:29:7C:5A:40:E4:B0:AD:79:6D:88:8D:80:8B:43:78:70
            X509v3 Authority Key Identifier:
                keyid:BD:F9:84:AA:7B:5F:31:EC:B2:EC:E2:B5:68:88:3C:09:86:54:43:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a613030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8d:49:da:b2:36:a6:8c:15:73:88:91:8f:5c:96:16:b7:5d:93:
         e5:12:b7:8f:f3:30:56:42:da:ba:d2:d5:ad:d3:98:0f:8d:44:
         f3:11:72:0c:d6:d1:b8:46:6a:88:0c:66:1f:25:c7:fb:ef:23:
         e2:b6:fc:eb:21:68:ca:d3:a9:47:2f:07:b6:34:fd:37:04:93:
         5c:9e:bc:db:4d:70:d1:19:79:fd:e4:33:6f:63:df:ae:e6:7f:
         06:06:e8:0a:34:da:28:2f:bc:d1:5e:bf:94:f4:cc:cb:7e:ca:
         90:56:0b:8b:4b:91:59:36:6f:6f:4a:c0:65:2d:59:6f:4f:c0:
         08:b3:83:f0:2a:10:5c:01:11:3b:37:6d:66:92:81:5f:01:da:
         1c:9c:b3:ad:91:5a:b8:df:42:81:82:7c:4f:7d:59:b1:72:93:
         ac:03:56:5b:bb:36:90:c4:74:c0:be:2d:1b:15:09:0a:a0:d4:
         1a:cf:44:78:11:00:90:06:36:6d:ea:2e:73:89:9f:ac:d8:d9:
         8b:3d:9d:47:a7:40:48:1a:1e:08:93:0c:db:0e:05:9a:da:6b:
         a5:39:36:92:c5:70:1d:d0:44:06:c3:b3:5d:be:c3:42:a6:10:
         be:89:30:05:db:0b:19:85:bb:f1:ff:76:12:87:72:4a:41:17:
         b0:40:6a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 02:56:53 2025 by rpki-client