Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a643030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a643030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          uOBlbLcBU2DtVLkuma6HZAUMik8moKs73Au8AR9HEQ0=
Subject key identifier:   B6:04:64:61:B9:22:7D:04:FA:FB:90:17:79:8C:9B:DD:87:F8:AE:E7
Certificate issuer:       /CN=BDF984AA7B5F31ECB2ECE2B568883C09865443CB
Certificate serial:       789D9B0D491207563B0AF7CC99FA919F2E253A4D
Authority key identifier: BD:F9:84:AA:7B:5F:31:EC:B2:EC:E2:B5:68:88:3C:09:86:54:43:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a643030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Fri 16 May 2025 13:17:45 +0000
ROA not before:           Fri 16 May 2025 13:12:45 +0000
ROA not after:            Fri 15 May 2026 13:17:45 +0000
asID:                     270760
IP address blocks:        2804:70fc:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 02:19:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9d:9b:0d:49:12:07:56:3b:0a:f7:cc:99:fa:91:9f:2e:25:3a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF984AA7B5F31ECB2ECE2B568883C09865443CB
        Validity
            Not Before: May 16 13:12:45 2025 GMT
            Not After : May 15 13:17:45 2026 GMT
        Subject: CN=B6046461B9227D04FAFB9017798C9BDD87F8AEE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d4:1f:6c:77:64:55:d4:80:45:4c:42:0e:e6:
                    07:b9:f2:f1:52:6f:69:b7:14:c7:96:84:98:c3:4d:
                    0b:ff:79:e9:74:1f:62:2f:f5:f2:94:bd:99:27:b2:
                    67:7d:95:55:36:21:f9:5e:8e:ad:b8:c8:c8:5a:3e:
                    17:16:bd:2d:04:8d:d0:29:b0:71:94:59:b8:97:79:
                    d7:e3:b8:34:0d:c8:81:75:8e:8f:2d:1f:b4:d4:1f:
                    3a:01:75:4c:da:36:fc:57:8e:fe:f0:63:8a:19:9d:
                    37:13:b7:df:19:14:13:b0:c9:f7:df:bd:2c:c2:f5:
                    91:03:e8:8c:98:b9:be:e0:7d:db:a5:03:2b:c3:04:
                    7b:8c:9f:ff:f6:9c:3b:7c:15:35:bd:45:cb:6c:07:
                    e0:e8:92:ae:71:77:0e:b4:fc:ca:ca:3e:0b:d7:b5:
                    ff:d8:dd:aa:2c:b7:f5:6e:20:7d:bb:fd:bb:1e:46:
                    00:90:87:db:51:ed:e6:ea:c4:76:29:12:8d:f0:39:
                    77:4f:71:0e:39:89:6f:b9:55:0a:1c:3d:bc:54:c4:
                    a0:15:50:b9:4b:d7:f6:46:fe:44:0f:bf:b0:2e:3b:
                    46:b6:d0:0c:cf:93:1b:8a:b2:2f:2f:c7:f0:bf:ed:
                    24:e5:5b:e6:73:7e:34:6e:d3:ba:58:29:b8:95:64:
                    42:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:04:64:61:B9:22:7D:04:FA:FB:90:17:79:8C:9B:DD:87:F8:AE:E7
            X509v3 Authority Key Identifier:
                keyid:BD:F9:84:AA:7B:5F:31:EC:B2:EC:E2:B5:68:88:3C:09:86:54:43:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a643030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         40:a0:a5:6f:21:d2:25:5c:18:12:ed:89:28:5c:61:85:c4:83:
         ef:da:3d:35:0a:a9:56:26:1b:ec:b0:37:38:7a:06:b2:75:b6:
         c0:9d:37:4c:6c:6f:b8:34:90:27:b0:33:0f:2d:4c:b6:93:c1:
         f0:d8:40:88:ea:e2:f7:35:d9:82:dd:49:14:47:53:08:73:3c:
         83:a9:d1:19:d9:0c:af:2e:8e:8d:89:0e:3c:1e:e5:9b:57:d2:
         65:79:12:7d:53:43:13:31:e7:1c:ca:8d:64:3d:97:4b:27:f6:
         ec:d4:8d:6b:34:27:dc:93:61:50:98:96:9e:53:3b:22:95:f4:
         91:d7:d8:6b:1c:34:36:8c:b3:be:0f:04:1e:1a:89:5c:b0:f8:
         e8:0f:79:3a:94:a8:11:56:13:2b:87:43:9f:9e:7d:73:38:d0:
         23:af:30:14:7d:db:18:a7:af:08:8f:82:ea:7c:59:f4:44:8d:
         12:db:0d:63:bb:f3:45:1c:2f:9a:b1:d0:6a:67:ac:68:4d:1e:
         88:b6:12:4d:50:7e:c2:5b:c0:52:ed:60:dd:d3:8a:d3:49:db:
         18:89:2a:4f:4e:b1:fc:87:0f:98:74:3f:b4:c5:3d:31:e4:32:
         60:ff:32:d4:37:a9:c8:24:0e:93:7f:5c:fe:6d:08:50:06:7a:
         a4:50:14:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 02:45:23 2025 by rpki-client