Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a373030343a3a2f34362d3436203d3e20323634343232.roa
File:                     323830343a316535383a373030343a3a2f34362d3436203d3e20323634343232.roa (raw, json)
Hash identifier:          9ujdtMI2k3tSq9j70pIirqGRCkalHLcnFzE3LnFvbC8=
Subject key identifier:   EC:9F:AC:BC:85:B1:48:B9:02:28:46:C4:64:57:F6:8E:A1:E0:C7:F2
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       50DB2CEA56AD1B7559398BABBCDB8575EBB69FE5
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a373030343a3a2f34362d3436203d3e20323634343232.roa
Signing time:             Wed 16 Apr 2025 15:05:41 +0000
ROA not before:           Wed 16 Apr 2025 15:00:41 +0000
ROA not after:            Wed 15 Apr 2026 15:05:41 +0000
asID:                     264422
IP address blocks:        2804:1e58:7004::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 00:15:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:db:2c:ea:56:ad:1b:75:59:39:8b:ab:bc:db:85:75:eb:b6:9f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: Apr 16 15:00:41 2025 GMT
            Not After : Apr 15 15:05:41 2026 GMT
        Subject: CN=EC9FACBC85B148B9022846C46457F68EA1E0C7F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:21:79:6f:1b:01:7c:ce:4f:60:c3:21:20:eb:
                    7c:94:9b:fd:59:37:03:21:e4:c8:5e:1a:aa:54:b8:
                    94:e6:b5:c1:71:3f:d9:88:f9:52:4b:39:26:54:3e:
                    3c:76:fd:6b:fb:e5:03:d5:f1:5f:17:07:d3:a6:b4:
                    17:72:77:f1:3e:3a:a9:90:79:8a:99:38:c8:85:56:
                    63:a4:71:8e:c3:6f:4d:2c:7a:d4:87:57:26:96:64:
                    1b:f9:97:84:50:4d:c7:e7:d1:aa:46:b6:30:f8:1d:
                    64:23:13:2a:7d:9d:20:51:ee:81:bc:fb:2d:08:90:
                    3a:c6:fc:ed:cd:6c:80:2a:0a:ad:b6:32:24:0d:67:
                    0e:c9:d9:03:c4:f4:b7:5c:e3:ff:9a:f2:c0:cd:10:
                    b0:1b:e7:c3:9c:84:cf:3b:95:43:5f:41:5b:fb:7d:
                    fb:18:3e:54:89:32:29:9e:62:f0:37:66:87:e9:9e:
                    89:f9:f9:be:5f:d7:45:d3:3d:35:07:97:82:f9:2c:
                    96:e2:20:5e:d5:bc:8c:f8:5a:d9:6d:17:4d:04:02:
                    1e:b5:25:51:cd:d7:e7:19:52:6b:20:92:ab:5a:e9:
                    4a:9c:ee:22:58:a3:55:85:ca:7e:b4:88:5d:e6:a5:
                    13:ba:d7:ca:71:be:bd:62:55:d4:29:99:32:a9:09:
                    d9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9F:AC:BC:85:B1:48:B9:02:28:46:C4:64:57:F6:8E:A1:E0:C7:F2
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a373030343a3a2f34362d3436203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:7004::/46

    Signature Algorithm: sha256WithRSAEncryption
         05:ca:e3:e9:01:ca:62:9d:07:cc:fa:7c:01:c5:03:f0:ab:bb:
         ef:1a:5b:41:13:d0:c3:80:81:d8:f2:f4:5e:61:0c:5e:a2:3b:
         64:70:69:13:3b:16:0a:e3:fb:56:05:46:1c:65:a5:45:be:6b:
         17:22:92:5b:f3:5b:52:68:7e:3d:bf:4b:a6:c6:c1:5c:a4:38:
         3a:22:78:2e:0f:53:95:1e:96:43:d7:1e:1a:07:c1:60:6b:ba:
         85:b0:a1:9a:64:41:05:07:84:76:23:c6:d5:60:42:c5:bc:f2:
         49:60:73:e8:10:6f:89:d8:a2:d8:1c:43:86:84:d2:46:4a:d4:
         bc:ac:41:37:fc:f4:54:79:fe:44:57:74:f5:19:a0:38:50:d5:
         5f:b2:0e:a4:7f:32:c3:23:c8:9c:61:c0:fe:0c:23:4d:3b:f1:
         fe:32:bd:05:0d:f0:df:13:79:86:cd:e5:11:ff:e3:b8:70:7b:
         25:ff:ab:c9:fd:7f:71:60:e1:dc:c6:01:96:77:fe:f8:e6:5f:
         47:2e:87:f0:e3:82:2d:e4:4a:b0:07:fe:fd:96:e2:d7:2d:d6:
         d9:16:f9:9c:3b:0c:13:6f:a9:fb:ae:be:d3:49:e5:43:9f:64:
         f1:39:d7:14:85:50:08:f2:f6:0d:74:18:59:81:2a:af:96:14:
         79:38:1a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:03:22 2025 by rpki-client