Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a343034633a3a2f33322d3332203d3e20323635393530.roa
File:                     323830343a343034633a3a2f33322d3332203d3e20323635393530.roa (raw, json)
Hash identifier:          5dGovD/Tn7gtEH7tbtKCRe4uwV0gHYavMH3rYwXX81c=
Subject key identifier:   1E:52:7D:F6:85:E2:E9:F1:9A:6A:1B:02:76:FB:92:4D:76:C0:E8:77
Certificate issuer:       /CN=2DCA2D45B3BD5112EAF183233C1838B22FE43763
Certificate serial:       7E5BF95558301F0FD7F4DF2C94EF7B76C07D56E5
Authority key identifier: 2D:CA:2D:45:B3:BD:51:12:EA:F1:83:23:3C:18:38:B2:2F:E4:37:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCA2D45B3BD5112EAF183233C1838B22FE43763.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a343034633a3a2f33322d3332203d3e20323635393530.roa
Signing time:             Wed 11 Jun 2025 05:46:59 +0000
ROA not before:           Wed 11 Jun 2025 05:41:59 +0000
ROA not after:            Wed 10 Jun 2026 05:46:59 +0000
asID:                     265950
IP address blocks:        2804:404c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/2DCA2D45B3BD5112EAF183233C1838B22FE43763.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/2DCA2D45B3BD5112EAF183233C1838B22FE43763.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCA2D45B3BD5112EAF183233C1838B22FE43763.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 01:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:5b:f9:55:58:30:1f:0f:d7:f4:df:2c:94:ef:7b:76:c0:7d:56:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DCA2D45B3BD5112EAF183233C1838B22FE43763
        Validity
            Not Before: Jun 11 05:41:59 2025 GMT
            Not After : Jun 10 05:46:59 2026 GMT
        Subject: CN=1E527DF685E2E9F19A6A1B0276FB924D76C0E877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:46:bf:91:3b:35:f5:b6:0b:d6:2c:5c:61:9a:
                    d5:47:dd:82:70:1c:35:6c:b2:b4:42:8c:3f:04:0a:
                    37:d5:db:bc:92:9e:9a:b5:66:c4:53:ef:e1:a9:fb:
                    2a:f3:6f:75:f6:df:f8:2c:c3:b5:51:a0:4a:26:16:
                    f8:82:88:c5:02:dd:bf:77:63:85:8b:bd:59:00:c0:
                    91:7b:d8:f5:22:99:9d:b8:25:d3:9d:73:6c:fa:e6:
                    fa:7c:10:87:2e:11:82:c6:2a:ca:8c:93:47:88:32:
                    6f:18:49:04:05:ef:09:e3:73:b3:cd:c5:cb:fa:6f:
                    0d:75:71:3a:6c:e1:7a:06:a8:37:58:6a:9a:55:77:
                    71:c4:ad:d9:c8:48:20:87:90:35:fa:b7:1d:58:0b:
                    e5:1d:99:6f:48:08:f5:91:85:19:3d:78:2f:a8:7f:
                    89:4d:71:68:a1:a4:70:b5:2e:1b:ee:bf:6d:4b:dc:
                    4f:76:e8:00:a3:06:e5:75:f4:f4:6d:6f:9a:ac:a8:
                    56:72:aa:e9:58:52:15:b0:bf:b8:bb:c2:86:c3:ba:
                    b4:67:a8:7c:80:8a:d1:34:f2:3b:82:ad:ea:28:10:
                    e4:19:6b:e2:e2:c9:a3:97:a4:b3:e1:8d:d0:4a:cb:
                    97:5b:d0:fb:c7:61:4b:34:a7:71:dc:d0:c6:9f:b6:
                    07:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:52:7D:F6:85:E2:E9:F1:9A:6A:1B:02:76:FB:92:4D:76:C0:E8:77
            X509v3 Authority Key Identifier:
                keyid:2D:CA:2D:45:B3:BD:51:12:EA:F1:83:23:3C:18:38:B2:2F:E4:37:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/2DCA2D45B3BD5112EAF183233C1838B22FE43763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCA2D45B3BD5112EAF183233C1838B22FE43763.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a343034633a3a2f33322d3332203d3e20323635393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:404c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:dd:cd:3b:99:d2:fb:d1:64:f6:5c:18:b9:e2:2c:7f:70:d0:
         90:55:68:1e:ff:8d:af:03:90:98:98:06:5a:16:30:28:31:23:
         3d:5d:41:6b:4f:4b:c8:1f:4f:a0:75:6a:15:10:ad:1e:3c:f6:
         37:70:8b:bf:de:b0:83:58:10:f6:67:02:3b:d2:f9:8b:cb:ab:
         db:44:de:dc:a4:7c:c2:8a:77:79:c5:70:2d:99:d8:cf:99:e1:
         6a:6f:04:59:d8:75:20:a3:0f:4c:69:64:75:d2:7c:de:04:be:
         72:ea:15:31:1f:4d:4b:50:92:0b:62:af:03:c1:3a:69:e7:bc:
         80:f1:55:a9:dc:44:6b:d1:a6:33:04:bc:d3:7c:bc:0c:b4:b0:
         f2:8b:57:9d:81:1d:33:52:14:65:02:20:b5:7f:98:81:03:29:
         8a:85:13:81:66:35:99:04:2c:db:6d:84:0f:4c:58:94:ff:73:
         10:32:28:48:4d:94:3c:d0:1d:44:8a:31:37:10:82:b9:12:c0:
         19:62:61:7e:5b:ca:b7:dc:02:7d:e1:89:45:b5:11:9f:06:58:
         d6:87:4a:a3:ab:ab:08:ff:99:18:e1:1e:41:c7:12:98:1d:ec:
         06:a3:69:a8:96:2d:5d:a2:5a:5f:8b:8f:79:b0:ac:04:04:df:
         c2:d8:61:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 02:23:30 2025 by rpki-client