Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/0/323830343a343835303a3a2f33322d3438203d3e20323637313133.roa
File:                     323830343a343835303a3a2f33322d3438203d3e20323637313133.roa (raw, json)
Hash identifier:          5j0sqRjKtNqWqm0C0DcImPR8p4CWKvSKIP4HN9R8ijA=
Subject key identifier:   56:90:86:32:91:36:19:32:8D:EE:0D:31:F9:A3:FB:9B:2C:32:79:E4
Certificate issuer:       /CN=22C965CFD1C68B15DAE2F2D8CAE324448D335934
Certificate serial:       57197E886CF6AE9D80CE2270126DA568F93A6481
Authority key identifier: 22:C9:65:CF:D1:C6:8B:15:DA:E2:F2:D8:CA:E3:24:44:8D:33:59:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22C965CFD1C68B15DAE2F2D8CAE324448D335934.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/0/323830343a343835303a3a2f33322d3438203d3e20323637313133.roa
Signing time:             Thu 29 May 2025 14:40:56 +0000
ROA not before:           Thu 29 May 2025 14:35:56 +0000
ROA not after:            Thu 28 May 2026 14:40:56 +0000
asID:                     267113
IP address blocks:        2804:4850::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/0/22C965CFD1C68B15DAE2F2D8CAE324448D335934.crl
                          rsync://rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/0/22C965CFD1C68B15DAE2F2D8CAE324448D335934.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22C965CFD1C68B15DAE2F2D8CAE324448D335934.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 15:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:19:7e:88:6c:f6:ae:9d:80:ce:22:70:12:6d:a5:68:f9:3a:64:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22C965CFD1C68B15DAE2F2D8CAE324448D335934
        Validity
            Not Before: May 29 14:35:56 2025 GMT
            Not After : May 28 14:40:56 2026 GMT
        Subject: CN=56908632913619328DEE0D31F9A3FB9B2C3279E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1a:d9:71:ae:8e:ba:dd:3e:b7:33:c0:13:e7:
                    84:f1:a0:2a:f9:3f:8c:34:6c:ad:92:a9:81:85:b6:
                    a1:6c:70:11:e6:89:4c:af:ec:77:57:f8:d9:26:95:
                    70:e0:6e:5e:af:ec:44:22:1d:34:30:94:75:75:ef:
                    c1:46:11:82:5d:8f:13:78:15:72:21:f8:b6:54:bd:
                    55:bb:4e:10:3b:70:99:56:29:61:2a:a9:b8:22:b6:
                    f1:8b:a4:b1:e2:e6:0a:b0:c1:7c:a6:02:1b:fe:8d:
                    fc:a3:15:ca:f0:94:57:a2:fe:19:9d:ed:ab:32:4f:
                    72:d2:98:84:2e:81:36:d2:3d:0b:ad:db:fa:ad:17:
                    97:0f:68:50:ed:8a:da:83:4f:b1:61:d3:7e:d9:d8:
                    df:08:a4:f0:96:da:55:ac:28:e1:26:22:55:f6:6f:
                    d3:cc:5a:df:82:fd:ed:ff:dc:25:62:a5:74:c3:48:
                    9d:56:5f:9c:1b:e8:2d:e8:21:34:a4:d6:98:a7:73:
                    43:60:ac:7f:14:cf:3d:c6:26:b5:0f:60:eb:aa:f7:
                    48:eb:86:3e:05:8c:bc:a2:dc:b1:35:cc:d5:89:dd:
                    a0:69:ab:a0:67:4f:e8:40:68:ae:b3:4e:e6:d7:35:
                    65:5d:99:12:5c:eb:62:07:09:3f:aa:84:8e:a0:a9:
                    0a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:90:86:32:91:36:19:32:8D:EE:0D:31:F9:A3:FB:9B:2C:32:79:E4
            X509v3 Authority Key Identifier:
                keyid:22:C9:65:CF:D1:C6:8B:15:DA:E2:F2:D8:CA:E3:24:44:8D:33:59:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/0/22C965CFD1C68B15DAE2F2D8CAE324448D335934.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22C965CFD1C68B15DAE2F2D8CAE324448D335934.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/0/323830343a343835303a3a2f33322d3438203d3e20323637313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4850::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:c0:4b:57:ab:2a:e8:1a:9b:72:e3:11:88:47:fc:ba:11:09:
         74:d5:21:36:82:af:02:96:e9:4b:b0:d1:b8:b5:06:2c:44:5f:
         b0:d6:cd:c2:b3:a1:e2:fa:95:1f:91:f8:f8:b9:68:af:96:d4:
         33:17:fa:7a:e8:e5:a6:da:e8:cc:9d:06:16:7d:7d:2b:05:79:
         19:8c:f4:f3:c8:51:92:34:39:ce:eb:3b:86:31:f0:c3:c7:94:
         d4:79:7a:4e:1c:cd:f4:de:49:ae:cf:92:1f:d1:89:0f:c0:ce:
         4f:8f:f2:29:32:c2:5e:e5:7f:6b:f4:48:90:2f:f1:37:6c:e1:
         e1:d7:6d:ff:f2:ec:ee:35:68:80:7a:1f:16:19:0e:33:25:7e:
         8e:7c:2f:06:3a:11:83:e2:8f:2c:a4:41:d6:d7:d1:26:95:c2:
         2b:66:08:d8:cd:30:d7:02:a7:e8:1d:e4:7b:63:e8:fa:3a:6e:
         8c:d7:e6:2b:c6:ad:03:95:aa:fb:f1:f2:1c:36:10:a2:b0:60:
         0b:f4:92:77:07:54:64:77:be:21:ae:92:52:c4:80:c9:b1:1f:
         f0:d0:5f:3a:38:0c:c5:f4:24:3d:01:b1:f6:4e:e2:88:ee:06:
         19:bd:9a:a2:9d:d3:48:44:f5:5c:6f:86:bd:02:66:dc:d4:54:
         48:1e:09:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 17:48:09 2025 by rpki-client