Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a3130303a3a2f34302d3430203d3e20323632363837.roa
File:                     323830343a333835633a3130303a3a2f34302d3430203d3e20323632363837.roa (raw, json)
Hash identifier:          7eVCRYzx55iGFa5wEfn/51tEY2s6DaA0QOHzsM/LEjI=
Subject key identifier:   E0:81:F9:77:AB:9B:A6:36:5D:26:20:A5:19:5A:A6:AD:13:66:48:84
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       6E878301F7F6B82F03C9A7A39C90E30F54DE3BF7
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a3130303a3a2f34302d3430203d3e20323632363837.roa
Signing time:             Tue 22 Apr 2025 21:00:00 +0000
ROA not before:           Tue 22 Apr 2025 20:55:00 +0000
ROA not after:            Tue 21 Apr 2026 21:00:00 +0000
asID:                     262687
IP address blocks:        2804:385c:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 08 May 2025 13:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:87:83:01:f7:f6:b8:2f:03:c9:a7:a3:9c:90:e3:0f:54:de:3b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: Apr 22 20:55:00 2025 GMT
            Not After : Apr 21 21:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:84:e4:a5:40:f5:f7:43:17:d8:6c:66:95:
                    0d:a4:85:64:82:0f:b3:b7:4e:cb:49:24:14:27:a3:
                    01:55:e9:b9:32:f5:82:c4:b4:1d:ba:e0:94:07:e4:
                    4d:98:7e:35:31:f3:d7:0c:e8:42:7e:81:ab:3a:f9:
                    f4:f1:a9:0c:a1:3a:f6:39:38:44:76:37:97:01:9b:
                    12:6a:cc:6c:55:25:0e:8e:3d:a2:42:48:1a:a2:d8:
                    3d:0e:38:c9:b6:a2:4e:42:e9:ce:e8:c3:f9:31:6a:
                    f0:35:08:0f:1b:19:9e:71:28:80:12:d3:f5:7c:cf:
                    71:f2:7a:c4:97:5b:04:e4:96:7e:d3:a0:b2:6f:e3:
                    0e:cf:83:57:e2:53:55:f3:74:63:f8:93:74:87:8b:
                    9a:7c:20:ee:db:5b:5b:65:eb:b8:d3:61:7c:b4:f0:
                    f6:a6:3b:a3:1a:38:a9:a8:8e:db:19:f5:3e:ec:f4:
                    c8:c3:4b:c7:4e:fd:75:6e:56:91:c3:62:25:35:fb:
                    71:b2:54:5d:fa:98:f9:fc:49:b8:22:25:50:06:0e:
                    92:ed:f3:ef:d2:78:5f:54:9e:0d:a6:c3:77:79:51:
                    c4:6a:d7:69:1e:76:4f:e0:76:d6:37:44:25:14:c0:
                    39:ab:7d:72:09:74:b2:f7:a8:5d:ae:f8:4e:b0:32:
                    38:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:81:F9:77:AB:9B:A6:36:5D:26:20:A5:19:5A:A6:AD:13:66:48:84
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a3130303a3a2f34302d3430203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:6f:87:c5:35:8f:84:57:5c:db:1a:45:46:ca:5a:17:46:ae:
         c5:98:0c:c7:c7:b2:f0:69:cd:f5:e3:34:d0:89:17:b8:9a:6c:
         04:70:8b:68:8c:aa:68:a1:ce:f4:aa:93:e3:7a:83:93:c8:47:
         45:11:e5:00:a8:78:0a:1a:c8:fe:19:bc:07:36:c5:92:bc:bf:
         f9:8b:ae:69:a4:ad:1d:eb:b1:05:b2:8b:5c:a9:c1:89:70:d5:
         20:f1:0a:60:0d:a4:5b:c2:27:97:83:75:35:88:55:8c:1e:03:
         70:66:fe:ff:4a:56:19:47:6c:d2:72:dc:04:04:f4:c8:2e:de:
         6a:18:d1:72:76:78:62:49:2a:7b:ab:fc:01:6d:de:f7:4f:ca:
         85:1e:00:78:75:95:f0:66:d6:06:94:65:99:49:a9:f3:36:d1:
         43:c4:e2:5d:59:0b:c7:21:3d:ac:ba:93:24:b2:4f:a6:98:be:
         b7:c9:e6:ac:f1:c4:ab:10:d2:7f:2c:6e:69:b2:0c:50:9d:66:
         6a:cd:b4:a1:43:5d:da:58:ff:cd:12:5f:63:dc:52:e3:94:1c:
         46:18:22:25:54:d7:e3:f9:20:a8:03:e7:cd:6b:93:75:00:12:
         b8:24:b8:3e:32:19:eb:c0:24:5f:70:ea:cb:58:a4:76:d9:6e:
         08:e8:41:05
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 7 18:58:05 2025 by rpki-client