Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/323830343a316562383a3a2f33322d3536203d3e203532353634.roa
File:                     323830343a316562383a3a2f33322d3536203d3e203532353634.roa (raw, json)
Hash identifier:          s9qbeek2fSTEjSVmUQU7vWuWcPksV6u6dEUnuyWi9Xo=
Subject key identifier:   70:34:CB:50:95:E2:14:D1:B1:50:F2:85:0E:B4:7B:C8:C2:5B:49:53
Certificate issuer:       /CN=73D43FEADED592156D29C67CCC13A030541CD25A
Certificate serial:       5CD201E0EBC0AF0FDD3589791ACE4DBADD791755
Authority key identifier: 73:D4:3F:EA:DE:D5:92:15:6D:29:C6:7C:CC:13:A0:30:54:1C:D2:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D43FEADED592156D29C67CCC13A030541CD25A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/323830343a316562383a3a2f33322d3536203d3e203532353634.roa
Signing time:             Sat 17 May 2025 01:04:26 +0000
ROA not before:           Sat 17 May 2025 00:59:26 +0000
ROA not after:            Sat 16 May 2026 01:04:26 +0000
asID:                     52564
IP address blocks:        2804:1eb8::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.crl
                          rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D43FEADED592156D29C67CCC13A030541CD25A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 20:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d2:01:e0:eb:c0:af:0f:dd:35:89:79:1a:ce:4d:ba:dd:79:17:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73D43FEADED592156D29C67CCC13A030541CD25A
        Validity
            Not Before: May 17 00:59:26 2025 GMT
            Not After : May 16 01:04:26 2026 GMT
        Subject: CN=7034CB5095E214D1B150F2850EB47BC8C25B4953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:55:fe:64:5f:2b:a5:b4:25:95:4d:79:ec:98:
                    3d:79:2a:65:4a:89:11:82:f9:23:25:81:36:b7:55:
                    81:d9:68:61:fa:5a:dc:bf:4d:81:54:e8:68:f7:97:
                    64:e9:e8:3d:96:9e:64:07:9f:e9:ce:43:6c:b2:c2:
                    6e:2d:77:ce:f5:86:a9:c6:9a:4d:16:8f:70:d1:1f:
                    92:29:31:e0:18:76:48:f9:5a:11:20:14:19:7e:dd:
                    46:2e:a7:96:ed:f1:ce:1a:8f:af:d4:c9:66:df:81:
                    9d:f2:27:63:d5:b3:37:c4:a6:82:c0:c8:1d:5f:e8:
                    b7:1f:e2:76:8f:8e:4d:e5:98:b9:d3:58:c9:25:8c:
                    bf:34:54:e6:b4:81:ea:ef:cb:47:da:58:c6:c6:d5:
                    82:34:37:65:6d:ba:1b:bb:d7:43:00:66:06:f5:a5:
                    da:dc:8c:53:61:91:19:1d:2d:22:08:99:02:6a:87:
                    e9:06:14:f8:4f:e4:78:f1:f4:e5:80:7e:a1:4f:ef:
                    b6:29:c2:7c:70:70:44:9d:14:35:5d:92:01:a3:ab:
                    76:62:79:9e:3e:86:28:21:51:33:c1:dd:29:54:85:
                    3f:e0:e4:ee:b6:96:20:e3:df:a7:86:b4:07:72:50:
                    9e:aa:82:f5:a4:ec:3b:96:d7:58:e8:0f:e3:43:bd:
                    ed:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:34:CB:50:95:E2:14:D1:B1:50:F2:85:0E:B4:7B:C8:C2:5B:49:53
            X509v3 Authority Key Identifier:
                keyid:73:D4:3F:EA:DE:D5:92:15:6D:29:C6:7C:CC:13:A0:30:54:1C:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D43FEADED592156D29C67CCC13A030541CD25A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/323830343a316562383a3a2f33322d3536203d3e203532353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1eb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:d4:2b:e0:fc:b1:8e:45:6e:b5:d6:fd:8d:53:0d:f0:63:3a:
         af:ca:37:58:00:89:f5:6d:2a:0b:7e:1c:02:a8:10:96:19:40:
         42:9e:a9:6a:54:a8:a3:10:9b:dd:e2:7f:f9:5a:2f:d2:a6:a4:
         79:68:4d:ee:d3:01:3e:c4:29:56:a2:80:ef:c6:cc:f2:79:80:
         af:fe:d0:a5:c1:46:95:4b:29:4a:9c:0d:55:48:66:e3:1c:01:
         56:a0:9f:3d:e2:62:58:26:af:67:f9:ad:53:3d:a0:08:45:28:
         6e:58:97:4f:6b:20:dc:8c:21:91:6d:04:0c:b3:6f:7a:91:77:
         4c:a0:14:ef:a1:62:72:55:7a:f7:a3:1b:25:1e:99:aa:e6:ea:
         58:e3:d4:8f:4c:98:d6:e2:24:c4:d0:f5:b2:8c:29:48:6e:32:
         1b:e2:ac:6d:41:c9:bd:18:37:f2:b8:af:2e:2f:5b:7c:4b:eb:
         31:1a:a6:1e:34:ab:17:3f:60:d1:d1:c4:51:4e:62:6d:4c:6b:
         ce:f3:73:fd:7f:c8:2f:ca:92:1f:8d:5c:52:fb:e5:1c:17:a8:
         ec:af:93:92:7a:29:f4:70:ac:b8:db:b9:8b:da:68:b3:08:cd:
         af:65:ad:b1:c1:ff:cf:d8:16:1e:06:2d:a6:28:9f:1a:fb:65:
         0b:00:c9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 01:47:32 2025 by rpki-client