Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a383030303a3a2f33342d3334203d3e20323634333434.roa
File:                     323830343a323637343a383030303a3a2f33342d3334203d3e20323634333434.roa (raw, json)
Hash identifier:          7miS7LgcvsD50poUFNPfO9ZtMdCMAr9sXE2Dr6bkcY8=
Subject key identifier:   1B:B4:25:5C:EF:8F:C4:8D:2E:70:CB:B5:16:CE:F2:D5:30:0C:D0:63
Certificate issuer:       /CN=0C2F2329378A15830C150C031943DAA0473FEA42
Certificate serial:       3DF3B9C005B7EF611A240769E321E1705BBF9DF7
Authority key identifier: 0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a383030303a3a2f33342d3334203d3e20323634333434.roa
Signing time:             Tue 03 Jun 2025 16:55:32 +0000
ROA not before:           Tue 03 Jun 2025 16:50:32 +0000
ROA not after:            Tue 02 Jun 2026 16:55:32 +0000
asID:                     264344
IP address blocks:        2804:2674:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 06:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f3:b9:c0:05:b7:ef:61:1a:24:07:69:e3:21:e1:70:5b:bf:9d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2F2329378A15830C150C031943DAA0473FEA42
        Validity
            Not Before: Jun  3 16:50:32 2025 GMT
            Not After : Jun  2 16:55:32 2026 GMT
        Subject: CN=1BB4255CEF8FC48D2E70CBB516CEF2D5300CD063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:6b:a2:5b:d4:1d:c6:85:43:4b:d8:be:47:
                    b5:2c:67:9a:2c:b4:50:ee:6e:30:ec:8f:b2:86:1f:
                    7a:47:9f:e6:28:6b:f0:2e:4c:f0:90:72:cd:67:66:
                    d3:c7:bf:62:19:15:66:05:5e:65:3f:73:e9:1c:25:
                    53:1a:45:4c:82:df:b9:9e:71:ad:10:e2:0b:d5:cb:
                    1e:32:8d:25:1d:bc:e3:b8:cf:64:e2:2d:ae:3c:99:
                    9f:44:03:51:ee:44:a9:f0:c2:52:ca:51:5e:5d:58:
                    e0:a0:77:64:1b:09:cd:7f:44:30:32:ed:6d:fb:2e:
                    1c:82:bb:0b:a9:f4:0f:79:cb:f9:34:c8:24:08:fa:
                    df:30:6e:51:aa:eb:40:4c:72:52:3b:c0:9c:09:24:
                    a8:9e:6f:f4:5b:d3:0a:b2:47:0e:44:c3:15:c8:4e:
                    ed:53:3b:19:31:e7:2d:84:42:36:2e:b6:17:43:e0:
                    15:87:18:75:53:fd:ab:ec:de:6d:32:df:b9:9e:9e:
                    3f:bf:bf:62:e6:bc:89:97:e0:ff:a8:11:0d:13:2c:
                    db:82:a1:0a:7e:cc:13:6c:e4:49:28:63:fa:ae:3f:
                    a7:f0:d0:e0:56:5d:3e:da:3c:eb:ab:bd:c1:d9:92:
                    b3:71:7c:ee:b2:41:3f:0e:b3:80:3c:ff:7a:7d:13:
                    f7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B4:25:5C:EF:8F:C4:8D:2E:70:CB:B5:16:CE:F2:D5:30:0C:D0:63
            X509v3 Authority Key Identifier:
                keyid:0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a383030303a3a2f33342d3334203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5a:05:2d:f6:38:18:9c:17:a4:f0:1c:a3:30:34:8b:98:67:2a:
         bb:7d:46:d0:23:4f:49:43:68:b3:18:ec:e7:bc:20:3d:9e:a4:
         6b:12:15:51:67:64:0b:e6:c0:e2:19:5f:53:9d:09:65:88:dc:
         68:e2:c3:89:43:e1:65:f7:f3:b8:87:ef:69:2f:15:15:04:05:
         21:93:d7:4c:e5:a9:54:2a:79:67:9e:fd:6b:58:9a:70:6b:39:
         8f:6f:a1:07:ae:c8:0a:cc:f2:61:dc:3d:5d:58:c0:58:35:09:
         f1:df:6a:cc:ea:bc:46:04:bf:76:19:e6:67:89:2f:02:98:09:
         9c:d5:05:bf:d7:3a:94:bd:38:85:a9:da:cd:4e:39:08:a2:fe:
         65:de:b3:79:bf:5b:08:ed:1e:9d:fe:71:bd:45:9e:fe:39:d4:
         74:b6:ce:24:2a:6b:2f:c4:e4:80:24:24:7a:03:a9:c4:20:ef:
         3b:6b:7f:9f:fa:f0:04:28:ae:da:ff:0c:2f:5f:df:15:96:f6:
         8d:4d:48:73:4b:f8:40:92:56:89:52:b1:d6:e7:7e:d7:4f:3c:
         61:56:cc:d7:47:45:cf:43:53:5a:2d:a1:3e:5b:26:a2:5c:e2:
         70:aa:ce:dd:25:d0:04:cb:85:d9:38:64:cc:04:4a:39:4f:c5:
         fb:bf:ef:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:59:40 2025 by rpki-client