Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/323830343a363431383a343030303a3a2f33392d3339203d3e20323639343035.roa
File:                     323830343a363431383a343030303a3a2f33392d3339203d3e20323639343035.roa (raw, json)
Hash identifier:          rB4trdGI/HlDGuHGmVbO8l2fomrbfvzD8hOuXEpqhkQ=
Subject key identifier:   74:26:14:2A:A3:88:84:E7:92:DC:46:DA:7E:E3:1B:A3:4D:21:4D:D8
Certificate issuer:       /CN=748041F88BBB1083E96FEC5DCF73AE0E40DA21EE
Certificate serial:       561A850E9ECE2F1688AA99B947110C8B28B8C747
Authority key identifier: 74:80:41:F8:8B:BB:10:83:E9:6F:EC:5D:CF:73:AE:0E:40:DA:21:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/323830343a363431383a343030303a3a2f33392d3339203d3e20323639343035.roa
Signing time:             Thu 12 Jun 2025 13:02:46 +0000
ROA not before:           Thu 12 Jun 2025 12:57:46 +0000
ROA not after:            Thu 11 Jun 2026 13:02:46 +0000
asID:                     269405
IP address blocks:        2804:6418:4000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.crl
                          rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 19:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:1a:85:0e:9e:ce:2f:16:88:aa:99:b9:47:11:0c:8b:28:b8:c7:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=748041F88BBB1083E96FEC5DCF73AE0E40DA21EE
        Validity
            Not Before: Jun 12 12:57:46 2025 GMT
            Not After : Jun 11 13:02:46 2026 GMT
        Subject: CN=7426142AA38884E792DC46DA7EE31BA34D214DD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2f:f0:8f:ed:db:97:d3:a7:b1:11:99:dd:29:
                    78:11:4f:06:31:22:17:93:c0:e2:24:80:d2:8e:b5:
                    e3:6c:a3:01:18:ff:ed:85:ba:6e:d6:82:46:64:e3:
                    60:4b:1e:f6:56:bc:e7:02:e2:90:2f:5a:f9:68:52:
                    92:a6:30:95:e4:c9:90:3b:28:10:9f:55:41:42:d3:
                    90:e5:0f:3a:13:de:69:15:38:3d:76:42:f3:d3:22:
                    f9:b9:cf:49:99:22:64:aa:ec:62:df:df:70:f2:57:
                    84:25:76:ff:03:b4:b5:1e:fa:86:5f:bd:79:38:03:
                    40:71:1e:a7:9c:5f:a3:a6:33:81:10:12:7f:91:53:
                    2c:5e:3f:f7:8d:1f:b1:77:c6:6f:2b:d0:cf:6b:60:
                    8d:cc:ee:b4:53:46:8e:52:a8:e5:c4:f6:a1:15:45:
                    42:1d:bc:39:78:f0:ec:d2:a4:04:09:78:4c:76:41:
                    85:f8:88:83:6d:25:39:96:4f:75:fc:f1:f2:d9:e6:
                    e0:2a:30:df:79:3f:0a:0f:4d:93:78:0d:56:98:6b:
                    17:e4:8b:b4:d8:da:18:99:97:d2:fe:8e:fa:ca:8f:
                    cb:96:b0:4f:89:ce:b7:48:bf:73:b2:ea:1d:ff:7a:
                    0b:a2:40:4c:60:9f:78:41:6c:00:92:84:fe:f7:f5:
                    d5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:26:14:2A:A3:88:84:E7:92:DC:46:DA:7E:E3:1B:A3:4D:21:4D:D8
            X509v3 Authority Key Identifier:
                keyid:74:80:41:F8:8B:BB:10:83:E9:6F:EC:5D:CF:73:AE:0E:40:DA:21:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/323830343a363431383a343030303a3a2f33392d3339203d3e20323639343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6418:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         b4:51:62:c9:ba:51:db:fc:8f:7e:41:c8:91:22:63:fa:2f:e7:
         ac:31:c3:31:43:d4:00:2d:bc:7d:be:1d:58:da:48:35:b0:e5:
         77:f7:6a:dc:ff:8e:67:c5:56:31:2d:ce:63:d5:5a:fe:80:64:
         4e:71:ce:aa:84:77:cd:05:1c:64:35:36:6f:8b:25:29:07:e1:
         65:df:85:c8:fe:d7:49:f7:0b:36:3e:66:b1:ba:38:47:e7:58:
         5b:b6:db:cd:bc:a8:78:f1:6c:9c:2b:4e:00:60:dc:d2:69:f8:
         a2:6f:c6:c4:80:33:62:ab:8c:58:27:96:01:9e:1a:0c:44:3f:
         e1:02:7e:ad:38:e3:ce:ab:79:8e:e3:2f:5b:09:5f:c3:5e:43:
         ec:dd:5d:c9:91:e0:61:64:69:a0:2f:7b:8a:88:d2:31:47:b2:
         5d:5a:cd:6a:c9:19:6c:46:96:b3:7e:8c:2a:9b:0c:8d:50:f8:
         f8:96:87:9a:fc:18:67:eb:bf:56:6b:12:37:23:93:16:ad:d6:
         91:41:27:bc:74:1a:4a:0e:2b:70:ad:61:55:68:67:59:49:5e:
         04:15:47:28:bc:ac:7b:51:e2:01:f9:b7:b7:6f:ab:9f:3f:c9:
         46:3c:74:e4:e9:86:2c:c9:e0:be:6a:f8:32:85:2b:83:66:bc:
         34:11:6f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 10:39:23 2025 by rpki-client