Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/323830343a363639383a3a2f33322d3438203d3e20323639353730.roa
File:                     323830343a363639383a3a2f33322d3438203d3e20323639353730.roa (raw, json)
Hash identifier:          OFdMKU6S0WFAkTIMD3HdnrcuWydrwrNdgMiawRNqr5o=
Subject key identifier:   B9:C4:D9:35:9C:1D:AC:27:74:FA:32:4C:A2:A7:DE:54:FB:B2:12:34
Certificate issuer:       /CN=1370A03EC954E150A22BE78FA96515CB0158F5C1
Certificate serial:       4327DCFFDBEF55F13899DD46433F5D380605B8BC
Authority key identifier: 13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/323830343a363639383a3a2f33322d3438203d3e20323639353730.roa
Signing time:             Wed 07 May 2025 20:31:27 +0000
ROA not before:           Wed 07 May 2025 20:26:27 +0000
ROA not after:            Wed 06 May 2026 20:31:27 +0000
asID:                     269570
IP address blocks:        2804:6698::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.crl
                          rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 03:31:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:27:dc:ff:db:ef:55:f1:38:99:dd:46:43:3f:5d:38:06:05:b8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1370A03EC954E150A22BE78FA96515CB0158F5C1
        Validity
            Not Before: May  7 20:26:27 2025 GMT
            Not After : May  6 20:31:27 2026 GMT
        Subject: CN=B9C4D9359C1DAC2774FA324CA2A7DE54FBB21234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c4:44:85:1c:75:b8:35:77:49:1a:82:e9:e3:
                    66:76:7c:d0:31:41:c9:55:a5:2c:a5:59:85:20:c8:
                    70:f3:65:41:a2:68:55:a9:ea:fc:90:a7:fd:a9:2e:
                    c4:34:be:d3:47:47:0e:fe:02:37:80:66:a0:66:f3:
                    b6:b5:18:8a:ee:9d:dc:c1:50:17:1f:4b:98:43:ed:
                    fd:c4:3e:7e:5b:68:57:1a:aa:4a:8f:1b:6f:38:36:
                    6c:b6:25:58:18:a4:e6:16:73:36:d4:7b:43:66:d1:
                    94:87:d5:fc:7a:3d:05:65:ad:75:25:9b:5c:4a:07:
                    57:01:81:1e:4b:e8:98:26:0f:eb:4b:c5:ac:98:32:
                    36:32:98:f7:aa:cd:d4:20:75:dc:52:59:65:67:97:
                    bf:03:80:5d:d6:26:cb:1f:df:4e:02:d7:9a:6a:53:
                    0b:ed:c5:aa:02:32:93:83:06:43:af:8b:cd:15:41:
                    51:cd:83:6c:43:2b:f5:66:d4:1a:0e:e9:3f:65:f1:
                    67:db:f6:1a:d4:72:ca:70:ec:55:d0:b3:8b:f0:6a:
                    fe:18:c8:0c:15:2c:55:23:8d:fe:20:d8:25:f2:3d:
                    1b:68:3c:58:fb:f6:ac:72:9e:d9:cd:11:14:7f:2d:
                    eb:f5:05:d3:16:19:a3:6a:de:d2:0a:f6:39:69:3d:
                    24:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C4:D9:35:9C:1D:AC:27:74:FA:32:4C:A2:A7:DE:54:FB:B2:12:34
            X509v3 Authority Key Identifier:
                keyid:13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/323830343a363639383a3a2f33322d3438203d3e20323639353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6698::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:13:43:68:c8:75:39:88:d7:c1:ad:25:10:15:94:1e:78:a3:
         19:0d:47:66:ae:13:7a:bb:a1:a8:47:25:8d:b7:73:1f:a3:48:
         43:b1:ae:e0:61:5f:94:a7:46:97:fa:ff:89:c9:15:83:98:73:
         aa:55:f3:0e:f1:47:bd:69:81:b6:67:76:9a:d7:bb:e4:ef:b8:
         e1:db:71:9b:f2:5f:0e:50:a6:94:be:2b:83:c6:e4:94:a4:67:
         4c:8f:b8:d3:a7:c2:f6:e9:9d:5d:6a:d2:81:d7:9d:f2:8d:ec:
         e3:70:f4:92:e5:b7:9a:5b:96:06:b2:3a:49:56:dd:d3:56:1b:
         6e:fb:db:b3:9b:f4:70:ec:7a:6f:00:24:83:bd:15:a1:3c:14:
         ea:b9:ba:bd:dd:25:c7:43:f6:5b:bd:b1:92:41:3d:19:7f:f4:
         cc:27:75:f7:30:56:17:9b:2e:58:4d:93:c5:f8:99:2d:4b:55:
         e6:17:55:0e:0d:eb:56:d4:bc:0e:79:61:8d:0c:47:6d:16:ff:
         29:c5:49:be:a7:94:49:21:53:ef:ef:c4:25:ff:a2:4a:08:f3:
         34:b4:6b:2b:ce:44:87:6d:d6:fb:07:77:c8:83:8a:cf:cb:ca:
         6b:99:ea:04:5a:d2:09:fb:7f:3e:33:27:30:10:b2:ab:aa:b6:
         13:ef:ca:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 04:58:49 2025 by rpki-client