Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a343030303a3a2f33342d3334203d3e20323639343131.roa
File:                     323830343a363432633a343030303a3a2f33342d3334203d3e20323639343131.roa (raw, json)
Hash identifier:          3Tlt08M0AhRcb32kwtq7hUa/UFCrFq2+mJO0AzyyNiI=
Subject key identifier:   18:FC:E2:0A:A7:55:2C:A1:85:7B:4E:37:47:22:B1:5E:38:20:81:DA
Certificate issuer:       /CN=91D0CB672455E2525CA585B9DB73D420AE011D8D
Certificate serial:       45BCA007070090F6FF8E7573BAB93898D3F6BC38
Authority key identifier: 91:D0:CB:67:24:55:E2:52:5C:A5:85:B9:DB:73:D4:20:AE:01:1D:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a343030303a3a2f33342d3334203d3e20323639343131.roa
Signing time:             Thu 19 Jun 2025 13:13:06 +0000
ROA not before:           Thu 19 Jun 2025 13:08:06 +0000
ROA not after:            Thu 18 Jun 2026 13:13:06 +0000
asID:                     269411
IP address blocks:        2804:642c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91D0CB672455E2525CA585B9DB73D420AE011D8D.crl
                          rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91D0CB672455E2525CA585B9DB73D420AE011D8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 07:37:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:bc:a0:07:07:00:90:f6:ff:8e:75:73:ba:b9:38:98:d3:f6:bc:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D0CB672455E2525CA585B9DB73D420AE011D8D
        Validity
            Not Before: Jun 19 13:08:06 2025 GMT
            Not After : Jun 18 13:13:06 2026 GMT
        Subject: CN=18FCE20AA7552CA1857B4E374722B15E382081DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ae:13:df:28:81:62:ef:8a:45:3a:8e:e5:c6:
                    26:72:34:77:27:33:05:78:75:c7:6e:aa:9e:db:d9:
                    55:83:e4:8f:7f:29:31:fa:95:f5:b5:7e:a6:09:97:
                    03:7b:6a:c9:59:d4:44:62:22:69:3c:f4:ef:92:b3:
                    ec:e6:ae:db:1e:3a:85:00:13:34:0e:de:0e:1d:0e:
                    cc:2f:ce:7e:4f:fc:4a:57:cc:22:bf:ac:4f:b9:aa:
                    96:78:74:d7:5a:fd:dc:a4:30:25:f3:19:6e:31:8a:
                    d1:75:fc:00:cf:ac:92:24:5b:a3:6f:eb:64:06:ad:
                    78:9f:64:ba:db:70:ca:70:d7:df:12:a9:e7:de:a9:
                    e4:8f:e3:be:f9:4b:5a:85:4b:70:a7:88:71:45:c5:
                    2b:66:8e:ca:6e:47:a6:2a:88:16:1c:a1:05:58:7b:
                    04:96:8d:ca:27:06:e6:0f:57:cb:d3:f0:96:61:74:
                    6b:a7:25:2b:1f:f5:7d:44:66:98:38:1e:6c:81:9e:
                    a4:41:42:7a:2e:82:ec:9a:ee:87:bc:68:bf:84:3c:
                    09:d1:ba:46:c2:9f:96:b4:94:12:70:6d:72:5c:ff:
                    44:b2:3a:2c:ce:88:07:1d:c7:48:b0:56:41:e3:5d:
                    84:d1:b2:62:1a:1b:61:1c:0b:df:c6:6c:33:25:fd:
                    7f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FC:E2:0A:A7:55:2C:A1:85:7B:4E:37:47:22:B1:5E:38:20:81:DA
            X509v3 Authority Key Identifier:
                keyid:91:D0:CB:67:24:55:E2:52:5C:A5:85:B9:DB:73:D4:20:AE:01:1D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91D0CB672455E2525CA585B9DB73D420AE011D8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a343030303a3a2f33342d3334203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:642c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         28:f1:60:15:37:e8:ad:58:27:4b:0c:df:82:42:aa:6f:ca:ba:
         fb:b0:a3:0d:17:bb:4d:88:27:cc:4e:3b:8f:91:80:4f:6b:0b:
         82:7a:53:67:7b:f7:60:f1:1f:9f:6c:03:75:34:15:5d:c6:00:
         8b:e5:45:5c:0d:a7:7f:70:6b:2e:53:ee:a5:e9:95:15:f3:4a:
         1b:0a:d6:ba:d2:40:82:f3:c3:f0:23:2d:89:ae:d9:a8:df:98:
         8f:9a:a0:b5:5b:ef:b3:47:ed:b3:49:dd:29:62:e6:a9:09:10:
         58:4a:9e:08:ab:b0:6c:13:51:7d:6f:de:4f:e7:d5:62:f7:a7:
         dd:a3:29:6c:55:b5:00:bf:fe:87:a4:f1:4e:e6:c6:18:82:8e:
         d0:9c:a5:91:6a:97:b7:57:18:f6:55:48:b6:a0:00:6c:95:6e:
         df:ac:ed:af:48:1e:5e:ff:4a:53:95:e7:71:62:d6:ac:f5:b8:
         8d:43:a7:bf:3b:99:de:d2:77:17:74:06:87:cb:1a:db:c9:d6:
         0a:56:4d:09:69:66:b8:a3:99:f1:06:6b:a7:7f:8f:ff:88:b7:
         d5:e5:46:78:a8:ee:4f:e5:38:ac:16:5f:f8:f9:52:ee:c0:d6:
         fa:d3:76:13:f3:11:e5:29:22:16:cc:8d:46:d9:6e:0c:f8:bc:
         aa:b3:97:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 22:01:32 2025 by rpki-client