Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a3a2f34302d3430203d3e20323632373239.roa
File:                     323830343a313664383a3a2f34302d3430203d3e20323632373239.roa (raw, json)
Hash identifier:          udEfW7cWzDGJiWDYE3C17ykkQBbV5RC5OjWdZEo5GMo=
Subject key identifier:   4E:C9:91:4E:C9:A4:95:5A:3D:56:9A:67:2C:2A:1C:63:0C:3C:BF:97
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       0F5CF7F8C310FFA953BEAD05236DAEF7B1213480
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a3a2f34302d3430203d3e20323632373239.roa
Signing time:             Mon 16 Jun 2025 14:10:45 +0000
ROA not before:           Mon 16 Jun 2025 14:05:45 +0000
ROA not after:            Mon 15 Jun 2026 14:10:45 +0000
asID:                     262729
IP address blocks:        2804:16d8::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 19:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5c:f7:f8:c3:10:ff:a9:53:be:ad:05:23:6d:ae:f7:b1:21:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jun 16 14:05:45 2025 GMT
            Not After : Jun 15 14:10:45 2026 GMT
        Subject: CN=4EC9914EC9A4955A3D569A672C2A1C630C3CBF97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:76:a5:7b:ae:c6:aa:0f:32:bd:8b:fe:1d:98:
                    8d:3a:99:d6:18:91:16:8c:66:30:77:b0:84:b3:40:
                    b2:c6:2e:02:87:de:f8:df:ce:10:f3:b2:27:30:92:
                    64:30:12:6e:dd:c7:bc:7c:12:18:00:e4:39:23:11:
                    f1:46:35:eb:6f:29:7e:e0:cf:bf:c5:c2:09:cf:1b:
                    ed:29:66:3c:3a:a3:b6:4c:ec:1e:41:ca:3d:92:0d:
                    01:4d:3d:1b:fc:29:8b:84:cb:9e:66:44:2d:5e:59:
                    1f:53:a4:bd:55:77:ac:be:a5:a0:d4:ea:bd:12:2e:
                    ae:bf:5d:dc:b7:ea:8e:34:de:ee:58:af:9f:24:b2:
                    ae:c7:58:89:fb:0b:4e:29:66:07:6e:bc:e8:62:3d:
                    07:ec:ec:ab:36:de:85:6e:80:3c:e8:3f:0b:dc:fa:
                    5f:7f:a1:17:08:42:30:36:4f:bd:55:c2:93:43:57:
                    2a:82:ae:7f:d3:e3:88:f0:c4:25:ba:c4:f4:73:1d:
                    b9:93:28:47:39:2f:ef:bc:dc:58:d9:36:65:9b:d3:
                    b8:6e:57:2b:04:55:d4:9a:73:68:74:a9:cb:07:7a:
                    06:70:2e:9a:39:00:08:cf:41:62:e1:9d:2d:1b:f1:
                    89:b0:31:f8:c3:d4:4b:3d:78:34:78:c8:d0:9d:b7:
                    08:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C9:91:4E:C9:A4:95:5A:3D:56:9A:67:2C:2A:1C:63:0C:3C:BF:97
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a3a2f34302d3430203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8::/40

    Signature Algorithm: sha256WithRSAEncryption
         54:4d:1f:bb:bf:56:63:d5:17:fc:1f:2e:98:c6:f2:04:03:39:
         46:04:97:8e:9d:3c:47:de:ea:71:3b:2b:45:e1:61:29:5c:e6:
         6b:df:18:8d:f4:e2:ea:97:59:48:16:f8:f8:65:30:d9:a6:72:
         9a:69:16:f7:8f:7d:36:2a:12:35:b7:c2:61:d0:d5:38:2c:ad:
         30:10:11:82:fd:ee:03:17:d5:30:58:dd:ad:95:76:d4:cd:01:
         9b:65:62:e8:c3:e8:20:c7:ba:41:ff:0d:ba:76:88:04:24:a3:
         25:d1:32:c5:c3:88:c1:fd:fd:09:a0:91:b0:7c:f8:d7:c2:ef:
         50:1b:f9:b1:51:0f:8e:c7:e5:90:43:1c:cd:34:80:2b:c3:28:
         fd:c7:f1:11:88:07:35:00:8a:ce:ce:5e:6f:75:08:97:1f:92:
         ff:bb:c6:dd:6c:11:4c:3a:ea:d8:02:d6:ef:a3:b6:c9:b2:03:
         c4:08:be:b2:10:ef:d9:95:77:68:22:ec:e3:d0:53:23:66:bf:
         c0:df:67:fd:ed:86:c2:81:94:d9:22:0d:ce:9a:2b:28:60:45:
         37:99:18:8c:52:ea:af:07:0b:64:b1:65:c4:dd:36:78:44:07:
         98:08:0d:0a:a1:d4:37:3c:40:c0:0d:4a:0e:5f:c6:27:97:bf:
         4c:e8:ac:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:37:11 2025 by rpki-client