Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/323830343a313837343a3a2f33322d3438203d3e203631393334.roa
File:                     323830343a313837343a3a2f33322d3438203d3e203631393334.roa (raw, json)
Hash identifier:          UIySHMheDiLr/87rGSNcCOqgWn2BEo9Py1XZITvdQEA=
Subject key identifier:   E4:66:EC:F1:56:FB:F2:5E:6C:D8:A5:AC:B4:68:A7:C6:7C:08:9D:64
Certificate issuer:       /CN=B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204
Certificate serial:       1713FFDCD682F30F44F547223359E382FF8F10EC
Authority key identifier: B2:A1:BA:E4:B3:4B:FC:AC:AD:5F:1A:7C:AF:81:C3:FE:7E:9C:02:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/323830343a313837343a3a2f33322d3438203d3e203631393334.roa
Signing time:             Fri 13 Jun 2025 18:26:13 +0000
ROA not before:           Fri 13 Jun 2025 18:21:13 +0000
ROA not after:            Fri 12 Jun 2026 18:26:13 +0000
asID:                     61934
IP address blocks:        2804:1874::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.crl
                          rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 11:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:13:ff:dc:d6:82:f3:0f:44:f5:47:22:33:59:e3:82:ff:8f:10:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204
        Validity
            Not Before: Jun 13 18:21:13 2025 GMT
            Not After : Jun 12 18:26:13 2026 GMT
        Subject: CN=E466ECF156FBF25E6CD8A5ACB468A7C67C089D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cc:df:c7:a2:2c:ea:60:a5:fc:99:83:79:0f:
                    b3:44:27:80:7c:29:9f:88:ce:83:d0:ec:75:85:6c:
                    ef:f8:d6:22:4d:ac:3e:05:67:38:53:eb:cd:e2:b6:
                    a8:fe:27:b7:f7:46:e1:b0:1a:58:7f:ba:c3:85:5c:
                    aa:dc:5d:1f:5f:d6:98:d8:f5:b5:d4:c0:13:50:cc:
                    17:d3:83:00:e1:e1:f8:14:44:7e:df:ac:e3:ba:01:
                    1b:67:74:63:62:35:0b:76:2b:25:4a:59:6d:a6:cb:
                    83:5e:57:09:7d:fb:80:28:6d:b3:0e:4a:19:6f:16:
                    b3:bd:41:1f:1e:47:7f:0e:3a:f1:53:90:cd:87:13:
                    b9:07:08:07:fc:ab:05:8f:0c:06:0e:0a:93:c9:03:
                    68:e0:48:20:cb:70:86:32:5e:dc:b3:89:00:88:4e:
                    23:3e:54:56:c0:0a:f6:b6:44:86:6e:f0:e0:87:3a:
                    5d:16:fb:61:c2:75:ad:52:af:b4:83:54:8d:89:cb:
                    a9:62:9b:0c:65:df:bb:64:62:df:b4:52:c7:0c:11:
                    05:0f:15:e6:2d:d9:f1:93:1f:82:80:ca:9f:90:14:
                    6e:81:03:57:34:74:77:a0:f9:b6:3c:6e:d3:ef:9f:
                    32:57:14:32:51:a0:e6:98:f4:2c:de:81:8a:41:05:
                    51:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:66:EC:F1:56:FB:F2:5E:6C:D8:A5:AC:B4:68:A7:C6:7C:08:9D:64
            X509v3 Authority Key Identifier:
                keyid:B2:A1:BA:E4:B3:4B:FC:AC:AD:5F:1A:7C:AF:81:C3:FE:7E:9C:02:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/323830343a313837343a3a2f33322d3438203d3e203631393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1874::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:df:8b:87:93:99:28:b1:4a:89:5c:36:ba:1f:74:b5:48:88:
         32:18:2d:50:b9:32:00:3c:1e:2f:d5:19:9a:52:18:8d:23:a4:
         b6:a6:b3:ad:6e:18:4f:68:6c:cd:85:25:2b:1e:84:e0:3c:20:
         10:27:9d:9f:91:85:5f:ee:42:f9:09:94:c6:ef:29:20:f5:ee:
         5f:20:25:ac:46:92:ac:4e:66:61:95:37:0c:3f:87:b9:76:d9:
         82:20:82:3d:5f:0b:61:12:1c:02:53:0b:18:b3:85:d5:9f:5d:
         36:6b:70:3e:46:11:ef:fe:3b:96:46:bb:47:43:7f:9d:b4:a6:
         41:d7:bb:f7:a3:be:d2:ba:04:f2:47:33:47:98:64:7d:50:93:
         c3:2c:a9:cd:44:1f:29:06:5e:e1:80:26:2b:0a:fe:79:cf:03:
         6c:50:4d:c8:c6:80:c0:7a:65:4f:17:68:63:aa:b4:3b:c3:d2:
         09:52:3a:f0:60:38:25:ec:7a:c6:cd:e4:48:28:e5:da:d5:5f:
         b0:24:fd:b7:c7:e8:ad:6c:16:a3:ba:db:81:04:60:b4:04:66:
         14:47:d8:3b:25:67:0f:86:d4:17:1b:5e:e8:8d:42:79:9d:32:
         64:a8:2d:31:54:db:d5:23:b1:8d:dd:b2:1c:f2:31:20:f6:33:
         7e:1e:7e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:01:16 2025 by rpki-client