Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a633030303a3a2f33342d3334203d3e20323638313331.roa
File:                     323830343a353837383a633030303a3a2f33342d3334203d3e20323638313331.roa (raw, json)
Hash identifier:          1JBlkGMIGxMWY7LQTFqU4rMW/3V4sS50t4cD7k2sodI=
Subject key identifier:   F8:BD:6D:9C:16:AE:2C:AF:A9:D9:F9:96:B0:AC:6B:33:C8:86:15:5B
Certificate issuer:       /CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
Certificate serial:       67F183329E3A872E50036B7BF74A5C24DC630E4A
Authority key identifier: A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a633030303a3a2f33342d3334203d3e20323638313331.roa
Signing time:             Tue 03 Jun 2025 16:36:26 +0000
ROA not before:           Tue 03 Jun 2025 16:31:26 +0000
ROA not after:            Tue 02 Jun 2026 16:36:26 +0000
asID:                     268131
IP address blocks:        2804:5878:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl
                          rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 16:55:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f1:83:32:9e:3a:87:2e:50:03:6b:7b:f7:4a:5c:24:dc:63:0e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
        Validity
            Not Before: Jun  3 16:31:26 2025 GMT
            Not After : Jun  2 16:36:26 2026 GMT
        Subject: CN=F8BD6D9C16AE2CAFA9D9F996B0AC6B33C886155B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fc:64:3b:52:4b:4b:3d:5d:7e:71:61:e9:21:
                    ec:a4:0f:c2:b3:b4:64:53:ed:96:1b:4a:20:a4:44:
                    fc:07:1d:09:3f:7a:a7:38:20:88:5d:02:9f:d0:fe:
                    b9:25:78:b1:09:b6:67:be:c9:56:d0:4f:dd:4c:85:
                    02:c7:2f:1d:26:4b:15:f6:f3:73:5b:5f:04:4d:d6:
                    ca:77:a3:e7:1b:e9:4e:d2:8e:ae:13:ad:ca:bd:ca:
                    5c:ac:cc:68:32:37:87:7d:ba:46:e5:4f:3a:26:79:
                    9e:9a:f2:b8:51:6f:d9:da:ae:75:72:71:5c:02:86:
                    e5:f4:b2:82:37:c2:b5:c4:14:00:14:37:ed:57:d0:
                    f6:5b:8b:9a:4d:51:ed:c8:89:00:f1:29:ea:71:e7:
                    8c:ec:25:4f:c1:24:9a:e3:9e:54:f9:1b:9a:0c:20:
                    e5:b1:3b:71:5e:10:e3:bc:34:80:79:87:7a:9e:01:
                    e4:23:9a:91:43:ed:8c:fe:27:dc:aa:7d:f6:e3:83:
                    77:d7:98:9c:2d:36:c1:ce:75:9e:cc:27:d5:74:1f:
                    c4:7e:56:eb:14:b7:da:53:48:71:c4:13:7d:da:55:
                    b0:fa:79:ee:01:13:fd:8d:79:e0:3b:51:ca:82:ca:
                    fd:40:91:60:a2:6c:d8:07:f6:bb:1e:5c:47:a6:1d:
                    18:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BD:6D:9C:16:AE:2C:AF:A9:D9:F9:96:B0:AC:6B:33:C8:86:15:5B
            X509v3 Authority Key Identifier:
                keyid:A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a633030303a3a2f33342d3334203d3e20323638313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5878:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         81:f3:a5:5e:d4:81:2b:b3:e2:4d:0f:86:de:07:23:e3:0f:40:
         64:be:7d:8a:79:c7:e5:41:91:aa:5a:b4:5a:83:8e:f6:11:49:
         a7:ea:56:b9:fc:e3:9b:92:32:7c:89:90:5a:01:6a:27:42:4f:
         db:27:9a:0a:d4:87:5a:e3:7d:20:fa:1a:1c:4b:93:52:68:ed:
         0a:f9:e4:cd:94:4d:c5:37:b6:8d:95:2c:e5:66:a4:6c:61:a0:
         fa:07:8a:8a:40:61:12:d8:fc:cd:d0:8b:b2:61:2f:ea:e2:44:
         10:df:7c:bf:0c:1e:7e:5a:4c:bc:69:10:42:98:e6:21:26:55:
         13:7a:dd:4c:a5:38:a7:cb:ed:b9:f5:33:f4:99:fb:ac:1b:87:
         15:b7:63:6a:77:f7:37:60:78:3c:32:d5:a6:b3:d4:46:52:a6:
         a1:0d:44:3f:cf:80:06:11:1f:e9:eb:89:3e:2a:3c:67:12:52:
         44:19:59:b7:e9:01:93:78:72:23:52:c5:48:99:b2:7e:6b:fd:
         3b:36:66:49:b6:fc:75:a2:f7:13:0e:70:6b:3c:d1:39:bd:75:
         e0:1a:0a:a4:e3:2c:15:83:ac:04:17:36:db:e7:83:33:3c:aa:
         31:c0:80:93:33:b9:56:24:ea:96:4f:71:f1:9d:69:fc:97:8d:
         99:a3:fe:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 22:06:44 2025 by rpki-client