Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/323830343a326339383a3a2f33322d3334203d3e20323635323239.roa
File:                     323830343a326339383a3a2f33322d3334203d3e20323635323239.roa (raw, json)
Hash identifier:          r7PSzngslhuwB9el6OJX8CR7jpyzSswjTvJHrmoKzHU=
Subject key identifier:   1E:3B:29:0A:19:ED:8A:36:B4:4F:4E:2F:74:75:78:77:3E:97:FC:E3
Certificate issuer:       /CN=62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A
Certificate serial:       65363607026AF36134C2C271FB7C34226E91256D
Authority key identifier: 62:E3:DA:F2:BA:0A:F8:8F:13:E6:D8:B8:A6:B4:6A:31:82:26:65:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/323830343a326339383a3a2f33322d3334203d3e20323635323239.roa
Signing time:             Fri 30 May 2025 22:09:05 +0000
ROA not before:           Fri 30 May 2025 22:04:05 +0000
ROA not after:            Fri 29 May 2026 22:09:05 +0000
asID:                     265229
IP address blocks:        2804:2c98::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.crl
                          rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 04:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:36:36:07:02:6a:f3:61:34:c2:c2:71:fb:7c:34:22:6e:91:25:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A
        Validity
            Not Before: May 30 22:04:05 2025 GMT
            Not After : May 29 22:09:05 2026 GMT
        Subject: CN=1E3B290A19ED8A36B44F4E2F747578773E97FCE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:fc:fd:7a:09:3c:0f:d7:10:24:44:8d:bd:
                    00:af:af:33:e4:fc:08:4f:2b:e7:f4:c2:6f:b9:f8:
                    c9:e8:87:3b:2c:69:56:08:f0:f4:f3:bd:53:d9:9a:
                    e4:a2:94:ae:17:8d:62:b6:ee:e0:89:35:0f:bd:33:
                    8e:ce:63:bb:c7:b6:02:90:b8:6d:f8:df:c4:98:62:
                    cf:e9:7e:cb:7f:b1:8c:7e:71:ad:53:c7:f9:85:45:
                    53:21:ac:54:91:73:56:40:af:47:be:c3:f0:67:0d:
                    01:10:ae:85:92:58:aa:12:5b:c3:29:06:d4:d5:58:
                    ba:52:ae:a9:d2:1b:07:8b:de:84:e8:86:b1:d6:50:
                    ea:62:9b:57:5f:35:fc:6b:3d:2a:7b:bb:a7:f7:6e:
                    3f:8d:28:eb:4b:0b:40:60:4e:60:cf:01:7a:26:79:
                    9b:d0:9c:42:22:d6:44:8e:fe:d5:2b:b7:a1:08:4a:
                    2d:fe:60:d6:7e:4f:7b:e5:05:40:37:d8:98:7c:44:
                    7f:db:03:47:6a:c7:85:73:20:3a:fd:72:40:c5:71:
                    cf:8c:7a:e6:e8:94:33:fb:54:5b:ae:91:16:fc:d9:
                    f6:99:60:0f:7d:b8:d7:56:a8:72:25:64:9f:7b:f3:
                    31:95:23:ad:28:93:3b:81:70:1c:bd:ef:e7:64:bc:
                    81:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3B:29:0A:19:ED:8A:36:B4:4F:4E:2F:74:75:78:77:3E:97:FC:E3
            X509v3 Authority Key Identifier:
                keyid:62:E3:DA:F2:BA:0A:F8:8F:13:E6:D8:B8:A6:B4:6A:31:82:26:65:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/323830343a326339383a3a2f33322d3334203d3e20323635323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c98::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:2e:ce:c3:6a:8b:4d:d2:87:de:b6:cd:87:af:ca:fa:ee:9c:
         e4:ee:dd:49:a3:f6:cc:32:5d:02:9e:af:91:fb:f6:0d:75:f9:
         01:41:a0:f3:1a:ae:bc:76:e1:d3:aa:05:49:d7:1f:c4:13:a4:
         7c:c0:16:1b:a8:8b:cf:f2:84:1d:b9:f3:bf:c5:26:23:cb:95:
         2e:d0:93:86:2a:18:53:8a:2b:67:41:1a:87:92:4d:bd:bd:ce:
         1d:7e:3a:61:87:80:a6:08:90:41:00:6e:f0:49:56:b4:1b:af:
         eb:4b:03:e8:16:b0:9b:b2:97:24:a1:a7:35:c8:d0:d2:04:58:
         dc:05:59:92:80:a1:87:f5:5c:c3:79:6f:cf:a7:c9:27:44:94:
         f8:2c:6f:04:3d:68:58:11:76:3d:81:b4:4f:f2:01:d6:28:8f:
         99:b2:bc:3b:26:5f:fb:2c:1d:94:08:3a:9b:98:2a:21:33:da:
         1f:96:76:11:ee:8e:45:40:14:57:a1:c7:a2:a1:ca:c2:27:13:
         15:85:d4:5c:9c:9e:98:e3:5e:1f:38:0a:3a:a6:86:19:4b:db:
         d7:10:2d:f6:b0:95:7e:36:57:ce:95:27:03:71:e7:fa:50:7c:
         a1:4b:89:2b:af:6d:d6:0f:e9:d8:52:5a:7d:c3:d2:97:c7:f2:
         79:e4:dc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:16:33 2025 by rpki-client