Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/323830343a393432633a3a2f33322d3438203d3e20323734383236.roa
File:                     323830343a393432633a3a2f33322d3438203d3e20323734383236.roa (raw, json)
Hash identifier:          Z311etJiWQKLn+JmnE48W3qZSkPhLk9m6+lP+52N5B0=
Subject key identifier:   8E:85:09:7A:C9:08:5A:F2:BE:CB:2E:77:F6:0A:FA:6D:C0:30:B2:EF
Certificate issuer:       /CN=1D1328217C2BD2863C87D2938A271517414BABF6
Certificate serial:       500400E098E13769167420993E4BA6AFCB31C6E2
Authority key identifier: 1D:13:28:21:7C:2B:D2:86:3C:87:D2:93:8A:27:15:17:41:4B:AB:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D1328217C2BD2863C87D2938A271517414BABF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/323830343a393432633a3a2f33322d3438203d3e20323734383236.roa
Signing time:             Thu 05 Jun 2025 17:20:20 +0000
ROA not before:           Thu 05 Jun 2025 17:15:20 +0000
ROA not after:            Thu 04 Jun 2026 17:20:20 +0000
asID:                     274826
IP address blocks:        2804:942c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/1D1328217C2BD2863C87D2938A271517414BABF6.crl
                          rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/1D1328217C2BD2863C87D2938A271517414BABF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D1328217C2BD2863C87D2938A271517414BABF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 14:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:04:00:e0:98:e1:37:69:16:74:20:99:3e:4b:a6:af:cb:31:c6:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D1328217C2BD2863C87D2938A271517414BABF6
        Validity
            Not Before: Jun  5 17:15:20 2025 GMT
            Not After : Jun  4 17:20:20 2026 GMT
        Subject: CN=8E85097AC9085AF2BECB2E77F60AFA6DC030B2EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8f:b3:36:d1:c7:4f:0d:15:38:f5:29:ed:8f:
                    c8:47:54:4d:54:03:4d:47:b1:47:62:b0:56:e2:fe:
                    4a:91:43:a0:9a:01:e4:fa:19:6f:c8:41:af:df:f8:
                    16:02:48:d2:81:38:6d:ba:a3:59:bb:72:9d:50:bf:
                    51:77:0a:ce:1a:02:13:1f:3d:a6:09:90:78:75:69:
                    6e:b5:87:cb:ca:e8:5e:ea:90:5e:68:ee:7d:e4:8b:
                    33:56:d5:7d:68:75:88:f3:b7:67:e2:d1:1b:04:b6:
                    79:48:05:3a:90:ec:11:99:25:67:24:03:d5:7a:1b:
                    70:34:71:95:37:c5:30:19:dd:9c:e6:77:ec:4f:9a:
                    00:68:c4:20:98:d8:70:aa:c1:da:f5:a1:91:fe:ed:
                    66:73:6f:29:d3:e2:fe:d8:5e:da:5d:43:d1:65:16:
                    43:3c:f1:9e:78:2f:bc:ad:48:52:f7:c4:a6:49:4c:
                    97:2e:01:94:5a:8e:c6:36:4e:13:28:99:00:41:07:
                    5e:ac:f7:d2:f6:97:f8:c2:f5:90:a7:7b:b9:9e:f1:
                    45:72:13:65:a8:56:f6:9b:00:12:a6:6c:15:36:af:
                    4b:bd:cf:1f:c6:b4:19:bb:81:16:88:3c:21:57:5c:
                    da:f6:d4:d6:f7:8f:50:4a:26:96:70:00:fc:25:c4:
                    40:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:85:09:7A:C9:08:5A:F2:BE:CB:2E:77:F6:0A:FA:6D:C0:30:B2:EF
            X509v3 Authority Key Identifier:
                keyid:1D:13:28:21:7C:2B:D2:86:3C:87:D2:93:8A:27:15:17:41:4B:AB:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/1D1328217C2BD2863C87D2938A271517414BABF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D1328217C2BD2863C87D2938A271517414BABF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/323830343a393432633a3a2f33322d3438203d3e20323734383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:942c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:61:23:40:9e:72:74:48:4c:52:17:33:6b:10:ab:09:fe:4f:
         25:4d:24:a2:7e:e5:e4:c4:8f:9b:85:09:dd:08:7c:08:69:30:
         01:8e:ac:cc:ad:f6:00:88:55:5f:ac:73:8b:77:cb:e4:d5:70:
         2b:9b:8f:b1:97:21:60:cb:67:31:f8:5a:12:5f:ce:11:8b:6c:
         80:f5:06:67:00:77:df:bc:87:6b:7a:04:31:03:fa:17:96:57:
         6c:35:f5:01:50:e1:f6:db:35:61:47:cd:2a:3c:23:da:ca:bf:
         6a:84:52:81:fa:6d:dc:a2:7a:7b:79:19:27:48:f1:74:9e:1f:
         09:98:c7:69:f2:d8:a1:9c:cb:90:55:3e:ac:2e:e3:79:76:8c:
         ae:bc:a1:b7:e9:6c:7f:84:9e:8c:4b:8a:f9:46:1b:7e:3a:18:
         6b:ef:0d:aa:ea:c7:4c:d5:0d:e7:e6:85:a6:61:11:e9:c3:cf:
         74:d4:83:a0:2f:7d:c7:5a:5c:fd:8b:54:eb:e3:0c:7d:03:a9:
         60:0d:32:6f:e5:34:fc:5e:93:8b:d7:1d:99:b5:5b:47:ff:75:
         e3:95:32:3b:98:7d:40:15:ad:00:f0:29:76:9f:2c:f6:19:c2:
         59:37:bd:5e:23:15:b3:c9:95:dd:6d:c2:a4:e4:08:4d:45:a2:
         59:0e:ba:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:15:17 2025 by rpki-client