Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/323830343a376534303a383030303a3a2f33342d3334203d3e20323731363132.roa
File:                     323830343a376534303a383030303a3a2f33342d3334203d3e20323731363132.roa (raw, json)
Hash identifier:          XeP724fo22TlGV8WC29mo5IHfJ7iD8D5HjoonL3yOk8=
Subject key identifier:   C9:3A:F3:13:02:D9:5F:F1:2D:29:7A:F9:68:6D:1A:87:C2:E6:43:DA
Certificate issuer:       /CN=6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11
Certificate serial:       18AF40AE933CE3FB207EE90D86D91511658EAB17
Authority key identifier: 6F:4E:1F:59:E6:18:6A:77:B0:AD:EF:3E:51:0A:CE:74:7B:F1:AB:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/323830343a376534303a383030303a3a2f33342d3334203d3e20323731363132.roa
Signing time:             Thu 06 Mar 2025 02:58:12 +0000
ROA not before:           Thu 06 Mar 2025 02:53:12 +0000
ROA not after:            Thu 05 Mar 2026 02:58:12 +0000
asID:                     271612
IP address blocks:        2804:7e40:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.crl
                          rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 21:46:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:af:40:ae:93:3c:e3:fb:20:7e:e9:0d:86:d9:15:11:65:8e:ab:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11
        Validity
            Not Before: Mar  6 02:53:12 2025 GMT
            Not After : Mar  5 02:58:12 2026 GMT
        Subject: CN=C93AF31302D95FF12D297AF9686D1A87C2E643DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:3f:f5:18:28:94:ba:23:08:37:1f:cd:96:
                    1f:8b:c1:7d:ec:64:1d:22:ee:2c:f5:26:53:d6:cb:
                    3a:64:4a:83:31:88:96:e3:fe:a0:a2:6c:ee:ec:06:
                    74:11:86:d6:1d:ac:15:9a:b8:d9:12:2c:99:b1:22:
                    87:51:14:82:d0:62:db:a5:18:bb:af:5a:0e:60:29:
                    90:98:60:ce:e0:b0:df:ae:3a:94:3a:67:4c:1b:fc:
                    5c:c0:fc:f0:f7:15:54:d3:97:ce:21:af:60:43:bf:
                    19:fc:35:4d:b9:1c:9a:88:32:eb:ec:0f:30:cf:53:
                    df:13:9f:ff:95:ae:39:c5:db:4b:30:b6:2d:fd:2f:
                    d8:b6:40:ee:38:a0:75:48:a3:55:fc:fe:aa:ea:66:
                    79:02:7f:39:88:b0:2d:c3:2b:42:db:11:6b:69:24:
                    3e:b2:d0:58:60:71:1f:47:f8:f8:7d:ee:20:d2:f4:
                    b0:59:ec:e8:09:ab:bb:1b:17:5d:b5:60:07:8d:1a:
                    d5:1c:2c:b4:6a:31:4b:f2:30:73:5e:ea:ce:7a:81:
                    31:d9:74:c0:6d:f7:ed:d3:8e:8e:96:0a:da:79:24:
                    a5:2d:1f:89:69:fb:4c:ce:23:c6:d5:42:9c:d7:19:
                    c6:63:a1:5c:9f:72:b4:8e:99:05:71:33:94:6e:2c:
                    85:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3A:F3:13:02:D9:5F:F1:2D:29:7A:F9:68:6D:1A:87:C2:E6:43:DA
            X509v3 Authority Key Identifier:
                keyid:6F:4E:1F:59:E6:18:6A:77:B0:AD:EF:3E:51:0A:CE:74:7B:F1:AB:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/323830343a376534303a383030303a3a2f33342d3334203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e40:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         73:a1:69:7d:fb:35:ee:82:3f:8e:de:ea:63:e2:2e:ea:c1:52:
         0a:2c:8b:f0:79:51:00:4b:b6:aa:5a:b1:6e:77:95:b4:f5:54:
         af:54:d6:2a:de:32:b4:bf:d3:ee:0f:de:31:c5:6c:7c:04:43:
         49:ea:13:02:a7:72:35:94:62:f9:9d:d5:a8:06:da:51:57:74:
         93:d0:17:19:c0:de:1c:17:ba:c4:3d:0b:cd:fa:35:26:c7:24:
         47:05:2c:1d:5c:de:e8:25:52:53:13:bc:30:52:35:17:1e:7b:
         38:54:f5:92:eb:bf:75:a4:73:90:a2:74:83:0a:7c:e8:4f:ed:
         60:18:3d:5c:06:c2:d5:00:a3:c8:2e:82:e1:f6:fb:07:d3:6e:
         ff:9e:b1:21:8b:f4:80:0e:c8:ee:ad:93:91:6f:36:35:6c:9f:
         4a:ad:11:95:1d:49:53:a0:84:e1:99:1c:e0:82:cb:ab:ad:58:
         58:ab:84:f1:31:e8:b5:71:2a:d1:ac:5b:77:ee:43:e1:a4:33:
         c9:dc:59:e9:d7:3f:99:1d:4f:21:59:1d:ca:19:00:ea:75:d0:
         05:e7:6a:99:6b:a8:f8:ec:fd:c1:b3:9b:ae:55:09:b3:a7:63:
         6b:37:7c:a8:ef:31:24:78:e7:33:42:ca:be:ca:99:61:b3:86:
         5f:bd:d7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:56:13 2025 by rpki-client