Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/323830343a383435303a3a2f33332d3333203d3e20323732323533.roa
File:                     323830343a383435303a3a2f33332d3333203d3e20323732323533.roa (raw, json)
Hash identifier:          TUBtfUjQGZ0MpFjE+janMDkl8U/B1QT7bTczIhOC6qA=
Subject key identifier:   7E:37:90:F4:9F:D9:C5:2E:F4:46:81:A4:7E:C8:EC:48:FE:18:1C:6A
Certificate issuer:       /CN=6517ED7C130BCBAC13709ADF76E878D88CD96DD4
Certificate serial:       4E2BC674E1335D6577FA18EFB786D6CF7CA2D71B
Authority key identifier: 65:17:ED:7C:13:0B:CB:AC:13:70:9A:DF:76:E8:78:D8:8C:D9:6D:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/323830343a383435303a3a2f33332d3333203d3e20323732323533.roa
Signing time:             Thu 05 Jun 2025 14:43:00 +0000
ROA not before:           Thu 05 Jun 2025 14:38:00 +0000
ROA not after:            Thu 04 Jun 2026 14:43:00 +0000
asID:                     272253
IP address blocks:        2804:8450::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.crl
                          rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 20:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2b:c6:74:e1:33:5d:65:77:fa:18:ef:b7:86:d6:cf:7c:a2:d7:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6517ED7C130BCBAC13709ADF76E878D88CD96DD4
        Validity
            Not Before: Jun  5 14:38:00 2025 GMT
            Not After : Jun  4 14:43:00 2026 GMT
        Subject: CN=7E3790F49FD9C52EF44681A47EC8EC48FE181C6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f7:2f:77:04:c1:c2:21:d4:9e:75:32:0d:f8:
                    d2:36:d6:76:8b:74:48:b9:13:b5:bb:33:db:b7:f7:
                    13:0f:02:30:16:d9:30:07:d9:6d:dd:37:80:13:14:
                    cd:f5:9a:39:02:8f:01:7c:32:35:8a:ef:38:56:0d:
                    48:2a:17:68:1d:4e:d7:26:06:56:25:b3:ee:66:89:
                    fa:79:63:b1:55:c7:62:c3:17:56:04:91:74:07:09:
                    3e:9d:f8:fe:dd:b1:5e:a8:3c:ae:ce:51:af:f7:00:
                    98:6f:74:04:2e:d5:4e:72:12:12:6c:80:44:80:fa:
                    d1:9b:e9:68:59:a0:d4:87:19:24:63:60:46:33:1d:
                    22:73:5c:76:19:2d:27:4c:e9:d4:b4:71:e8:e7:d9:
                    d4:ee:1d:82:8b:18:2c:c7:cf:1e:58:02:87:dc:b9:
                    f9:81:62:dd:b0:d7:d5:8f:db:27:35:95:ce:f2:9b:
                    65:e0:d2:97:23:f6:65:45:b5:7e:5c:8a:98:36:e1:
                    76:26:f7:4f:d2:65:ab:b8:de:a3:18:d8:fe:18:7f:
                    3b:3a:20:1b:fb:69:e4:b1:e7:62:76:9d:d9:a1:13:
                    93:66:9f:3d:90:1d:38:25:cd:3a:0a:e1:ca:f9:f6:
                    ca:b7:f1:06:04:fa:04:03:2f:e7:af:e7:75:e2:78:
                    ed:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:37:90:F4:9F:D9:C5:2E:F4:46:81:A4:7E:C8:EC:48:FE:18:1C:6A
            X509v3 Authority Key Identifier:
                keyid:65:17:ED:7C:13:0B:CB:AC:13:70:9A:DF:76:E8:78:D8:8C:D9:6D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/323830343a383435303a3a2f33332d3333203d3e20323732323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8450::/33

    Signature Algorithm: sha256WithRSAEncryption
         13:78:14:fb:2a:62:a5:cc:16:c7:05:d6:76:9d:28:f1:e3:69:
         3d:73:e5:09:f1:8c:05:bf:65:6f:fd:cf:72:17:e9:c6:2a:9a:
         2a:36:5a:29:21:34:12:1a:50:b7:f1:4a:e8:9f:dd:a3:d5:68:
         8f:50:82:3a:b8:f6:30:b1:24:67:b5:14:0d:e7:5d:3d:db:8c:
         39:6a:c1:4c:8a:89:22:95:08:1b:56:de:b9:6c:6b:50:bd:1e:
         52:fe:e0:a5:08:fd:6e:21:00:e3:4e:49:65:23:78:aa:44:31:
         3b:eb:07:89:68:11:74:ad:6b:0c:b6:a2:23:9e:3f:52:4c:44:
         c6:f5:0b:04:3b:4b:88:8a:f7:79:01:6a:9f:f4:fc:7e:cc:0b:
         da:2b:38:57:25:3e:00:81:fb:fe:39:ef:da:5f:84:f9:6c:3d:
         bf:31:13:4a:78:0e:06:0e:18:0a:0d:0a:97:39:f4:9a:f3:6e:
         99:fc:1b:10:f5:35:a9:9b:27:2a:7c:90:3a:15:3f:b9:5e:27:
         d1:02:95:f5:22:af:56:8c:ea:33:90:8a:39:35:65:de:73:a1:
         37:2d:77:b4:78:4a:fc:e9:4a:01:1f:73:fb:96:e2:05:f2:35:
         94:88:01:bd:12:8d:12:31:fd:9c:fd:a1:e5:a4:13:81:49:63:
         47:5b:a6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:07:29 2025 by rpki-client