Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mca4dj5P2K8fNxnJoZ5UxZg1RJ8oQAvEuC8cp9ypFiW/0/323830343a366663383a3a2f33322d3438203d3e20323730363834.roa
File:                     323830343a366663383a3a2f33322d3438203d3e20323730363834.roa (raw, json)
Hash identifier:          aaTE8PEmC06qRVHQI3fvQsaEMjFaIdAlXNmOze7Lmng=
Subject key identifier:   2B:F7:FF:9F:89:BD:71:D7:80:6B:B3:1B:C3:DB:20:B1:7A:DA:50:EA
Certificate issuer:       /CN=45B6BEC77EDDAC8F9E384D4FBD33C876CB20F35D
Certificate serial:       55D6F861F6A8EE29173EEF57FF4FD62CFEABF028
Authority key identifier: 45:B6:BE:C7:7E:DD:AC:8F:9E:38:4D:4F:BD:33:C8:76:CB:20:F3:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45B6BEC77EDDAC8F9E384D4FBD33C876CB20F35D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mca4dj5P2K8fNxnJoZ5UxZg1RJ8oQAvEuC8cp9ypFiW/0/323830343a366663383a3a2f33322d3438203d3e20323730363834.roa
Signing time:             Mon 19 May 2025 19:15:01 +0000
ROA not before:           Mon 19 May 2025 19:10:01 +0000
ROA not after:            Mon 18 May 2026 19:15:01 +0000
asID:                     270684
IP address blocks:        2804:6fc8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mca4dj5P2K8fNxnJoZ5UxZg1RJ8oQAvEuC8cp9ypFiW/0/45B6BEC77EDDAC8F9E384D4FBD33C876CB20F35D.crl
                          rsync://rpki-repo.registro.br/repo/3mca4dj5P2K8fNxnJoZ5UxZg1RJ8oQAvEuC8cp9ypFiW/0/45B6BEC77EDDAC8F9E384D4FBD33C876CB20F35D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45B6BEC77EDDAC8F9E384D4FBD33C876CB20F35D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 18:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d6:f8:61:f6:a8:ee:29:17:3e:ef:57:ff:4f:d6:2c:fe:ab:f0:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45B6BEC77EDDAC8F9E384D4FBD33C876CB20F35D
        Validity
            Not Before: May 19 19:10:01 2025 GMT
            Not After : May 18 19:15:01 2026 GMT
        Subject: CN=2BF7FF9F89BD71D7806BB31BC3DB20B17ADA50EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:9b:48:0b:83:5f:66:2e:a8:c8:87:73:d1:
                    a6:b2:ac:16:8a:be:39:bd:d3:47:5d:19:61:77:3b:
                    fd:3a:1a:c9:6b:86:11:19:a1:76:5d:1d:b9:d3:c4:
                    4d:0f:c9:4c:ed:ad:ed:6a:19:e4:9f:14:e9:5e:6e:
                    e3:c8:06:dc:82:d2:ff:f4:9f:0d:2d:72:3b:57:83:
                    93:62:76:ed:4e:37:08:d3:ed:0f:a9:82:9c:ad:25:
                    ab:4a:0b:75:0a:99:f1:39:ad:c8:ba:73:0b:2b:fd:
                    f8:36:08:ba:f5:b8:a1:05:9a:12:01:3c:c8:f3:cb:
                    c9:73:63:1c:d2:bf:b3:21:9b:e9:b0:66:f1:f0:76:
                    f3:46:08:81:ef:3c:4d:90:90:4a:5d:a5:33:58:34:
                    97:a1:07:23:5f:81:be:be:b6:25:ca:c7:c5:6c:e9:
                    81:a1:a7:5f:ec:93:db:e3:b9:07:33:66:bb:1b:10:
                    91:6f:ec:33:ae:c4:4e:05:21:19:99:c0:f7:86:fc:
                    93:9f:35:44:73:3e:e4:e0:0d:81:4e:a6:c5:b2:34:
                    3d:f7:c8:37:6e:5c:4c:a6:8a:58:19:0b:bb:e1:3c:
                    12:e1:a3:e1:88:e5:fa:36:ba:b7:aa:07:c3:05:fc:
                    3c:28:1b:b7:f3:d4:ca:05:fc:1a:f0:aa:3a:d8:f5:
                    e4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F7:FF:9F:89:BD:71:D7:80:6B:B3:1B:C3:DB:20:B1:7A:DA:50:EA
            X509v3 Authority Key Identifier:
                keyid:45:B6:BE:C7:7E:DD:AC:8F:9E:38:4D:4F:BD:33:C8:76:CB:20:F3:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mca4dj5P2K8fNxnJoZ5UxZg1RJ8oQAvEuC8cp9ypFiW/0/45B6BEC77EDDAC8F9E384D4FBD33C876CB20F35D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45B6BEC77EDDAC8F9E384D4FBD33C876CB20F35D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mca4dj5P2K8fNxnJoZ5UxZg1RJ8oQAvEuC8cp9ypFiW/0/323830343a366663383a3a2f33322d3438203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:72:7b:41:01:15:52:f6:15:57:d3:af:f7:c6:1b:c0:04:26:
         67:9e:17:c6:03:cd:34:23:67:98:fb:0b:cc:0e:b9:79:de:ed:
         2e:1b:2b:09:7e:7c:61:b9:ad:77:e4:ae:50:b5:d1:5f:31:46:
         02:14:f3:04:46:1c:6b:a1:2b:b0:dd:bc:fb:92:ce:19:08:db:
         d9:82:29:0e:6d:48:cd:68:58:18:ee:c7:e7:a2:d9:09:f0:af:
         df:7c:ed:0f:5c:cb:92:d1:54:eb:f2:06:f1:58:c0:88:3e:c0:
         5f:ca:d2:2d:2a:08:20:9e:38:ce:cc:99:b4:2f:4a:58:34:d7:
         ee:78:20:f4:5d:86:49:74:96:60:e2:96:27:22:a7:9c:d4:05:
         27:cb:ba:f3:b1:77:b2:86:ff:2c:fd:55:25:0a:f2:04:27:dd:
         23:da:15:0b:a4:0c:e9:3d:75:4d:ca:f2:15:7b:b5:88:56:8c:
         63:b2:97:e1:fe:f5:95:c7:a2:1e:b8:5f:77:d1:53:b1:fe:84:
         67:50:46:a5:6d:9e:ea:a8:c5:47:6c:dc:c7:cd:65:ec:71:88:
         dd:b2:10:b7:c4:de:bd:df:8d:9e:b2:3b:99:c0:c2:ca:b2:5b:
         84:1d:e3:8b:4c:87:ea:63:1c:ec:a2:46:5f:2b:7d:14:28:e4:
         77:0d:8a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:17:30 2025 by rpki-client