Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/323830343a313731343a3a2f33322d3332203d3e203631393138.roa
File:                     323830343a313731343a3a2f33322d3332203d3e203631393138.roa (raw, json)
Hash identifier:          sbSZx4ye4oAWfEhT8dx/24/7lWbsDG9BcvKoQQSzS7s=
Subject key identifier:   BD:A2:BF:E2:08:CF:3C:9D:F1:9B:B3:36:E9:3D:CE:C9:2C:3E:EA:4F
Certificate issuer:       /CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
Certificate serial:       25683E647485E1999360791572358EEF2FF059C4
Authority key identifier: 6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/323830343a313731343a3a2f33322d3332203d3e203631393138.roa
Signing time:             Wed 05 Mar 2025 19:00:12 +0000
ROA not before:           Wed 05 Mar 2025 18:55:12 +0000
ROA not after:            Wed 04 Mar 2026 19:00:12 +0000
asID:                     61918
IP address blocks:        2804:1714::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl
                          rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:68:3e:64:74:85:e1:99:93:60:79:15:72:35:8e:ef:2f:f0:59:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Validity
            Not Before: Mar  5 18:55:12 2025 GMT
            Not After : Mar  4 19:00:12 2026 GMT
        Subject: CN=BDA2BFE208CF3C9DF19BB336E93DCEC92C3EEA4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ea:5f:f2:ae:b8:84:03:97:e6:c8:5d:28:02:
                    54:e8:16:5b:88:2d:58:73:07:af:1e:90:de:a3:1b:
                    5a:f6:bd:ac:bd:fe:73:02:f7:36:96:08:14:06:6b:
                    e5:87:1c:99:75:f6:5a:5e:dc:ff:de:40:be:83:b2:
                    3f:6d:ed:a5:2e:19:3d:68:c3:ab:e3:59:86:48:00:
                    98:43:80:8c:56:e5:0a:77:05:37:ae:f1:99:ae:e6:
                    18:c9:ca:bf:a3:ed:d7:2a:c1:1f:c4:0c:a5:09:40:
                    9b:27:5c:20:db:5f:93:14:23:91:ec:87:b8:a5:5d:
                    f1:c4:10:73:4a:07:5f:6c:55:ac:e2:82:c8:d6:67:
                    eb:a7:cd:9f:61:2f:4f:23:49:7b:be:f6:8f:0d:18:
                    0b:7c:d7:d4:e2:bc:2f:97:23:82:c0:11:5d:5a:a5:
                    58:e2:a2:5f:ee:a0:fb:a8:d4:24:fb:a5:87:c5:ca:
                    93:e0:59:69:7d:39:00:40:27:28:2a:75:dd:22:b3:
                    bb:b1:cc:00:64:cf:02:06:c4:bb:b2:65:e0:4e:ee:
                    9a:15:d6:60:dd:d1:d9:45:38:4d:ee:f0:7d:92:65:
                    88:38:2c:f8:d3:9a:90:48:77:fa:e0:7e:2b:9b:d1:
                    9b:61:ff:96:2e:f3:be:e1:19:08:bf:7b:51:00:68:
                    6f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A2:BF:E2:08:CF:3C:9D:F1:9B:B3:36:E9:3D:CE:C9:2C:3E:EA:4F
            X509v3 Authority Key Identifier:
                keyid:6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/323830343a313731343a3a2f33322d3332203d3e203631393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1714::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:fc:a8:ff:32:31:ac:12:b1:dc:b9:f3:54:82:b5:ec:59:6a:
         4a:05:c8:eb:3a:0c:b1:1a:ce:67:46:12:0f:f3:d8:b9:1b:13:
         69:4f:c9:13:ad:58:35:a1:c3:e9:98:ec:fc:7f:50:71:15:f6:
         b1:bd:bf:fc:2c:e3:02:eb:c8:c1:28:e1:6d:f4:e2:b0:35:d8:
         0e:0d:70:3c:46:06:0e:5a:23:11:72:13:b4:00:ac:43:91:fe:
         84:79:56:2e:53:52:32:b6:c2:be:c6:aa:1b:2c:e6:55:57:f1:
         15:21:8f:41:99:3d:b1:6e:a5:68:db:6d:94:38:c8:f1:b6:d5:
         59:8c:2e:15:a5:3a:b9:0d:9c:12:ac:2c:ed:37:08:cc:0e:7e:
         b6:4b:85:df:f1:2f:4e:6e:13:62:b8:24:23:d2:b5:39:3b:3d:
         5d:9f:df:cb:f8:d0:ab:88:73:09:f8:2a:14:db:ec:1d:85:b1:
         72:f8:40:bf:c8:25:b6:6f:7a:32:a6:34:da:b9:41:ff:f4:dd:
         55:db:14:2e:33:ec:4b:f0:8a:4d:8d:5d:7d:77:43:fd:49:af:
         55:8c:c8:e8:11:8c:3c:21:a8:38:7a:2a:17:11:eb:f0:31:c5:
         4b:97:86:b1:80:ee:fd:6c:4c:9a:cb:ae:d9:19:73:7e:2d:1c:
         88:bf:10:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:26:27 2025 by rpki-client