Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/1/323830343a356631303a383030303a3a2f33362d3336203d3e20323639303734.roa
File:                     323830343a356631303a383030303a3a2f33362d3336203d3e20323639303734.roa (raw, json)
Hash identifier:          1ucuYEFZdH5ryw2G3VmOuR3mGgW0qi902Rs4m2a+lD8=
Subject key identifier:   F5:7A:2F:D8:AE:F0:38:69:50:7B:E8:7D:FF:98:2E:CF:53:66:89:AE
Certificate issuer:       /CN=DEB3E64BDD427B030E2E130619A5C32699317FA8
Certificate serial:       3A79410DA21D39581ADDF1B1D00F1C979BA9E290
Authority key identifier: DE:B3:E6:4B:DD:42:7B:03:0E:2E:13:06:19:A5:C3:26:99:31:7F:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEB3E64BDD427B030E2E130619A5C32699317FA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/1/323830343a356631303a383030303a3a2f33362d3336203d3e20323639303734.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     269074
IP address blocks:        2804:5f10:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/1/DEB3E64BDD427B030E2E130619A5C32699317FA8.crl
                          rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/1/DEB3E64BDD427B030E2E130619A5C32699317FA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEB3E64BDD427B030E2E130619A5C32699317FA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:79:41:0d:a2:1d:39:58:1a:dd:f1:b1:d0:0f:1c:97:9b:a9:e2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEB3E64BDD427B030E2E130619A5C32699317FA8
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:50:24:43:5b:69:2d:22:b3:51:33:98:f1:29:
                    6e:68:f9:94:1e:dc:0c:d5:14:98:f9:40:0e:3b:ab:
                    78:d5:76:b4:df:bd:73:be:d1:95:e8:14:b9:17:ae:
                    33:80:65:37:3d:08:d3:17:1f:df:13:37:fe:5a:dd:
                    a5:71:a4:26:d8:d3:40:7f:d7:f5:b4:9c:ae:d2:ed:
                    55:4d:5c:9f:64:28:4a:f4:7d:45:c6:ba:45:78:6f:
                    05:2e:22:da:e1:83:c2:77:69:94:81:3b:a5:d0:4d:
                    4d:42:ea:d3:39:3b:11:34:52:39:d8:8f:41:af:96:
                    cd:db:f9:fc:18:8e:6e:95:0b:57:71:54:5e:83:b7:
                    7d:2d:52:85:f4:9c:ee:1a:d8:1b:3a:2c:d1:7a:e0:
                    fb:57:27:46:8b:c7:f7:c6:2b:6f:04:70:12:cf:db:
                    06:cd:12:63:91:4e:61:42:70:5d:c9:7e:28:48:78:
                    48:b2:bf:cb:e3:fd:63:02:d0:eb:b5:2d:c6:9b:ae:
                    40:a8:53:d7:d5:ef:c0:18:99:a7:62:bf:2e:ef:e2:
                    c0:44:34:d3:a3:f5:e1:23:0d:cf:39:6f:bf:99:ae:
                    99:de:6e:56:c6:5b:96:6b:1a:13:db:8d:0c:9f:25:
                    4a:92:f3:ed:d7:75:dc:4d:f5:fc:1e:20:8f:b6:70:
                    3c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7A:2F:D8:AE:F0:38:69:50:7B:E8:7D:FF:98:2E:CF:53:66:89:AE
            X509v3 Authority Key Identifier:
                keyid:DE:B3:E6:4B:DD:42:7B:03:0E:2E:13:06:19:A5:C3:26:99:31:7F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/1/DEB3E64BDD427B030E2E130619A5C32699317FA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEB3E64BDD427B030E2E130619A5C32699317FA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/1/323830343a356631303a383030303a3a2f33362d3336203d3e20323639303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f10:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4c:e1:9d:6c:3b:b6:9a:d5:06:af:e0:cb:4d:d3:a4:79:b4:ce:
         1f:65:3d:04:7a:15:b5:66:ef:8b:a5:ca:9d:56:86:04:79:6b:
         3d:ec:5d:f2:e5:4d:24:bc:63:c3:7d:6e:9e:07:59:91:d4:85:
         f0:b2:71:36:74:84:12:43:1f:1a:d7:6b:84:bf:4a:00:4c:b0:
         0e:05:4e:60:dc:7c:43:f6:cb:6a:cd:c7:09:c9:d6:6b:d8:34:
         4d:ae:bf:07:c7:f8:bb:12:39:1a:31:07:5e:d8:29:51:09:15:
         8c:61:a3:3f:74:43:2f:6f:9f:2e:8f:b7:9f:45:0a:c2:9e:73:
         ef:b3:47:8a:82:3f:7e:ed:09:77:49:a0:b0:3f:81:62:d6:fe:
         9d:06:e1:9f:af:62:6c:5b:70:a6:cd:cc:e5:64:d7:f3:b3:03:
         8e:6d:84:c4:f6:8f:57:c8:d6:29:08:d0:65:94:bf:2e:81:ac:
         ce:3e:d7:00:94:4c:3e:40:9c:c8:bd:54:b9:1f:dd:5f:b7:88:
         3e:94:11:94:08:d0:95:f5:67:42:fd:06:a9:70:51:22:8f:1e:
         e7:d2:01:ea:c7:a2:b0:66:9d:b7:c6:c7:7f:43:e2:ed:c1:7e:
         b2:f0:f8:9d:71:2b:6b:c3:3d:ab:b4:4c:43:c3:80:c0:f8:f4:
         a0:24:17:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:53:40 2025 by rpki-client