Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a333030303a3a2f33362d3336203d3e20323732353639.roa
File:                     323830343a383534383a333030303a3a2f33362d3336203d3e20323732353639.roa (raw, json)
Hash identifier:          F3ksq/LxX4dHKoPjcrRkB9XzpUJ9Y+dhODqn+XbcsOE=
Subject key identifier:   CF:7D:AE:5D:5C:00:16:A0:5E:EA:FA:C8:91:F3:E4:22:FF:09:30:BA
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       65656F9B93DB483DF05FDBFEB1A8402566BD03AB
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a333030303a3a2f33362d3336203d3e20323732353639.roa
Signing time:             Mon 09 Jun 2025 18:08:56 +0000
ROA not before:           Mon 09 Jun 2025 18:03:56 +0000
ROA not after:            Mon 08 Jun 2026 18:08:56 +0000
asID:                     272569
IP address blocks:        2804:8548:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 15:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:65:6f:9b:93:db:48:3d:f0:5f:db:fe:b1:a8:40:25:66:bd:03:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: Jun  9 18:03:56 2025 GMT
            Not After : Jun  8 18:08:56 2026 GMT
        Subject: CN=CF7DAE5D5C0016A05EEAFAC891F3E422FF0930BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2d:68:68:fc:87:e1:66:40:35:14:c3:5a:e6:
                    5b:14:94:00:f3:81:75:fa:1a:f3:80:18:a0:d0:df:
                    f2:ad:bb:94:87:03:3a:25:ba:4b:31:f4:a5:b9:4f:
                    c4:88:9c:a6:fb:02:66:52:78:ea:39:7a:46:78:ea:
                    97:91:a7:8c:3c:e3:63:d4:0d:10:bd:df:5a:71:83:
                    b4:d7:c8:2a:31:bd:4e:58:73:d9:7d:80:05:34:3e:
                    fd:f0:a5:31:b0:7c:52:e1:a1:dc:37:92:39:07:ce:
                    2a:a5:73:10:78:77:e3:80:9c:50:a9:61:09:3f:05:
                    b2:e3:78:2f:f5:28:da:d7:ec:6f:90:8d:e2:d2:c1:
                    54:e6:96:44:20:d5:46:97:3c:45:7e:21:82:e2:88:
                    42:a7:24:e9:aa:ec:af:78:7e:a3:1a:8a:e8:1c:64:
                    15:59:5b:c9:d1:e8:cc:23:0b:50:59:c9:bc:1d:36:
                    80:89:94:3e:15:cb:01:d7:f3:6e:df:85:df:9d:20:
                    94:e9:59:24:87:8a:a5:39:84:95:c7:41:49:e6:a1:
                    83:f5:76:b2:4b:9e:77:a7:de:1f:f2:cd:c4:ee:55:
                    c8:fa:a9:c9:53:53:02:2a:f8:89:d7:a5:11:25:a5:
                    84:1f:ca:06:ed:c6:f1:89:8e:8a:04:eb:c6:f4:f0:
                    69:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7D:AE:5D:5C:00:16:A0:5E:EA:FA:C8:91:F3:E4:22:FF:09:30:BA
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a333030303a3a2f33362d3336203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7b:d4:ce:4b:97:b1:3f:5b:12:40:d6:9d:56:bc:83:80:99:60:
         20:28:ba:93:77:d6:3e:52:44:39:23:c2:27:1a:47:71:4e:55:
         be:b2:18:94:b9:43:da:2d:d2:b1:aa:47:cd:ad:9c:37:6e:a1:
         ea:09:de:d8:e7:bf:ad:f1:0d:e4:69:b4:eb:9c:91:7e:65:31:
         e6:86:7d:df:f7:55:64:de:2a:58:a4:db:24:68:39:70:ce:d6:
         b9:40:fa:6f:bc:97:cc:8f:11:04:9a:91:d5:6a:a3:08:f5:ed:
         66:6f:bf:74:7a:d6:8a:1f:d4:c4:f4:9c:87:38:4f:20:a3:ba:
         94:2f:f1:e6:ea:f1:78:56:78:bb:75:3a:14:f0:0b:40:78:b7:
         3a:a5:f9:ea:8c:84:4a:2d:95:49:c7:4a:72:79:46:5e:d5:bf:
         24:f0:e0:3a:27:52:16:e9:9a:48:cb:6a:54:d2:02:1f:0a:5b:
         29:97:ba:37:77:b6:06:c6:a4:5b:08:b7:e3:d1:ac:11:2f:34:
         bc:d9:39:d9:6c:67:95:7e:e5:18:e0:a2:72:84:cd:88:29:64:
         a7:e5:6d:80:ba:49:5c:df:7f:c3:a4:f8:b8:01:a8:e0:da:c2:
         bb:15:3a:e9:c8:f3:a7:da:ed:90:93:70:98:7f:fe:ea:67:47:
         25:20:f1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:31:14 2025 by rpki-client