Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a343030303a3a2f33362d3336203d3e20323732353639.roa
File:                     323830343a383534383a343030303a3a2f33362d3336203d3e20323732353639.roa (raw, json)
Hash identifier:          daQ+n3QaIjrloO1IWWvn+BIeOnFp+FixnrhPX67qZvY=
Subject key identifier:   8F:88:10:66:59:20:B8:E1:CE:BD:40:99:D2:CE:76:BF:72:4A:34:F2
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       298269D26927CC67BE5A1D30510667BAC6792344
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a343030303a3a2f33362d3336203d3e20323732353639.roa
Signing time:             Mon 09 Jun 2025 18:10:34 +0000
ROA not before:           Mon 09 Jun 2025 18:05:34 +0000
ROA not after:            Mon 08 Jun 2026 18:10:34 +0000
asID:                     272569
IP address blocks:        2804:8548:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 04:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:82:69:d2:69:27:cc:67:be:5a:1d:30:51:06:67:ba:c6:79:23:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: Jun  9 18:05:34 2025 GMT
            Not After : Jun  8 18:10:34 2026 GMT
        Subject: CN=8F8810665920B8E1CEBD4099D2CE76BF724A34F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:34:8b:53:67:35:0a:ae:4f:9c:41:16:87:d9:
                    1a:57:4a:3a:5b:db:1d:61:3f:4a:d1:5a:07:dd:17:
                    ae:43:cc:05:c0:b0:9f:dd:bf:21:f3:10:92:ff:43:
                    7c:44:60:93:ff:75:14:8d:60:67:ad:b8:5c:b4:76:
                    29:05:47:80:ea:74:27:7b:39:1b:59:0d:94:66:ae:
                    af:eb:74:11:15:d5:1a:04:51:35:ba:98:68:7f:16:
                    6b:1d:9a:48:a4:aa:de:ef:68:fa:51:25:ea:ba:83:
                    96:3d:44:98:a3:d1:af:cd:61:fb:e7:c3:88:d5:73:
                    1d:d4:96:75:94:70:f5:d6:a8:7d:3d:29:57:84:52:
                    df:35:2d:df:7f:f8:8a:67:bb:b2:ec:32:5f:91:c8:
                    15:dd:1e:76:3c:87:e5:38:e6:7c:d8:d0:d0:ce:07:
                    2f:f0:54:bf:27:3f:2a:32:de:dc:ea:61:51:56:b6:
                    36:b3:c2:35:e5:d9:dd:f4:8f:5f:c2:97:30:f5:58:
                    56:ca:06:58:c6:41:91:f3:b5:25:f9:f7:01:e7:f0:
                    23:a2:d0:f7:41:4e:64:36:e7:ac:28:9e:d4:52:a5:
                    fa:5c:bc:3d:69:4d:ec:32:08:aa:e1:91:d0:2c:2a:
                    e7:cd:fa:75:c4:48:5e:33:ca:29:00:92:d2:fa:89:
                    1f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:88:10:66:59:20:B8:E1:CE:BD:40:99:D2:CE:76:BF:72:4A:34:F2
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a343030303a3a2f33362d3336203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         cc:d6:eb:01:42:2c:2a:b8:cb:32:fb:77:ee:ef:34:54:cc:28:
         c2:e1:96:aa:e6:59:5d:bc:df:14:72:f0:5b:59:b6:5d:6a:d7:
         81:eb:c8:bf:94:ab:f8:a2:95:53:f1:6d:e1:cf:d0:43:87:95:
         c5:f0:7b:87:d9:0f:05:2b:7d:9c:ed:24:e5:4e:a1:9e:be:13:
         f0:64:b6:f4:d3:13:bd:f4:1f:8b:e1:87:5b:a0:00:22:dc:6d:
         42:23:ea:ae:c2:d5:66:86:34:2f:43:69:ac:26:41:8b:72:e9:
         76:f4:73:1b:48:de:ad:0e:43:e6:85:da:15:9c:92:f3:3e:5d:
         74:81:46:7b:10:78:ca:61:93:a2:6d:af:47:2d:a7:89:9d:7d:
         ad:7f:b3:f1:e8:07:b9:a6:55:50:9a:3c:32:9b:1d:06:a4:38:
         68:4f:46:dc:dd:b1:48:e9:18:58:47:fc:cd:8c:68:fb:5d:40:
         57:12:20:11:20:cb:e8:c9:57:69:dc:e0:ba:02:04:0d:8e:1c:
         81:cb:90:9f:e3:d5:e0:b7:87:4d:5b:b6:da:a4:0d:eb:dd:bd:
         15:02:5c:db:3a:42:01:b7:90:c8:ac:d3:53:fe:54:7b:38:7a:
         b1:95:d3:b6:4d:4c:3d:a2:cd:f9:12:4e:e3:ed:3a:0f:e6:06:
         3f:72:c0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:19:03 2025 by rpki-client