Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a353030303a3a2f33362d3336203d3e20323732353639.roa
File:                     323830343a383534383a353030303a3a2f33362d3336203d3e20323732353639.roa (raw, json)
Hash identifier:          D+YynlyvaI/j6d0Gli46hjjqE9gVWNzy0/fke5fHDt4=
Subject key identifier:   C8:3E:DD:4A:83:CD:04:4B:08:34:7F:53:32:B4:95:42:44:E2:E8:13
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       25912A98A7A7BF9E8B53C3DF733C2AD4A060E5D7
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a353030303a3a2f33362d3336203d3e20323732353639.roa
Signing time:             Mon 09 Jun 2025 18:11:33 +0000
ROA not before:           Mon 09 Jun 2025 18:06:33 +0000
ROA not after:            Mon 08 Jun 2026 18:11:33 +0000
asID:                     272569
IP address blocks:        2804:8548:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 22:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:91:2a:98:a7:a7:bf:9e:8b:53:c3:df:73:3c:2a:d4:a0:60:e5:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: Jun  9 18:06:33 2025 GMT
            Not After : Jun  8 18:11:33 2026 GMT
        Subject: CN=C83EDD4A83CD044B08347F5332B4954244E2E813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:68:1b:78:92:2a:4b:ea:09:52:08:e1:6b:69:
                    1f:9b:84:68:df:ac:0f:91:9e:c7:f6:6b:af:47:5f:
                    1d:c5:7a:58:67:0c:ef:36:51:a3:2a:b2:1b:ab:15:
                    4b:20:53:15:39:28:38:57:1f:8a:2c:c3:e2:7c:80:
                    62:43:37:96:b4:8b:c2:98:5a:c2:6a:9c:c4:f5:63:
                    5f:bb:4f:ef:de:89:81:dd:e7:74:40:90:b4:45:67:
                    c0:8d:51:45:13:7e:53:95:f6:77:70:87:cc:04:55:
                    a5:41:03:87:67:29:e8:9e:ba:98:3d:0a:6f:76:f8:
                    94:db:72:0b:cd:d3:3d:76:4a:78:c4:3b:d8:fc:19:
                    84:41:3f:50:ce:72:8f:d0:13:df:e7:ca:70:24:a5:
                    7b:81:12:47:fc:82:4d:61:22:ee:61:95:b2:93:72:
                    53:a3:83:05:f6:10:3f:ea:13:d3:2a:61:ae:b0:98:
                    d1:02:b0:d3:12:71:27:f0:94:92:23:bd:03:14:d0:
                    31:33:45:02:9e:2f:51:7d:f3:ac:4d:5f:c2:da:65:
                    b0:2d:0a:fe:d7:80:c4:1a:8f:db:61:85:3d:57:fe:
                    15:9c:56:b4:d7:e4:df:c1:1a:b8:e4:cd:84:b3:74:
                    d7:3f:59:af:8f:9e:2f:a1:ec:72:94:76:83:05:5b:
                    9d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3E:DD:4A:83:CD:04:4B:08:34:7F:53:32:B4:95:42:44:E2:E8:13
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a353030303a3a2f33362d3336203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8e:9e:8d:85:18:87:07:99:f3:c3:fb:1e:f3:1a:d0:46:0f:e6:
         40:51:b5:7b:26:09:9c:d3:dc:02:e6:80:22:28:9d:cd:72:6e:
         b3:63:10:61:91:3c:13:12:2b:97:a4:dd:3c:57:1b:cc:57:34:
         c0:b8:1f:8b:fa:14:bb:57:e8:4c:a3:48:25:4e:97:04:08:74:
         9d:2c:fd:34:a5:a5:b1:4d:10:71:02:d5:5d:88:7f:7d:e6:4f:
         fc:1d:4a:92:25:2d:e5:ec:bf:ea:ad:f6:fb:34:e6:79:3f:97:
         12:94:1c:30:d7:27:8d:ca:c4:97:75:84:76:23:53:d4:c4:0f:
         28:5d:0f:d5:51:d9:bd:29:e1:f9:74:45:b6:52:7f:3f:59:4b:
         69:7d:74:b1:8e:0f:11:c3:eb:c7:00:06:3d:15:b1:c7:e1:76:
         77:e4:4d:2b:7c:1d:de:28:af:02:19:e3:cf:44:97:7a:8e:2b:
         99:f2:b5:55:d7:7d:56:5e:40:23:05:cf:ed:d8:07:74:af:aa:
         c0:2d:91:39:68:18:c5:fb:b1:c5:ec:e5:56:99:1d:14:17:e4:
         9b:3e:a3:cb:00:dc:51:20:b9:b0:30:c9:de:a1:95:9a:4e:69:
         47:b1:97:30:94:b2:e5:03:2e:8c:33:16:11:6d:69:18:52:13:
         e2:1e:c8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 11:23:42 2025 by rpki-client