Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a373030303a3a2f33362d3336203d3e20323732353639.roa
File:                     323830343a383534383a373030303a3a2f33362d3336203d3e20323732353639.roa (raw, json)
Hash identifier:          ApmJPUqAfmpmWEfNpGZBYF0bil7XvqG8WCcWeFN17uE=
Subject key identifier:   51:75:0C:8C:72:E3:E6:47:8F:93:98:78:32:3C:52:B3:26:81:19:44
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       6E7B39C7EE8BB5F6A6E77676E04466D578F3F5AB
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a373030303a3a2f33362d3336203d3e20323732353639.roa
Signing time:             Mon 09 Jun 2025 18:12:48 +0000
ROA not before:           Mon 09 Jun 2025 18:07:48 +0000
ROA not after:            Mon 08 Jun 2026 18:12:48 +0000
asID:                     272569
IP address blocks:        2804:8548:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 15:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:7b:39:c7:ee:8b:b5:f6:a6:e7:76:76:e0:44:66:d5:78:f3:f5:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: Jun  9 18:07:48 2025 GMT
            Not After : Jun  8 18:12:48 2026 GMT
        Subject: CN=51750C8C72E3E6478F939878323C52B326811944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:56:ca:50:d7:45:2b:e7:f2:39:bf:75:96:
                    09:a8:9d:bb:8c:e9:bc:1d:3c:ba:e7:6c:d3:dc:f2:
                    cd:f8:1b:42:e8:10:e9:24:e4:74:f7:5c:78:00:7f:
                    c6:5d:6c:f8:e8:fe:a7:ee:39:20:f0:67:c6:f5:d2:
                    b0:ad:cf:ca:5f:fe:a5:79:e6:df:e6:77:6a:d5:7f:
                    9d:5c:95:b9:1b:eb:e8:03:2f:f6:df:1b:1b:86:40:
                    57:6b:45:41:99:bd:7b:16:8b:c0:96:aa:d9:01:74:
                    fc:3f:a7:bb:64:ee:00:df:38:87:0c:be:2c:af:e0:
                    da:22:7d:b6:c2:39:ec:8b:5f:54:52:35:e0:ef:28:
                    2b:ad:7c:8e:37:cd:dd:13:9d:34:40:83:11:07:ff:
                    6f:a3:68:47:e0:64:3b:cc:d3:37:0d:d4:f5:e6:d4:
                    bf:60:a5:01:88:36:b1:8d:e5:e8:a3:ad:b7:0d:dc:
                    44:52:39:86:07:f8:ed:fe:6d:55:9d:1d:66:b7:33:
                    73:c0:38:00:16:af:f1:7e:ad:ba:e9:41:7d:75:31:
                    42:cf:3a:bd:19:5d:0c:7c:8a:ac:5e:ee:1f:ab:a5:
                    37:55:bc:1a:62:33:45:d5:bc:54:24:38:46:34:d1:
                    d1:86:e0:c2:88:82:21:bd:9f:cd:67:39:3a:96:f1:
                    0a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:75:0C:8C:72:E3:E6:47:8F:93:98:78:32:3C:52:B3:26:81:19:44
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a373030303a3a2f33362d3336203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9e:58:1c:8a:be:8b:b7:d9:fe:b9:79:89:9a:62:52:3a:60:25:
         1f:b8:f8:ed:1b:ee:52:dc:d6:4f:f1:05:90:c0:74:b9:ee:1f:
         84:74:bc:d2:e5:3f:19:4e:6e:0f:69:4f:49:97:00:91:2b:ad:
         90:7a:40:a9:93:82:8c:14:bd:ac:35:e8:4d:b8:79:fc:32:d6:
         55:bc:6b:65:46:e9:d3:17:b2:e7:cc:0c:c1:9f:33:10:6d:d8:
         c5:68:eb:98:e1:4f:e1:51:00:3d:e4:62:0d:9b:ce:c1:9f:60:
         90:e9:c6:30:51:d2:48:89:19:47:d5:80:c0:b4:bf:f0:22:5b:
         7a:93:64:14:d5:65:5f:37:fd:e6:e6:d1:3d:34:d6:30:b4:30:
         a5:c7:d6:5f:ea:de:f0:5f:71:4c:d2:6a:db:99:09:eb:e9:bc:
         6b:32:f2:9b:66:25:2b:8c:50:04:0c:84:e1:3c:cc:9f:f0:83:
         d9:51:5f:49:17:79:58:a1:57:d8:07:d9:d9:04:b6:98:4d:a4:
         da:b6:d6:e2:fe:c5:31:4d:2e:ec:4e:7a:db:c6:39:df:51:05:
         3d:16:9f:dc:ed:3f:d0:9e:e7:9e:d2:5a:f4:28:71:33:1e:91:
         bc:61:1f:be:db:fe:16:63:84:8d:c4:75:29:b4:4c:ff:00:4b:
         30:0a:43:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:38:39 2025 by rpki-client