Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a383030303a3a2f33332d3333203d3e20323732353639.roa
File:                     323830343a383534383a383030303a3a2f33332d3333203d3e20323732353639.roa (raw, json)
Hash identifier:          j6HRtwB9c1eFTOkKPVhNqmk2VlrRf/WiqjQbAH3OcQs=
Subject key identifier:   17:FC:C2:23:4E:C0:97:3B:65:02:65:50:6B:68:50:A1:4F:A7:EB:BD
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       7E337F6540E17617032B4D2425C267B7FF5B1CC7
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a383030303a3a2f33332d3333203d3e20323732353639.roa
Signing time:             Mon 09 Jun 2025 18:13:40 +0000
ROA not before:           Mon 09 Jun 2025 18:08:40 +0000
ROA not after:            Mon 08 Jun 2026 18:13:40 +0000
asID:                     272569
IP address blocks:        2804:8548:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 21:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:33:7f:65:40:e1:76:17:03:2b:4d:24:25:c2:67:b7:ff:5b:1c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: Jun  9 18:08:40 2025 GMT
            Not After : Jun  8 18:13:40 2026 GMT
        Subject: CN=17FCC2234EC0973B650265506B6850A14FA7EBBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:76:61:13:02:bd:23:d2:ec:bc:70:46:87:5d:
                    e8:aa:30:91:c7:60:5e:c0:dd:7b:95:06:f7:5e:21:
                    5e:7e:e9:4d:e3:d5:07:1e:58:16:c7:5c:8e:55:5c:
                    6f:09:b1:4b:20:45:1a:66:d5:b2:8a:2e:4e:33:c3:
                    c3:c6:45:18:d9:12:83:92:a8:05:08:17:b2:bb:26:
                    d5:db:c8:03:ad:40:6b:a8:01:f7:65:cf:78:58:2f:
                    1c:42:99:de:24:83:9a:70:d9:29:6a:14:75:36:ff:
                    e5:1e:00:65:1a:dd:39:69:69:62:fd:dd:c6:69:2b:
                    85:8d:d6:e6:30:68:77:a1:13:06:aa:27:a7:f6:aa:
                    ec:ee:80:bd:5a:b3:7e:15:0f:e8:63:9e:67:ac:e9:
                    19:80:48:ec:33:a0:a3:a3:38:22:24:1f:47:51:2d:
                    e6:fd:3f:32:05:9c:d4:b4:54:54:cb:86:ac:48:28:
                    65:0d:d2:8c:01:c3:e2:69:93:d1:72:9d:ad:90:3b:
                    99:f6:eb:da:6b:80:ea:ed:79:8e:37:26:32:43:d8:
                    2e:51:e6:49:02:a3:42:04:97:05:8a:87:37:ee:75:
                    6e:63:af:b4:ba:87:ae:84:6f:67:df:1d:75:98:5f:
                    d6:12:c0:b8:1c:4d:7e:8c:7f:56:68:56:2b:6a:da:
                    51:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FC:C2:23:4E:C0:97:3B:65:02:65:50:6B:68:50:A1:4F:A7:EB:BD
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a383030303a3a2f33332d3333203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         74:b7:03:5b:40:96:a5:44:df:c5:ae:9a:87:f1:1f:23:90:57:
         57:09:72:54:1f:bf:5d:da:76:e9:40:8c:68:10:60:2d:15:6d:
         67:fb:8b:29:da:2a:92:28:72:6d:6d:ff:26:64:04:b0:33:30:
         97:93:3e:76:e5:6b:9c:a7:fe:d5:fe:05:ce:c8:7f:f1:c6:4a:
         fe:07:49:21:05:cb:dc:cd:e2:ef:b4:cf:78:d7:63:69:e3:04:
         fa:d5:d1:c6:fe:21:6f:d8:0d:02:58:e6:3c:32:b8:0a:3a:15:
         42:af:cc:49:a4:3a:b6:89:7f:fb:47:cb:31:19:f7:e8:f3:6c:
         b2:79:a5:cf:e8:ae:db:c4:95:53:60:67:14:25:82:81:51:81:
         3a:68:1d:f2:9c:1d:48:34:80:56:75:43:8b:47:38:d7:a8:82:
         15:78:30:fe:bc:b4:54:f3:b3:cf:de:86:56:e5:f9:3d:a5:72:
         28:c1:57:47:57:ca:8b:93:f4:c5:f5:7f:48:03:a5:ae:f7:94:
         fc:72:a1:fd:b3:0c:3d:5a:f4:09:c9:9f:ce:af:4e:75:09:ef:
         48:20:77:3f:00:48:32:db:ce:f6:67:8d:93:2a:3d:0d:35:b9:
         48:6d:65:86:ea:8a:8d:cc:29:20:26:ea:8b:7a:0e:52:31:40:
         7b:97:47:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:52:34 2025 by rpki-client