Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a393030303a3a2f33362d3336203d3e20323732353639.roa
File:                     323830343a383534383a393030303a3a2f33362d3336203d3e20323732353639.roa (raw, json)
Hash identifier:          15GjcgDTB2VFBy0dktY4X9iDqRmtCMZKxDYsch3CfW4=
Subject key identifier:   BD:9B:A5:E7:28:C4:E6:BD:73:8E:AD:16:B9:72:7B:A4:DE:35:6C:E6
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       05F3EB4E2248F4A28E3B83026F095A2579A2C738
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a393030303a3a2f33362d3336203d3e20323732353639.roa
Signing time:             Mon 09 Jun 2025 18:16:55 +0000
ROA not before:           Mon 09 Jun 2025 18:11:55 +0000
ROA not after:            Mon 08 Jun 2026 18:16:55 +0000
asID:                     272569
IP address blocks:        2804:8548:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 22:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f3:eb:4e:22:48:f4:a2:8e:3b:83:02:6f:09:5a:25:79:a2:c7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: Jun  9 18:11:55 2025 GMT
            Not After : Jun  8 18:16:55 2026 GMT
        Subject: CN=BD9BA5E728C4E6BD738EAD16B9727BA4DE356CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:22:1f:e7:44:45:56:ab:b2:ce:ea:b1:f4:1a:
                    c8:9c:82:d1:0d:81:cc:af:fb:5c:bf:3b:23:41:2b:
                    3f:a9:eb:14:f6:63:47:b8:a8:02:3e:7f:40:00:9d:
                    cd:7c:64:c5:43:74:b8:43:46:15:23:d5:6b:e4:8e:
                    f6:6c:b5:ce:62:65:46:4f:37:dc:2e:df:c7:20:31:
                    ee:c2:27:46:2d:d0:82:ce:2b:bd:aa:a3:38:6e:50:
                    f0:75:cd:69:67:bd:c3:c4:28:16:fd:04:11:38:80:
                    d7:10:5d:26:ba:b6:30:56:6d:11:33:d2:51:1a:26:
                    87:04:a1:7b:6b:16:e8:4d:4b:1f:7b:3c:24:e8:0d:
                    bf:c8:bc:72:1d:30:4c:6e:07:4a:e2:ab:aa:18:a0:
                    5a:07:af:09:c0:fe:a3:07:2d:68:af:fc:f4:28:5c:
                    94:f1:24:2b:65:e1:71:cc:a6:09:b3:c9:e3:9f:c3:
                    01:60:b5:0f:c3:85:25:04:6d:30:89:ce:1d:ff:0c:
                    d6:84:9b:14:c3:3b:e4:18:45:2e:6b:97:db:82:17:
                    ec:fd:73:ce:0d:3a:19:92:06:00:36:5e:6f:b8:38:
                    14:42:ac:8d:b8:9e:56:2d:04:cf:33:f1:2b:aa:21:
                    5f:a7:30:5c:f6:4c:3d:c7:c2:5a:f9:58:ea:18:b4:
                    05:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9B:A5:E7:28:C4:E6:BD:73:8E:AD:16:B9:72:7B:A4:DE:35:6C:E6
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a393030303a3a2f33362d3336203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         05:30:e7:b3:c0:b3:cf:55:43:68:d1:3c:8a:0e:b9:7f:7e:03:
         cc:31:b2:2d:dc:c6:2c:e2:1a:90:f3:de:b2:32:4b:ee:7e:bd:
         99:67:a7:9d:1f:3b:d4:ea:03:27:33:30:bd:aa:54:d2:cc:74:
         29:32:d5:1a:c6:61:5f:bd:ee:99:df:ed:fe:2b:7f:fe:f4:79:
         4f:f0:52:99:e0:45:61:a1:b3:4e:71:3f:f3:01:34:e5:09:b2:
         df:94:c8:e0:d9:04:0c:34:a2:31:07:2d:6e:e3:93:28:d5:fb:
         69:9b:d7:fb:dd:79:f0:75:2b:06:4a:1c:a4:79:53:53:75:8f:
         f7:d2:4b:d1:94:be:ee:80:f2:b0:7d:8d:6d:df:ab:fa:9b:b4:
         0a:97:cb:6e:6f:8e:2b:19:cf:3d:29:ee:c5:fb:46:9d:05:e6:
         0b:62:04:7f:b0:71:fb:8a:2c:f4:6f:ba:20:38:62:32:9e:e4:
         81:b8:d5:a1:09:97:c5:93:78:f6:5f:25:56:22:e7:a5:64:cb:
         b5:b3:27:5e:35:6d:65:4c:43:e5:8d:78:ee:d5:fc:ab:58:18:
         31:fd:28:3e:84:66:23:aa:ca:5b:9c:17:91:5b:69:0c:42:8d:
         94:15:46:17:b1:31:3b:da:98:cb:aa:75:b1:ef:66:17:be:2a:
         c7:17:82:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 09:05:23 2025 by rpki-client