Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a3a2f33342d3334203d3e20323732353639.roa
File:                     323830343a383534383a3a2f33342d3334203d3e20323732353639.roa (raw, json)
Hash identifier:          MC8N5/VfnyINkxqQt06krHA4whskSCeSyrMKxP2PJyY=
Subject key identifier:   B9:B2:71:FC:00:32:96:22:51:3E:BA:9D:18:08:8A:C0:A2:B8:46:13
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       04A61318A680D7CDB4B079A7EFA861D8FA5B2BE3
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a3a2f33342d3334203d3e20323732353639.roa
Signing time:             Mon 09 Jun 2025 18:05:56 +0000
ROA not before:           Mon 09 Jun 2025 18:00:56 +0000
ROA not after:            Mon 08 Jun 2026 18:05:56 +0000
asID:                     272569
IP address blocks:        2804:8548::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 21:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a6:13:18:a6:80:d7:cd:b4:b0:79:a7:ef:a8:61:d8:fa:5b:2b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: Jun  9 18:00:56 2025 GMT
            Not After : Jun  8 18:05:56 2026 GMT
        Subject: CN=B9B271FC00329622513EBA9D18088AC0A2B84613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:98:58:5e:12:23:f5:f0:38:14:52:16:36:d6:
                    6c:8b:89:b0:d1:e4:29:0e:f2:77:54:4e:43:21:7d:
                    e0:7c:b5:1b:6b:6e:98:5f:d7:06:01:0f:ca:02:d8:
                    f2:96:d3:80:a5:8c:ba:3a:93:c8:1f:87:95:27:a1:
                    fa:80:0a:fb:40:dd:da:61:04:5c:cd:05:01:d6:97:
                    c0:eb:54:27:d8:b8:77:5e:e2:24:2c:86:45:8b:a5:
                    36:ab:0a:27:1f:38:29:3e:0c:6a:56:be:42:f1:e4:
                    ec:9f:94:9f:53:89:45:ee:d3:a0:53:3a:89:22:47:
                    4d:f1:44:c8:ff:92:7d:49:f0:68:31:b5:e3:1e:b9:
                    b8:ec:35:fb:69:74:1a:70:d5:67:a5:8c:ed:66:2d:
                    cd:25:59:ea:74:c4:ec:56:58:e5:81:3a:ce:51:b3:
                    50:d0:5e:3d:36:be:c9:a0:8b:5f:53:1d:a8:8a:91:
                    36:d3:70:22:24:61:94:38:b7:7b:8d:7e:ea:70:14:
                    d5:54:00:9a:dd:77:4e:a0:c2:07:21:52:8a:10:7e:
                    48:31:0b:b6:07:b1:a5:d2:63:84:76:3c:ee:3d:b8:
                    03:11:89:03:f6:ff:47:c8:8a:62:d6:3a:e0:4b:fe:
                    67:d4:3e:d6:88:7e:ab:ce:7b:42:21:e9:f4:79:e5:
                    0b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B2:71:FC:00:32:96:22:51:3E:BA:9D:18:08:8A:C0:A2:B8:46:13
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a3a2f33342d3334203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548::/34

    Signature Algorithm: sha256WithRSAEncryption
         a3:67:35:e2:c8:9f:1c:74:16:29:d0:a6:5c:74:c2:18:31:75:
         a6:53:73:31:f0:e3:75:62:d5:67:3f:35:67:38:3c:c1:6d:a5:
         75:6b:2a:2d:41:50:46:5c:9a:f2:be:18:42:ea:d2:b8:87:64:
         4d:48:67:08:ea:23:21:08:77:63:76:c8:3c:92:13:41:a8:1a:
         52:46:6f:b7:ef:d0:9b:3d:ba:bc:b2:b5:31:67:f3:08:a0:ad:
         d0:c9:8e:17:aa:07:c5:62:56:50:f7:d3:58:76:64:01:2e:5f:
         c8:5b:29:5b:f9:21:85:aa:23:3b:ff:89:7e:7c:0c:34:84:d6:
         6f:2d:20:00:eb:2f:d8:a8:15:c1:7d:10:b6:06:30:63:56:54:
         1d:1b:5d:1d:06:3d:8a:92:9e:ab:5f:14:df:12:d6:26:6a:35:
         f5:6f:e5:aa:d9:52:a2:b7:65:0e:4d:64:96:78:70:2d:3c:f5:
         fe:ee:44:01:3f:d2:17:6d:df:2a:a3:97:e3:ea:39:81:cd:56:
         e7:e5:19:df:98:21:d2:99:70:43:80:be:16:d2:ae:18:50:e2:
         9c:41:90:aa:57:da:95:73:bb:aa:89:f3:49:68:c1:c5:25:b0:
         90:16:f9:8f:9d:8a:7b:6c:b8:32:ba:09:d7:41:d8:2b:5c:53:
         16:4a:fc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:26:36 2025 by rpki-client