Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a633030303a3a2f33342d3334203d3e20323732353639.roa
File:                     323830343a383534383a633030303a3a2f33342d3334203d3e20323732353639.roa (raw, json)
Hash identifier:          l82B2or/LtrRGqYQCLjdELi1HfakONAtiKeqrd25z3o=
Subject key identifier:   75:6A:77:61:35:3F:D7:74:C5:A3:34:5F:03:D3:F6:4D:01:7C:48:BD
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       59DC64F4C3098EFFF80C808CADE92D7E9CE09FBD
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a633030303a3a2f33342d3334203d3e20323732353639.roa
Signing time:             Mon 09 Jun 2025 18:19:17 +0000
ROA not before:           Mon 09 Jun 2025 18:14:17 +0000
ROA not after:            Mon 08 Jun 2026 18:19:17 +0000
asID:                     272569
IP address blocks:        2804:8548:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 21:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:dc:64:f4:c3:09:8e:ff:f8:0c:80:8c:ad:e9:2d:7e:9c:e0:9f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: Jun  9 18:14:17 2025 GMT
            Not After : Jun  8 18:19:17 2026 GMT
        Subject: CN=756A7761353FD774C5A3345F03D3F64D017C48BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:22:d4:0c:02:94:9b:ef:72:23:6a:be:c1:ea:
                    97:23:af:92:f9:1f:a9:85:6e:44:33:3b:67:d9:4b:
                    dd:a3:7c:17:1f:14:18:1e:f3:11:62:c2:71:14:d7:
                    90:67:13:3c:b7:40:89:f5:9d:8f:c5:96:cd:c4:b4:
                    e1:a5:6a:8d:e2:27:8b:87:28:d6:71:09:7a:8d:a4:
                    73:50:06:2d:0d:5d:8e:e5:16:c4:c5:c2:9f:ed:a8:
                    cf:d4:37:25:75:32:39:65:fc:40:99:34:2a:19:2d:
                    e3:a5:77:38:70:3f:0f:16:45:dc:2c:bf:0b:c6:18:
                    30:ee:f1:ce:95:6c:34:87:22:e7:37:57:28:ea:39:
                    3d:14:0b:dc:43:09:4e:77:28:5e:bd:b6:1e:2d:4d:
                    71:97:9c:4d:ae:0a:d4:21:ac:c2:99:a3:10:95:fc:
                    99:2e:86:05:a4:ad:37:be:52:75:d9:e6:49:96:a2:
                    c7:9c:9d:b6:db:76:e6:5b:d5:2b:5c:4b:3c:da:7e:
                    df:58:52:ff:7a:64:34:48:26:f7:2f:7b:27:eb:4d:
                    4a:96:5a:ae:cd:11:67:7f:2f:69:e2:d8:1d:d1:72:
                    ca:30:36:68:49:62:75:7b:99:95:83:81:a5:0a:a2:
                    c2:39:ec:77:7f:e5:67:e8:08:58:74:61:22:4f:fe:
                    b8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6A:77:61:35:3F:D7:74:C5:A3:34:5F:03:D3:F6:4D:01:7C:48:BD
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a633030303a3a2f33342d3334203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4a:80:e8:6b:54:4a:73:3f:84:85:2f:08:e1:88:25:0b:9b:37:
         57:99:04:43:33:b2:72:4b:86:53:f5:f0:1e:58:55:6b:1f:7f:
         3f:78:91:9d:19:b5:b4:9a:0d:2b:6e:6c:33:ab:0c:08:3f:e4:
         fc:75:a9:7a:93:52:40:4b:9d:bb:83:11:72:92:f6:7e:98:f8:
         c5:19:cd:0a:5c:a4:18:d5:61:9e:e5:27:a1:a4:3a:22:27:01:
         d7:f2:a1:5e:f7:3c:c4:d6:28:49:4f:a6:2e:b5:69:7a:af:5d:
         50:3b:54:e8:4b:90:06:22:4f:d9:bf:f8:4c:a3:c4:67:d2:78:
         5b:79:37:55:79:1f:cd:bd:b4:ff:b4:25:c9:e0:99:cf:1c:9d:
         e1:b7:bc:4d:d3:df:bc:01:26:42:51:5d:72:13:96:1e:9f:86:
         a0:9b:5c:01:26:35:07:63:76:2e:62:fb:e5:63:55:47:cf:c0:
         39:f3:47:fc:49:26:00:c9:fe:cc:9e:26:d0:cf:77:45:ac:8f:
         0d:de:ab:16:1e:cf:52:98:b3:8e:01:51:34:d9:53:9f:85:10:
         a6:ca:25:5f:5c:3a:36:71:8c:c6:1a:a8:05:e9:f1:00:b9:0e:
         ad:45:f5:20:ad:e7:34:97:37:af:70:47:62:66:30:a8:82:61:
         00:b3:00:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:29:35 2025 by rpki-client