Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a653030303a3a2f33362d3336203d3e20323732353639.roa
File:                     323830343a383534383a653030303a3a2f33362d3336203d3e20323732353639.roa (raw, json)
Hash identifier:          76v/60tsnoaU7tL1vQKo5tmUHcp5potT5+RLUapKCsM=
Subject key identifier:   DB:6A:9A:87:0B:61:71:F1:54:78:E1:37:11:3F:E7:9F:70:0D:0A:92
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       3171F530663CEDB1735337056718E502D7E4803E
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a653030303a3a2f33362d3336203d3e20323732353639.roa
Signing time:             Mon 09 Jun 2025 18:22:14 +0000
ROA not before:           Mon 09 Jun 2025 18:17:14 +0000
ROA not after:            Mon 08 Jun 2026 18:22:14 +0000
asID:                     272569
IP address blocks:        2804:8548:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 15:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:71:f5:30:66:3c:ed:b1:73:53:37:05:67:18:e5:02:d7:e4:80:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: Jun  9 18:17:14 2025 GMT
            Not After : Jun  8 18:22:14 2026 GMT
        Subject: CN=DB6A9A870B6171F15478E137113FE79F700D0A92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:93:73:ea:4d:65:00:95:30:6f:06:5e:e3:c9:
                    64:17:67:43:fd:16:eb:0d:04:01:a3:f7:0a:54:54:
                    7b:ce:d1:39:05:1e:d6:81:ab:65:51:c8:5f:f5:83:
                    f0:2f:36:fa:43:17:17:a2:83:55:39:93:4c:d7:1c:
                    26:5b:8c:fd:48:90:02:62:60:a0:7c:90:eb:c4:50:
                    e0:4f:6a:a9:7b:78:e1:24:ed:93:38:1e:7c:87:3d:
                    20:af:01:91:54:02:83:61:3a:0c:4a:c3:ad:94:55:
                    72:b4:ed:5b:7b:4e:ca:c5:9b:18:f1:07:ac:0b:52:
                    c3:87:cc:8a:2e:f1:17:94:92:4f:02:b3:1a:6a:4f:
                    b6:b2:54:45:62:00:f1:78:98:87:a7:00:dd:92:7e:
                    75:fc:26:ba:b1:07:87:0e:b7:0c:26:44:d7:e5:c4:
                    6e:d4:23:85:c6:e6:91:18:28:5e:c8:5d:46:a5:25:
                    a6:62:73:d0:db:f9:1a:bc:2f:49:60:55:7b:bb:72:
                    e0:94:3b:14:45:ea:50:ab:e1:6e:8f:f1:62:38:d1:
                    66:b1:25:05:84:1a:ad:96:7a:f5:5f:33:41:27:6c:
                    cd:d2:9c:71:1e:89:4c:04:96:a4:3b:ef:bb:6b:87:
                    46:e4:9c:98:bf:bd:7a:84:58:8d:5a:d0:8e:25:37:
                    67:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6A:9A:87:0B:61:71:F1:54:78:E1:37:11:3F:E7:9F:70:0D:0A:92
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a653030303a3a2f33362d3336203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         09:68:40:74:34:20:77:7b:ce:cc:c2:51:ec:24:ba:c5:52:dd:
         84:d0:26:c1:ff:10:cc:f9:42:b9:63:e5:fe:e9:47:a3:67:ce:
         5d:6b:c4:ad:bc:82:a2:d6:59:03:ac:ca:c8:7f:1a:53:f7:cd:
         ff:83:62:13:89:87:0a:a9:9e:7d:ef:bd:27:4b:bb:a8:0d:30:
         7a:51:4e:62:42:c4:bf:28:f4:c6:ab:a4:2a:c3:23:e0:bb:be:
         13:60:bb:82:44:f6:56:46:7d:95:48:02:2a:94:4c:e0:84:ef:
         c0:ed:c2:85:79:06:a7:5d:17:bd:b9:d8:d4:68:c9:a2:a4:89:
         42:b1:08:bd:87:27:08:48:cf:c4:9a:1c:0c:3e:6f:1a:37:53:
         8a:80:01:dc:81:18:26:1f:76:db:a1:1e:a7:12:cf:26:2b:86:
         3d:74:89:37:9d:b9:cb:32:a5:d7:27:db:0c:a7:4e:4d:9d:45:
         0b:f5:07:7f:a1:96:1f:f1:21:b6:4c:fb:6c:2a:01:42:a2:bf:
         63:6e:96:55:7d:73:c7:52:17:a8:e3:32:8b:a6:e0:4b:0e:de:
         cb:70:2f:bc:f9:1d:6b:5e:86:bd:9d:91:22:68:1d:48:de:d4:
         88:94:b7:a9:b4:c7:98:db:54:f8:b0:62:22:5a:02:58:76:a7:
         ad:73:ca:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:42:12 2025 by rpki-client