Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a363030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a363030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          8NKURSS+aS9x7ypAugqi1JoHVVUKXBzT0AuLxwrFU/8=
Subject key identifier:   87:91:52:E3:8B:02:F7:11:EF:41:27:56:0C:BE:3B:BD:3E:29:16:34
Certificate issuer:       /CN=BDF984AA7B5F31ECB2ECE2B568883C09865443CB
Certificate serial:       40DB89B8B1DFB8C8372BC0F4B35D2E58A8561BC0
Authority key identifier: BD:F9:84:AA:7B:5F:31:EC:B2:EC:E2:B5:68:88:3C:09:86:54:43:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a363030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Fri 16 May 2025 13:17:47 +0000
ROA not before:           Fri 16 May 2025 13:12:47 +0000
ROA not after:            Fri 15 May 2026 13:17:47 +0000
asID:                     270760
IP address blocks:        2804:70fc:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 22:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:db:89:b8:b1:df:b8:c8:37:2b:c0:f4:b3:5d:2e:58:a8:56:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF984AA7B5F31ECB2ECE2B568883C09865443CB
        Validity
            Not Before: May 16 13:12:47 2025 GMT
            Not After : May 15 13:17:47 2026 GMT
        Subject: CN=879152E38B02F711EF4127560CBE3BBD3E291634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:07:a4:73:d5:c1:c8:7f:9d:3c:a3:08:52:
                    4c:44:ac:f3:06:f4:63:cb:21:64:ed:66:8c:0e:fd:
                    7a:14:bb:9a:9b:a4:cf:1b:59:6f:ad:4e:10:fb:a0:
                    6f:be:33:2c:5c:a0:8f:21:7f:d2:48:6a:d0:57:44:
                    54:9e:c1:df:23:11:ad:95:41:13:9e:22:12:f6:ad:
                    5a:cb:cb:35:16:d6:20:02:4a:e4:30:29:16:8d:62:
                    1b:d7:c2:6c:cd:fc:d6:8b:40:5f:c4:50:48:70:8d:
                    57:15:2d:43:c6:65:95:c2:ed:c7:6e:f8:bd:5f:7d:
                    f1:f8:6e:49:3b:87:02:6c:1b:aa:29:a8:2c:37:a9:
                    14:b8:37:c7:ce:7f:0f:90:29:dc:94:ef:96:79:f0:
                    e5:58:70:25:9e:19:06:45:08:cc:da:30:14:86:3a:
                    3e:c2:f2:07:9c:b8:29:92:8d:5f:0c:6f:eb:73:c5:
                    97:97:6f:dc:04:d1:ea:09:aa:68:3e:e9:f7:75:5e:
                    f8:1c:c5:f7:69:de:a3:09:d0:6e:25:97:7f:fe:01:
                    18:a4:de:a5:75:09:51:41:f4:63:06:08:07:0e:24:
                    d2:dd:82:f5:bb:19:71:aa:ad:da:6a:8d:4c:5f:36:
                    9c:51:64:0e:4f:a0:ff:0f:21:2e:16:db:c8:f7:6a:
                    cf:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:91:52:E3:8B:02:F7:11:EF:41:27:56:0C:BE:3B:BD:3E:29:16:34
            X509v3 Authority Key Identifier:
                keyid:BD:F9:84:AA:7B:5F:31:EC:B2:EC:E2:B5:68:88:3C:09:86:54:43:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a363030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         54:ed:72:6c:29:88:3a:a9:4d:0b:7a:c4:bb:82:92:79:7a:47:
         aa:a9:b0:7c:86:a0:86:00:61:4e:a9:d8:ba:b1:e2:d2:33:de:
         1b:06:39:08:2b:f6:f8:92:81:46:a6:62:e0:19:08:e2:a2:9e:
         88:8c:4f:2b:ef:2d:f8:18:50:1b:56:8c:8e:f3:3c:99:03:1c:
         d4:e3:c6:05:d0:f9:59:a4:ea:4d:16:ce:90:90:e1:6c:6f:72:
         ae:86:30:40:d8:d4:a6:1d:eb:37:2a:4b:cd:ab:f6:f2:f0:b8:
         54:ac:23:10:ab:42:14:d6:df:5d:77:30:94:ae:81:07:3b:20:
         97:5a:2c:5a:fe:52:79:fb:77:fa:98:03:c9:a5:59:ed:9b:85:
         f6:f1:a5:eb:47:fe:5c:46:a2:6b:0f:74:0e:64:7c:de:ef:8e:
         cb:68:ca:08:83:6e:7e:d8:8a:61:c6:fa:e9:7d:65:d6:17:9d:
         3a:a6:7a:35:c6:2e:a5:41:20:da:77:b2:6d:c4:c3:ed:9c:c6:
         54:c3:5b:b5:9a:e3:87:0a:78:48:67:7d:c8:72:09:9a:ae:24:
         92:7a:e2:a7:c3:5e:fb:77:49:2c:37:6a:52:c9:69:e4:06:aa:
         8c:8d:9c:8b:2f:84:6d:6c:c9:04:a0:49:c9:f9:e9:38:17:d7:
         ed:42:f8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:41:55 2025 by rpki-client