Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a643030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a643030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          KXprNdPkDgUFaboComhpUFoTUK98Kq9sNBL9h3F59lc=
Subject key identifier:   77:D3:79:73:03:FE:65:48:BD:40:48:D7:20:76:90:9D:66:51:41:ED
Certificate issuer:       /CN=5C7EFAB7DE3678425BB38CB274647243463C6597
Certificate serial:       321F10BC7148B46250E6D54415CAF8C0D6EE7E20
Authority key identifier: 5C:7E:FA:B7:DE:36:78:42:5B:B3:8C:B2:74:64:72:43:46:3C:65:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a643030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Wed 15 Jan 2025 14:00:21 +0000
ROA not before:           Wed 15 Jan 2025 13:55:21 +0000
ROA not after:            Wed 14 Jan 2026 14:00:21 +0000
asID:                     270760
IP address blocks:        2804:70fc:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 12:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:1f:10:bc:71:48:b4:62:50:e6:d5:44:15:ca:f8:c0:d6:ee:7e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C7EFAB7DE3678425BB38CB274647243463C6597
        Validity
            Not Before: Jan 15 13:55:21 2025 GMT
            Not After : Jan 14 14:00:21 2026 GMT
        Subject: CN=77D3797303FE6548BD4048D72076909D665141ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:00:9b:f3:8f:c5:92:e9:f7:03:56:68:2e:13:
                    23:0f:25:1d:46:18:ec:9f:92:0e:95:f3:08:8b:01:
                    ab:1f:7d:f8:7e:38:20:23:83:5c:ee:65:18:f8:79:
                    9b:0e:07:ec:1b:e9:49:25:a0:fc:9a:93:94:6a:49:
                    cf:cf:d2:92:0c:11:cd:c1:7f:e3:d1:fa:ee:8e:a4:
                    3d:57:d4:06:d9:52:66:40:d8:85:ff:a6:c6:51:26:
                    3c:e7:cc:a6:e9:95:30:e3:f2:f6:12:bd:98:5b:18:
                    7f:91:fd:47:18:11:6a:ae:db:29:43:3d:4b:a6:eb:
                    0e:3b:e9:c9:c9:83:66:12:a8:63:bc:86:38:b1:2e:
                    1b:a3:84:e6:5c:96:09:06:ac:6e:8b:8b:36:69:c4:
                    36:ec:05:0c:14:a4:65:d7:d5:10:34:11:23:21:36:
                    30:4d:a1:7a:30:f8:4c:1a:cf:93:42:b2:27:48:13:
                    df:19:fc:43:88:9f:cf:57:e2:a8:26:7b:3e:e6:4e:
                    7c:49:97:1b:ba:f0:ff:77:dc:58:a4:81:7a:c5:69:
                    ad:f8:af:c5:d9:df:da:10:cd:b3:c5:23:ff:b3:6a:
                    53:bb:82:ed:94:a6:2b:48:a7:e3:51:7e:13:5b:08:
                    f3:c5:2e:fa:4e:9e:29:d9:8e:32:b8:f9:6d:4e:8e:
                    70:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D3:79:73:03:FE:65:48:BD:40:48:D7:20:76:90:9D:66:51:41:ED
            X509v3 Authority Key Identifier:
                keyid:5C:7E:FA:B7:DE:36:78:42:5B:B3:8C:B2:74:64:72:43:46:3C:65:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a643030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9c:8c:fe:b4:e0:1d:a9:ef:44:46:1f:25:5b:d1:09:7c:23:c3:
         f7:26:97:c2:1d:be:86:e9:3d:03:ae:80:5e:6e:b2:44:ce:3e:
         99:c8:fc:a5:ed:79:5a:87:ca:14:7d:6e:b2:be:92:5f:c9:ab:
         2c:90:b6:63:39:4c:44:81:92:9b:78:00:ac:78:cb:09:99:49:
         33:3a:87:a7:10:9a:c7:15:89:52:e2:27:50:51:24:24:1e:b5:
         b3:23:7e:03:84:a6:f2:a2:40:b1:35:e6:c2:f8:9a:d8:9e:92:
         c4:06:b5:fc:4e:f9:fb:7b:0e:92:b5:da:ab:c1:c7:67:74:21:
         c8:a4:1a:7e:76:78:02:37:f0:be:dc:73:0e:53:1a:31:4e:7d:
         83:68:b3:96:07:dc:f6:c5:25:9b:8a:4b:af:92:87:0b:73:9e:
         ab:8a:56:88:43:7e:c4:4d:d2:bb:18:38:de:56:04:32:52:a0:
         8d:2b:98:81:d5:57:27:e3:3d:e3:4d:c8:02:25:20:fa:16:68:
         56:0e:1e:08:78:1c:69:16:86:e9:2c:e9:02:3a:62:8a:02:16:
         9f:45:3f:92:cc:71:3a:d0:15:54:49:7b:18:88:64:0d:13:da:
         ab:6f:4a:0f:0f:b4:c0:0b:17:69:c7:90:96:50:bf:52:c2:38:
         03:d0:78:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:04 2025 by rpki-client