Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a653030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a653030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          tg6SxonPh7xKm3xngjwRk2AvZ8Rmxg+54oMrUt4AseY=
Subject key identifier:   87:23:ED:F9:D1:04:7E:1E:CE:D8:D2:62:8D:63:A6:AC:62:0E:81:8B
Certificate issuer:       /CN=BDF984AA7B5F31ECB2ECE2B568883C09865443CB
Certificate serial:       1F7CF486CA35C46D52C88EA8E96AED7D1E413F3B
Authority key identifier: BD:F9:84:AA:7B:5F:31:EC:B2:EC:E2:B5:68:88:3C:09:86:54:43:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a653030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Fri 16 May 2025 13:17:47 +0000
ROA not before:           Fri 16 May 2025 13:12:47 +0000
ROA not after:            Fri 15 May 2026 13:17:47 +0000
asID:                     270760
IP address blocks:        2804:70fc:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 03:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:7c:f4:86:ca:35:c4:6d:52:c8:8e:a8:e9:6a:ed:7d:1e:41:3f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF984AA7B5F31ECB2ECE2B568883C09865443CB
        Validity
            Not Before: May 16 13:12:47 2025 GMT
            Not After : May 15 13:17:47 2026 GMT
        Subject: CN=8723EDF9D1047E1ECED8D2628D63A6AC620E818B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:49:26:2f:5d:24:8c:55:ed:78:81:d6:16:0e:
                    c9:d3:af:3e:10:52:b1:c5:76:37:4b:08:63:e6:7e:
                    b2:d4:31:71:25:15:52:9a:65:18:fd:09:7f:b3:de:
                    01:83:42:9b:29:83:b3:f0:23:56:32:d4:51:17:a3:
                    5e:6e:0d:ab:d9:52:e2:95:97:7b:1c:79:3b:a8:cd:
                    b2:a6:45:79:29:0b:79:67:c7:5b:83:3d:b9:4d:0b:
                    e5:4a:c3:38:7a:86:71:00:6a:cb:f7:53:d6:95:b9:
                    cc:e3:bf:a8:bb:6f:e9:1d:38:4e:14:9f:ec:09:f2:
                    6d:e1:f3:94:a2:40:ee:a4:96:d0:fb:ac:d6:a9:67:
                    35:4b:61:99:47:d2:df:29:cc:d9:a6:ea:b6:15:85:
                    ac:cd:b8:33:cc:7a:1e:a5:8e:29:52:8f:bd:e7:c5:
                    8a:3f:1e:1d:d5:57:c6:61:a7:01:7b:48:01:46:16:
                    4c:d0:85:e4:95:5c:aa:93:b9:c6:25:f0:6f:76:31:
                    b7:3e:e5:93:f3:c4:4a:03:80:eb:e8:d2:87:0a:bd:
                    7f:68:36:fa:fe:ed:b5:47:f9:ac:12:9e:1d:2e:6a:
                    85:a4:ae:57:a6:ea:62:c0:43:4c:14:d3:14:91:79:
                    fb:0d:77:62:23:31:e3:67:cc:ed:08:43:e6:56:1e:
                    99:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:23:ED:F9:D1:04:7E:1E:CE:D8:D2:62:8D:63:A6:AC:62:0E:81:8B
            X509v3 Authority Key Identifier:
                keyid:BD:F9:84:AA:7B:5F:31:EC:B2:EC:E2:B5:68:88:3C:09:86:54:43:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a653030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         50:64:80:48:57:78:cf:6f:a3:00:f6:f0:be:90:d1:5a:6b:a9:
         42:02:23:a2:0d:3c:b4:58:64:2e:98:29:00:26:72:5e:aa:f1:
         01:70:50:84:d1:ca:60:82:25:72:c6:c7:53:44:57:ca:f5:61:
         76:5e:58:2f:9f:e1:bc:03:06:78:67:e6:85:30:f7:f2:0d:3f:
         89:cc:56:15:ce:94:fb:b5:ce:ba:29:0f:18:73:de:c3:25:6d:
         8d:cb:c3:3f:e3:9e:a1:39:e1:fb:0d:fc:d9:3a:83:37:9a:6b:
         4a:6c:25:aa:05:63:3d:ee:60:a2:b0:33:19:1d:57:40:33:f3:
         7a:84:7b:50:c7:b9:19:3c:22:01:82:3d:17:37:a3:96:88:f2:
         15:0b:4f:71:57:f8:be:62:73:41:6f:1d:03:ad:5b:15:e1:65:
         35:d4:4e:a9:60:72:2b:3c:cc:1d:18:90:95:0b:49:6a:a7:83:
         44:2f:43:86:f9:15:98:a6:0e:d4:b3:c1:6a:d5:d3:e9:ad:e2:
         7f:e3:07:cf:05:66:ec:58:82:b1:a6:cf:8a:b2:e0:03:e0:7e:
         13:f0:a1:92:16:1b:f2:ca:9d:84:9c:03:97:4a:4a:9a:78:c3:
         f7:08:91:b6:69:a0:e5:95:ce:61:f2:5a:b1:fe:94:02:1a:7b:
         49:7a:23:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:05:34 2025 by rpki-client