Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a663030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a663030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          Kzil/X8Tr9mv8ZKWR63Wv69g42S7Lmy6b8dSzjqU8zg=
Subject key identifier:   A0:08:96:A0:42:13:1D:90:72:2E:E8:5A:51:71:49:D7:35:5F:5C:C7
Certificate issuer:       /CN=5C7EFAB7DE3678425BB38CB274647243463C6597
Certificate serial:       7B4A2D8E5FB5612ED0B6642BEAF2A33C4F0E64E2
Authority key identifier: 5C:7E:FA:B7:DE:36:78:42:5B:B3:8C:B2:74:64:72:43:46:3C:65:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a663030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Wed 15 Jan 2025 14:00:28 +0000
ROA not before:           Wed 15 Jan 2025 13:55:28 +0000
ROA not after:            Wed 14 Jan 2026 14:00:28 +0000
asID:                     270760
IP address blocks:        2804:70fc:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 09:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4a:2d:8e:5f:b5:61:2e:d0:b6:64:2b:ea:f2:a3:3c:4f:0e:64:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C7EFAB7DE3678425BB38CB274647243463C6597
        Validity
            Not Before: Jan 15 13:55:28 2025 GMT
            Not After : Jan 14 14:00:28 2026 GMT
        Subject: CN=A00896A042131D90722EE85A517149D7355F5CC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d2:70:b3:21:38:62:39:e3:62:9b:94:bd:fd:
                    ae:43:e2:96:3a:a3:2d:1d:df:49:f8:51:6b:b6:74:
                    42:a9:0b:7f:9e:6c:7e:38:d4:60:aa:23:07:db:96:
                    90:6e:d5:b3:e9:af:c4:19:63:81:12:11:46:86:da:
                    b9:8e:5e:1f:fe:96:fb:06:a9:2e:1d:de:cd:bb:5c:
                    e7:38:81:91:c8:46:2e:5e:af:d5:82:a5:0c:1d:d8:
                    82:c1:33:c5:eb:8e:9e:f6:bd:5c:12:59:c7:5c:05:
                    78:45:99:98:f5:5c:46:da:27:69:e2:42:19:c1:e9:
                    4b:04:2f:8a:50:7f:98:0f:85:c6:86:40:7a:cc:fc:
                    6b:7e:cf:4e:74:e0:9f:3b:ab:6b:3c:d9:cc:2c:37:
                    8d:5a:b5:4e:e0:41:5f:ee:a2:4b:3f:20:de:9a:4a:
                    98:0c:25:da:ad:f8:52:55:ec:cd:67:3c:c9:a0:86:
                    ea:b0:53:57:ab:fa:40:a5:ca:6d:db:12:05:6f:c2:
                    67:fb:42:99:af:b0:d4:0f:11:b5:84:b1:ba:b2:48:
                    a8:74:59:31:4c:2e:d9:b2:33:e0:75:e1:e3:2f:9f:
                    4a:3b:03:69:8b:a1:37:b9:46:19:84:01:89:10:21:
                    3e:fd:0e:2c:b0:4b:4a:13:11:42:5f:b9:63:d5:be:
                    06:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:08:96:A0:42:13:1D:90:72:2E:E8:5A:51:71:49:D7:35:5F:5C:C7
            X509v3 Authority Key Identifier:
                keyid:5C:7E:FA:B7:DE:36:78:42:5B:B3:8C:B2:74:64:72:43:46:3C:65:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a663030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         bb:d1:d1:da:f8:20:9c:ea:f7:5e:9c:e8:07:0c:e5:73:30:c4:
         0b:25:ef:ee:81:5f:6c:f2:64:eb:42:a1:ec:94:c2:4d:cb:8c:
         fb:29:57:43:eb:f6:81:29:f1:a4:b9:f9:ba:98:f3:a0:6a:b2:
         8d:9f:d9:90:d9:00:2d:e2:9b:1d:ba:2c:97:4d:f9:1d:c2:d2:
         ad:59:14:f7:d1:69:54:a7:eb:ad:9c:d4:e4:d1:01:f4:e8:02:
         e8:55:fc:82:f3:f2:f6:ab:16:fd:eb:15:96:14:80:ce:0e:6c:
         2a:74:00:4c:86:a7:db:ff:c5:1c:15:99:2f:cf:b6:1f:0b:65:
         a3:2b:28:df:1f:03:70:19:af:1d:3d:6f:d9:9e:14:ac:cc:8b:
         04:3a:ef:7b:0c:8b:f6:f8:09:5c:76:54:af:37:89:18:ba:20:
         11:91:5f:72:55:46:46:55:96:fd:47:ca:24:06:a3:c1:ef:24:
         84:51:37:b0:28:c1:31:7a:d9:d1:0f:5d:fa:aa:12:c0:bb:d0:
         f3:d1:d5:27:07:70:0b:ff:3a:98:e1:3c:74:1f:05:d4:25:a0:
         bb:bf:8b:dc:28:ca:ba:26:a8:30:a8:cf:99:e2:80:10:a9:33:
         2c:21:9e:c2:e0:0e:6c:ab:80:9e:99:a7:29:1d:f8:d0:46:cd:
         e9:22:61:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:22:48 2025 by rpki-client