Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/323830343a356338383a383030303a3a2f33332d3333203d3e20323638393134.roa
File:                     323830343a356338383a383030303a3a2f33332d3333203d3e20323638393134.roa (raw, json)
Hash identifier:          Fd+Tuf6C/4pn6GQn5mJXWzhzZdNb48UIF2SJn8evqh4=
Subject key identifier:   63:DC:05:27:09:2F:C3:0C:89:83:D8:23:9D:7C:15:60:D1:BE:E1:FB
Certificate issuer:       /CN=659E92F5914C997CC52D83DD0F162368DAC18EA2
Certificate serial:       1A26A5516E3DD2590C3962859F01B1FB04E46313
Authority key identifier: 65:9E:92:F5:91:4C:99:7C:C5:2D:83:DD:0F:16:23:68:DA:C1:8E:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/323830343a356338383a383030303a3a2f33332d3333203d3e20323638393134.roa
Signing time:             Mon 07 Apr 2025 12:40:52 +0000
ROA not before:           Mon 07 Apr 2025 12:35:52 +0000
ROA not after:            Mon 06 Apr 2026 12:40:52 +0000
asID:                     268914
IP address blocks:        2804:5c88:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.crl
                          rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 14:23:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:26:a5:51:6e:3d:d2:59:0c:39:62:85:9f:01:b1:fb:04:e4:63:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659E92F5914C997CC52D83DD0F162368DAC18EA2
        Validity
            Not Before: Apr  7 12:35:52 2025 GMT
            Not After : Apr  6 12:40:52 2026 GMT
        Subject: CN=63DC0527092FC30C8983D8239D7C1560D1BEE1FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c1:af:fa:4d:14:4e:c3:b2:ca:91:aa:51:ce:
                    de:53:8c:0f:c6:d8:40:bf:43:04:b8:e0:da:e6:f9:
                    f3:98:39:2b:5a:45:22:4a:f0:c6:4e:55:61:e0:4a:
                    51:a7:61:91:0b:b9:aa:35:38:70:91:b4:11:d1:7c:
                    32:91:b6:f1:c6:19:51:88:14:57:30:c3:ac:36:83:
                    d0:5a:0e:be:28:32:eb:1a:13:33:99:3d:35:a6:03:
                    c1:41:34:05:b5:fa:57:ad:93:2f:f5:e9:a5:fa:aa:
                    e1:0e:55:83:cd:d5:1c:89:6e:83:20:02:ef:4d:23:
                    c7:cc:93:ed:cb:4d:d3:cc:26:45:a3:71:78:b9:f7:
                    bf:90:b6:9c:2e:8f:29:3d:9c:33:c8:fa:a4:69:10:
                    16:0a:fe:20:57:b1:4d:71:9e:c0:09:e2:ba:50:7c:
                    c3:fb:03:f0:26:08:21:e8:d0:68:06:6b:57:85:a0:
                    16:df:7a:34:93:38:28:10:aa:c8:47:a0:4b:1d:18:
                    53:36:ed:a8:d5:e4:99:11:e7:aa:cc:43:f7:2b:8d:
                    f9:91:c4:4e:e4:17:7a:37:4e:0e:e8:ba:b7:f4:ed:
                    20:82:c9:e8:a5:41:32:52:44:18:e5:82:29:77:d3:
                    ca:d7:47:04:e5:61:13:54:52:ab:6c:3d:2e:92:e4:
                    cd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DC:05:27:09:2F:C3:0C:89:83:D8:23:9D:7C:15:60:D1:BE:E1:FB
            X509v3 Authority Key Identifier:
                keyid:65:9E:92:F5:91:4C:99:7C:C5:2D:83:DD:0F:16:23:68:DA:C1:8E:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/323830343a356338383a383030303a3a2f33332d3333203d3e20323638393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c88:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         3b:26:da:7c:6f:3c:e1:cb:c4:36:15:6d:73:70:4a:ee:de:5b:
         f0:01:12:5b:fe:a2:7b:e7:82:75:92:19:dc:04:51:da:16:41:
         25:e3:77:db:4b:1a:1c:fc:b8:15:1a:c3:9d:0e:68:b3:81:97:
         de:d8:9e:dc:6a:a4:63:d7:89:dc:d4:70:03:bf:d4:03:96:36:
         26:44:ec:3c:34:28:b2:a3:7b:73:74:c3:bd:f3:38:18:c5:32:
         51:69:57:a4:15:af:37:cf:f5:1a:71:09:fe:f0:f4:48:cf:e7:
         23:8c:36:c8:16:79:d1:a8:84:00:89:f5:be:a2:d5:f3:98:d4:
         f4:e9:d7:23:00:ca:21:33:b4:d1:fb:10:b0:09:01:4a:55:21:
         33:4d:b0:04:9c:28:0d:26:10:cc:30:dc:0e:71:36:bb:09:be:
         3d:ae:c5:15:4d:42:0b:cf:ad:1c:de:8b:14:b9:8b:6a:4b:77:
         cc:59:cb:de:7f:f1:97:81:a9:f1:b3:83:a3:f3:47:b6:ed:6c:
         5b:c8:e5:db:3c:01:f7:d8:75:5a:54:4c:a2:32:c5:7b:58:5d:
         04:99:48:9f:e0:4b:d4:6a:27:e0:20:29:14:67:e2:bd:85:fa:
         23:3e:40:a8:a2:42:9e:71:bf:44:47:12:ff:49:76:ea:57:46:
         58:d7:aa:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:44:47 2025 by rpki-client