Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a3130303a3a2f34302d3430203d3e20323733363633.roa
File:                     323830343a386135383a3130303a3a2f34302d3430203d3e20323733363633.roa (raw, json)
Hash identifier:          O49JNVtKuTUcsVEL9wsZ9cEkhqmWA3x6w3tzPOMPb5g=
Subject key identifier:   C0:73:78:6F:79:1B:4F:0B:24:48:59:57:6C:CA:58:AA:87:7D:A2:B0
Certificate issuer:       /CN=F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB
Certificate serial:       343BD9C1765D55B96DAA2FA8B982A4993D932108
Authority key identifier: F1:0D:AA:50:8B:BA:C5:E2:87:A9:5F:8A:AB:B8:FA:54:2C:15:EC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a3130303a3a2f34302d3430203d3e20323733363633.roa
Signing time:             Thu 08 May 2025 18:32:02 +0000
ROA not before:           Thu 08 May 2025 18:27:02 +0000
ROA not after:            Thu 07 May 2026 18:32:02 +0000
asID:                     273663
IP address blocks:        2804:8a58:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.crl
                          rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 13:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3b:d9:c1:76:5d:55:b9:6d:aa:2f:a8:b9:82:a4:99:3d:93:21:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB
        Validity
            Not Before: May  8 18:27:02 2025 GMT
            Not After : May  7 18:32:02 2026 GMT
        Subject: CN=C073786F791B4F0B244859576CCA58AA877DA2B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:a5:07:cd:3e:12:c4:58:5b:f2:f6:62:c2:
                    c1:40:ee:56:88:42:73:4f:dc:35:b3:43:cc:5f:82:
                    66:61:70:f9:ff:a9:cf:24:8b:ee:8a:2f:80:fb:42:
                    b8:4f:d5:4b:c1:39:98:e4:29:b8:7e:fc:fc:76:4a:
                    dd:c8:51:2b:74:88:e2:86:62:a8:7d:69:25:b0:cf:
                    5e:50:e0:68:79:d9:5f:24:ef:91:87:0c:28:3c:6e:
                    e8:6b:19:54:7c:35:c6:54:5c:f1:bf:dc:77:a1:95:
                    ea:b3:da:77:63:a1:26:8f:02:2a:21:5a:52:c9:49:
                    f5:91:ff:55:1d:96:26:b2:82:3f:d6:8a:83:43:56:
                    98:cb:97:36:37:fc:05:1b:23:1c:87:5a:28:d5:59:
                    49:ab:b9:b1:3c:5e:19:f9:73:f6:c6:68:a6:7f:60:
                    ea:0a:a7:d8:9c:2a:ec:b5:c7:b5:32:1c:6a:7e:49:
                    47:7c:09:fe:8f:90:45:7b:cb:d7:0c:75:6d:70:a2:
                    ff:c1:a7:1c:fa:65:f8:30:a1:65:86:64:96:2a:55:
                    e3:ad:a2:70:9c:3d:e8:f0:30:42:86:96:84:c8:1a:
                    3b:1f:34:dc:ea:47:42:77:01:bb:fa:9e:b9:f6:c2:
                    ef:81:d1:e4:66:c8:ff:8b:66:49:8f:e4:f6:45:7c:
                    7c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:73:78:6F:79:1B:4F:0B:24:48:59:57:6C:CA:58:AA:87:7D:A2:B0
            X509v3 Authority Key Identifier:
                keyid:F1:0D:AA:50:8B:BA:C5:E2:87:A9:5F:8A:AB:B8:FA:54:2C:15:EC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a3130303a3a2f34302d3430203d3e20323733363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a58:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         96:98:05:b3:82:6c:56:bc:c0:f6:a7:73:05:48:25:6a:f0:d0:
         57:ad:75:db:4a:58:5a:7a:13:ff:9c:85:e6:7b:73:78:4a:c8:
         fe:c1:a4:af:19:48:80:3c:aa:b9:8d:31:fa:f3:b6:e8:09:d0:
         38:79:9b:63:90:8f:02:51:e0:3e:9b:9c:7f:bf:e4:3e:ec:cf:
         f5:b6:33:82:39:57:c4:9c:ae:45:5f:07:35:14:bd:38:bf:3c:
         49:a3:49:dc:a3:1c:1f:89:39:ef:dc:7e:c7:02:de:a0:68:ed:
         56:6c:01:84:a3:f3:29:1f:61:1c:57:0f:af:ea:30:da:32:37:
         72:25:2d:6d:91:9c:54:15:4a:43:52:cc:6e:4e:42:30:ea:e6:
         d2:00:36:d9:b5:be:cc:f5:be:8e:91:6a:e7:19:81:a5:69:f5:
         66:91:68:64:60:b2:ea:db:5a:71:24:eb:ba:c7:96:de:28:8e:
         cd:b0:e7:3b:10:20:e5:9c:09:1b:37:59:ef:ea:fb:3a:e9:ab:
         57:57:ff:53:89:c8:5a:82:3a:e9:4e:c8:bc:d1:09:5d:cc:d2:
         d4:6c:09:65:cf:69:05:f2:8b:56:c8:f8:a1:54:dc:06:12:f5:
         c9:a4:2f:53:b7:6c:c7:1c:ee:12:3f:87:f2:75:cf:b2:ba:78:
         56:68:56:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 02:45:11 2025 by rpki-client