Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a333030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a333030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          AnV1ZTl5OkC7nU2mVFef/MT5kMukDhZVNC5IgCweWHw=
Subject key identifier:   ED:5F:2A:23:59:28:F2:E8:3A:16:04:F2:2F:4C:98:9F:78:03:7E:67
Certificate issuer:       /CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
Certificate serial:       219AC8599711AF37DE8A2E132BE7AC62886854E8
Authority key identifier: 62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a333030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Thu 13 Feb 2025 20:50:23 +0000
ROA not before:           Thu 13 Feb 2025 20:45:23 +0000
ROA not after:            Thu 12 Feb 2026 20:50:23 +0000
asID:                     263059
IP address blocks:        2804:934:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9a:c8:59:97:11:af:37:de:8a:2e:13:2b:e7:ac:62:88:68:54:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
        Validity
            Not Before: Feb 13 20:45:23 2025 GMT
            Not After : Feb 12 20:50:23 2026 GMT
        Subject: CN=ED5F2A235928F2E83A1604F22F4C989F78037E67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0a:2a:50:11:82:60:b9:69:5d:2a:11:68:e4:
                    82:5f:19:25:9c:b5:a8:ab:18:7b:0c:6f:0c:63:90:
                    43:2a:a1:79:21:e6:ec:03:5c:49:7d:2e:ac:0b:a7:
                    c1:75:18:04:9c:d2:d3:aa:ad:be:15:3d:c8:19:94:
                    9c:6c:cb:25:d1:f3:e8:61:86:00:aa:a9:1c:e4:8c:
                    51:1e:8c:21:4c:5e:0e:06:d3:c2:a2:61:66:b9:32:
                    2b:aa:dc:84:9f:17:bf:00:6d:15:7b:51:a0:97:77:
                    17:ac:90:da:b8:23:a8:90:58:bf:5b:06:bf:43:6a:
                    e0:4f:d0:77:24:65:89:01:43:15:f0:ab:34:3c:0e:
                    db:b0:ab:11:15:f2:2e:7e:5c:1b:42:16:2b:01:ae:
                    44:f2:1b:a2:51:d9:58:03:a7:97:f3:5b:c4:b6:e6:
                    f4:bf:b1:2a:6b:49:f1:e6:2a:12:60:a3:f8:e2:67:
                    89:6a:37:c3:df:6d:81:27:9b:38:ba:c3:54:b2:36:
                    05:60:31:cc:ab:de:87:af:1c:cc:e1:ad:09:92:a1:
                    d4:41:43:20:13:98:17:b6:2a:d6:0a:3e:ef:bc:bf:
                    83:c2:73:3e:14:9d:d1:f6:ab:9c:c6:4c:1d:c1:23:
                    1b:be:03:42:91:19:a4:69:74:34:18:fb:f4:74:51:
                    3e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5F:2A:23:59:28:F2:E8:3A:16:04:F2:2F:4C:98:9F:78:03:7E:67
            X509v3 Authority Key Identifier:
                keyid:62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a333030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8b:62:b1:7b:c7:6a:29:73:b5:40:75:c2:c9:05:ee:20:b7:98:
         79:92:ff:2a:67:42:07:c4:39:d1:e8:c7:5c:c9:01:a7:bb:47:
         c9:7a:c8:7e:1b:1e:29:a3:9a:6b:58:ae:4f:b2:2e:e3:d5:81:
         d5:5d:ed:41:7e:ed:27:96:64:b2:2d:49:f2:f9:23:a9:0f:55:
         d3:dd:6a:e5:cf:e1:6c:07:af:74:25:29:7c:07:d1:ac:7b:e4:
         4e:8b:2e:32:af:39:97:1f:2c:77:85:08:e1:9c:6b:e9:fa:bf:
         2f:ce:08:88:b2:96:56:ff:28:f8:4c:16:66:aa:26:06:82:cf:
         0e:e0:a0:a3:2e:5a:ce:f5:4f:1c:21:d4:fb:78:db:a5:4b:c2:
         c1:aa:4f:22:63:8d:cb:50:b0:11:37:a7:ad:5c:3a:cd:6b:82:
         d2:12:e4:2d:18:04:2e:8f:22:a2:7b:b5:92:df:39:65:02:24:
         43:9a:db:ac:b1:74:f4:de:a4:88:14:8b:f2:a6:d2:be:20:ca:
         92:15:ff:9b:a1:83:90:94:ae:e5:b5:c6:68:b3:b8:01:35:66:
         9e:a6:9c:9e:f3:3a:17:37:a0:28:d7:7c:89:de:26:1e:75:07:
         43:24:86:ca:ea:9d:3f:3d:19:92:7c:6e:8d:0d:2a:bd:da:3e:
         0f:8f:c8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:01:22 2025 by rpki-client