Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a353030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a353030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          17hte9nU9K2KSPzOKC5JKS+OgpWK4b9Nl5D6qQvKuyU=
Subject key identifier:   61:A7:25:40:05:7E:13:4C:25:0B:90:44:79:29:C3:FA:1D:15:78:82
Certificate issuer:       /CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
Certificate serial:       70AEAA5F4209CD631277B8BCCD638DE0926A7715
Authority key identifier: 62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a353030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Thu 13 Feb 2025 20:50:28 +0000
ROA not before:           Thu 13 Feb 2025 20:45:28 +0000
ROA not after:            Thu 12 Feb 2026 20:50:28 +0000
asID:                     263059
IP address blocks:        2804:934:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ae:aa:5f:42:09:cd:63:12:77:b8:bc:cd:63:8d:e0:92:6a:77:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
        Validity
            Not Before: Feb 13 20:45:28 2025 GMT
            Not After : Feb 12 20:50:28 2026 GMT
        Subject: CN=61A72540057E134C250B90447929C3FA1D157882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e5:60:1a:0c:83:f8:f5:77:5b:1e:93:4d:ff:
                    26:b2:8b:2f:7c:1d:db:e5:ad:b5:91:d3:46:e2:74:
                    f6:4b:dc:d7:bb:dc:e2:1b:c2:1e:6d:85:71:15:3b:
                    ed:d4:85:0f:79:a2:a2:05:95:3a:b0:6c:2a:30:52:
                    fe:36:cd:16:74:bf:36:c9:63:b9:cb:2b:51:70:37:
                    10:f9:c9:c5:f4:89:45:7a:4a:91:bd:e2:58:63:21:
                    5b:c5:ce:6b:57:67:d1:53:d5:1d:85:17:28:82:12:
                    02:59:97:b6:50:a6:b7:1e:99:8e:bd:eb:ff:41:4d:
                    9a:39:f5:c7:a6:99:a4:4e:b4:ed:53:a7:59:e9:f4:
                    e3:ee:51:eb:6d:c0:4d:fd:82:8e:a2:69:eb:d6:d9:
                    42:2b:5f:a7:58:5d:ac:a5:80:13:bb:2c:86:c6:ff:
                    b7:69:95:d1:12:6e:35:88:7e:15:90:a8:7f:be:9f:
                    f2:40:00:32:ff:46:3a:53:c0:89:9f:22:31:b9:50:
                    59:67:b8:83:e5:d6:c3:70:32:78:cf:a6:01:9c:62:
                    b2:05:b5:b8:80:b1:f7:45:bc:ad:75:24:97:e5:5e:
                    62:a1:e2:b7:7f:58:6d:72:8d:1e:78:36:38:21:55:
                    9f:9b:ea:e5:6a:84:c5:8f:08:13:2e:bf:2b:00:48:
                    10:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A7:25:40:05:7E:13:4C:25:0B:90:44:79:29:C3:FA:1D:15:78:82
            X509v3 Authority Key Identifier:
                keyid:62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a353030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         27:bd:65:03:5a:44:d8:cf:28:8f:90:3c:dd:cd:f1:be:f7:fc:
         6f:df:06:db:27:de:60:6f:64:97:a0:76:ec:ff:69:d0:90:24:
         fe:2a:1a:be:82:63:c2:d6:a9:5f:a6:14:7e:93:c7:0a:4c:88:
         b3:b7:5c:db:ed:83:85:8b:ca:03:3a:70:63:c5:bb:81:57:21:
         f9:59:2e:e4:8f:fe:6b:f3:4a:5b:52:73:89:4c:80:36:70:d4:
         8d:68:30:74:8f:4f:36:5d:ca:bb:d5:6f:9e:27:b8:a0:f9:c9:
         a8:f1:d4:ca:9a:e0:91:18:b7:bf:ed:f2:4a:66:42:ae:60:b9:
         a4:1b:88:bc:7c:dc:2f:94:73:b1:0c:3e:f2:d2:9a:30:9a:66:
         9c:ce:bb:da:59:56:8e:b8:3d:2c:91:44:3b:00:a6:55:a1:2f:
         9b:15:ad:7c:eb:90:70:34:a0:72:c9:b5:37:83:67:75:aa:c9:
         63:30:12:32:eb:9d:19:7a:26:76:e2:f6:d9:74:eb:cd:f0:c7:
         9a:c8:d3:4a:f5:60:4d:84:64:a6:f1:a6:71:5c:5b:fa:68:a9:
         0a:6f:c5:67:cc:74:65:18:24:47:a7:ac:23:73:d2:71:fa:8d:
         5d:35:29:13:62:8a:10:ac:ef:d3:53:6a:2e:37:e1:47:5b:9b:
         31:0d:4d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:03:40 2025 by rpki-client