Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/323830343a3737343a383530303a3a2f34302d3430203d3e203532383538.roa
File:                     323830343a3737343a383530303a3a2f34302d3430203d3e203532383538.roa (raw, json)
Hash identifier:          YV1Ufs/w7YRLJl0JNqsaI05wlqINgVmqE6/YMzpF8Vs=
Subject key identifier:   24:71:E4:6B:DD:96:5D:25:E3:99:0E:95:36:82:BD:B5:4C:1D:47:75
Certificate issuer:       /CN=4765DF83369720EE1AF514C7CA6660A475D18592
Certificate serial:       30E11BA67F7EDFB406DC75BD57358E0DE7563DC4
Authority key identifier: 47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/323830343a3737343a383530303a3a2f34302d3430203d3e203532383538.roa
Signing time:             Thu 06 Mar 2025 04:33:08 +0000
ROA not before:           Thu 06 Mar 2025 04:28:08 +0000
ROA not after:            Thu 05 Mar 2026 04:33:08 +0000
asID:                     52858
IP address blocks:        2804:774:8500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.crl
                          rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 17:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e1:1b:a6:7f:7e:df:b4:06:dc:75:bd:57:35:8e:0d:e7:56:3d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4765DF83369720EE1AF514C7CA6660A475D18592
        Validity
            Not Before: Mar  6 04:28:08 2025 GMT
            Not After : Mar  5 04:33:08 2026 GMT
        Subject: CN=2471E46BDD965D25E3990E953682BDB54C1D4775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:23:7e:5d:11:3c:a1:a9:2e:99:52:4d:f1:bd:
                    67:ee:d5:16:3f:d8:08:a7:ba:9b:b4:ac:c1:32:38:
                    3f:10:dc:ef:24:f5:e8:cb:47:a2:19:ed:6e:fc:88:
                    72:5e:dd:48:08:9a:d0:cc:ed:bd:19:85:06:35:ce:
                    33:b7:33:e5:91:f7:88:f0:22:6a:6a:eb:c9:46:6c:
                    75:50:6d:2b:19:a8:d2:59:96:0f:ed:10:18:99:5b:
                    38:0d:ba:dd:3a:03:0f:e8:a0:cb:ec:cc:54:a2:18:
                    62:57:db:90:23:8c:fb:62:1b:2d:0d:ee:ac:5f:83:
                    04:4f:85:3e:15:78:be:38:fb:c0:a8:04:f9:81:d1:
                    c5:3a:b5:65:25:fd:11:48:f3:52:78:c6:ae:82:6f:
                    10:16:77:d2:ec:e6:1f:e4:ca:d5:5a:48:98:28:97:
                    5e:a9:86:dd:7d:e1:18:83:28:7d:8f:12:d3:80:28:
                    62:40:5f:2a:4d:19:c2:08:47:a2:e6:d3:35:b4:79:
                    68:6e:e1:fe:aa:88:a7:82:9c:3e:07:6e:16:a2:b2:
                    4c:31:2d:83:84:3c:e6:63:a4:b0:dd:13:1c:bd:8f:
                    d0:fa:d5:5a:ec:85:83:a0:82:38:c7:86:71:5e:58:
                    6d:de:c0:63:5a:50:d0:34:e5:18:6c:04:99:f8:6e:
                    18:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:71:E4:6B:DD:96:5D:25:E3:99:0E:95:36:82:BD:B5:4C:1D:47:75
            X509v3 Authority Key Identifier:
                keyid:47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/323830343a3737343a383530303a3a2f34302d3430203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:774:8500::/40

    Signature Algorithm: sha256WithRSAEncryption
         70:ef:03:ff:42:13:07:10:8b:06:58:08:8b:42:2e:fb:a4:28:
         f8:d8:b5:e8:1b:f6:f3:17:91:90:70:16:5f:99:71:f8:ea:c1:
         f6:ec:7a:68:47:18:85:e4:0e:db:94:e1:e7:50:98:ae:d6:1b:
         1e:aa:6f:5d:19:be:14:66:c2:77:d7:f0:e2:0c:98:8c:b5:92:
         32:88:7c:25:31:23:95:23:b6:34:30:76:82:29:7b:ef:ef:39:
         c1:a8:6a:e4:7e:20:0b:be:f8:23:28:d6:60:b5:ba:12:84:96:
         d2:71:f8:da:c3:58:d3:03:e6:91:8d:1d:23:3a:a1:73:53:4b:
         95:b2:70:9d:87:b9:ab:cf:68:b7:ee:0c:73:6b:3a:8b:19:65:
         a0:13:b7:f0:a4:e7:86:d6:d4:a1:c8:92:5a:66:98:b3:de:bc:
         61:4b:86:c4:11:ba:48:01:2a:ec:3b:cc:d3:4a:4d:06:83:de:
         78:65:5f:17:7b:27:3e:9c:7d:4c:15:6f:25:bc:51:ab:de:18:
         01:34:f7:6a:89:de:4d:6e:7f:c6:95:a7:f1:46:46:11:da:cc:
         0f:80:14:44:e3:d0:af:6c:f9:42:a3:2d:98:7d:bb:80:f8:f9:
         15:38:e9:c6:52:9e:9f:d2:ff:78:49:60:27:33:80:a5:23:f6:
         ee:60:84:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:29:13 2025 by rpki-client