Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6LJ8Nw7zCzsLwMW1EFV1HVYQi386ZpPpnTuW9ztwdp9u/0/323830343a393365383a383030303a3a2f33332d3333203d3e20323734383038.roa
File:                     323830343a393365383a383030303a3a2f33332d3333203d3e20323734383038.roa (raw, json)
Hash identifier:          zOlcr6SfQURrW7IAuEuFnIoAM8iZEj/Fx348t3b8E5k=
Subject key identifier:   DC:B9:41:D0:9A:E8:0B:64:C7:DE:1A:A0:8C:AF:4C:08:60:DA:8E:0F
Certificate issuer:       /CN=301611F5C33A5D1B48E3E813ED7AA04F23EE16E3
Certificate serial:       1B310B28B94162B50624157F523FDD15CD864EF7
Authority key identifier: 30:16:11:F5:C3:3A:5D:1B:48:E3:E8:13:ED:7A:A0:4F:23:EE:16:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6LJ8Nw7zCzsLwMW1EFV1HVYQi386ZpPpnTuW9ztwdp9u/0/323830343a393365383a383030303a3a2f33332d3333203d3e20323734383038.roa
Signing time:             Mon 05 May 2025 18:33:02 +0000
ROA not before:           Mon 05 May 2025 18:28:02 +0000
ROA not after:            Mon 04 May 2026 18:33:02 +0000
asID:                     274808
IP address blocks:        2804:93e8:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6LJ8Nw7zCzsLwMW1EFV1HVYQi386ZpPpnTuW9ztwdp9u/0/301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.crl
                          rsync://rpki-repo.registro.br/repo/6LJ8Nw7zCzsLwMW1EFV1HVYQi386ZpPpnTuW9ztwdp9u/0/301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 17:29:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:31:0b:28:b9:41:62:b5:06:24:15:7f:52:3f:dd:15:cd:86:4e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301611F5C33A5D1B48E3E813ED7AA04F23EE16E3
        Validity
            Not Before: May  5 18:28:02 2025 GMT
            Not After : May  4 18:33:02 2026 GMT
        Subject: CN=DCB941D09AE80B64C7DE1AA08CAF4C0860DA8E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3f:ed:91:2f:68:1b:96:73:ab:d0:24:90:6e:
                    ff:5f:a1:48:5f:4e:66:0a:bd:aa:8a:f9:d3:52:85:
                    32:04:4b:ad:75:78:7d:31:4f:88:0f:38:ae:f6:a2:
                    58:86:52:20:23:a9:c3:98:85:f3:bb:87:60:c8:e5:
                    05:5b:f7:9d:30:6e:88:6a:cf:af:74:93:ed:be:04:
                    6a:57:9f:15:20:d2:1a:77:f4:20:3c:85:1a:d0:52:
                    59:05:6f:55:18:cd:56:f9:8b:cd:28:ea:f1:fc:27:
                    ac:79:14:94:91:37:fb:5b:79:57:33:2c:17:ca:3d:
                    69:ac:82:25:c6:25:09:fa:6f:5e:8c:91:1f:7c:cf:
                    15:cc:23:4a:8f:c0:cc:68:a4:bd:fa:cd:55:b3:59:
                    75:f3:e7:b5:f2:44:82:38:5f:4d:67:72:0f:3c:e5:
                    3a:3c:86:cc:16:bf:35:c8:4e:0d:e2:88:83:7c:79:
                    5d:95:53:61:63:b0:b1:f9:31:de:ce:c1:be:20:a5:
                    70:84:32:a2:61:dd:3a:f2:e2:04:37:1c:7c:0b:e6:
                    c9:97:6d:28:c4:5e:51:c8:31:ab:70:a4:bf:f0:83:
                    f8:aa:35:48:3c:e0:f6:59:22:b5:9b:3d:76:e6:ee:
                    97:69:51:17:02:94:be:80:4d:ad:a3:c1:a7:02:99:
                    37:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B9:41:D0:9A:E8:0B:64:C7:DE:1A:A0:8C:AF:4C:08:60:DA:8E:0F
            X509v3 Authority Key Identifier:
                keyid:30:16:11:F5:C3:3A:5D:1B:48:E3:E8:13:ED:7A:A0:4F:23:EE:16:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6LJ8Nw7zCzsLwMW1EFV1HVYQi386ZpPpnTuW9ztwdp9u/0/301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6LJ8Nw7zCzsLwMW1EFV1HVYQi386ZpPpnTuW9ztwdp9u/0/323830343a393365383a383030303a3a2f33332d3333203d3e20323734383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:93e8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9a:fe:0e:4f:64:7b:c5:67:eb:b6:46:b4:6b:10:25:17:87:d5:
         cb:3d:91:e9:51:25:1d:33:15:57:36:b5:e7:fc:ae:7b:c2:a2:
         0a:a7:8a:78:79:58:23:45:42:a0:4c:31:05:ae:b3:68:8c:3a:
         a8:d9:92:88:f3:84:8d:e7:da:5b:c5:f1:62:08:49:78:1c:70:
         0c:82:71:54:b4:7c:ab:34:54:89:27:3a:07:14:d1:69:27:d6:
         21:16:35:04:d5:69:53:f8:31:01:12:47:d8:7d:d3:c2:06:3e:
         f1:33:85:f6:cb:10:06:f1:f5:7f:0a:b6:17:4d:75:68:2e:d8:
         a1:56:2c:2e:6b:9d:af:10:f7:61:f7:76:73:8b:1a:14:88:67:
         18:bc:c1:06:f9:f3:be:b5:7a:32:c1:1f:29:65:68:3b:c4:09:
         fb:95:59:08:41:77:ef:be:5f:99:04:b4:72:70:ba:f8:84:62:
         0e:f5:3f:68:34:03:6a:52:59:e0:b3:b5:cb:a8:6d:5f:00:c5:
         a2:70:42:2a:8c:60:75:22:06:78:16:f3:22:7f:fc:61:ba:4c:
         4a:09:37:31:7c:c3:11:14:59:1b:62:46:2d:fd:32:84:51:a0:
         44:83:cc:34:64:d0:33:5d:3a:84:8a:01:a8:c3:c3:12:6e:e5:
         9a:14:39:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:04:43 2025 by rpki-client