Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/323830343a356235383a3a2f33322d3438203d3e20323638383336.roa
File:                     323830343a356235383a3a2f33322d3438203d3e20323638383336.roa (raw, json)
Hash identifier:          Os82iGXOODNCF9M2opuQjRY4WuYmeHoo8YmsAfWptAo=
Subject key identifier:   84:3C:2F:12:8F:A8:B1:EF:1A:BC:70:27:DA:A0:9F:50:DA:8E:61:01
Certificate issuer:       /CN=B484D0D250DA2EF1A1A504D39332CA2CCA1565FF
Certificate serial:       141E625C9569617D39D601F73F2926B24A5D2908
Authority key identifier: B4:84:D0:D2:50:DA:2E:F1:A1:A5:04:D3:93:32:CA:2C:CA:15:65:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B484D0D250DA2EF1A1A504D39332CA2CCA1565FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/323830343a356235383a3a2f33322d3438203d3e20323638383336.roa
Signing time:             Thu 15 May 2025 21:55:09 +0000
ROA not before:           Thu 15 May 2025 21:50:09 +0000
ROA not after:            Thu 14 May 2026 21:55:09 +0000
asID:                     268836
IP address blocks:        2804:5b58::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/B484D0D250DA2EF1A1A504D39332CA2CCA1565FF.crl
                          rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/B484D0D250DA2EF1A1A504D39332CA2CCA1565FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B484D0D250DA2EF1A1A504D39332CA2CCA1565FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 15:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:1e:62:5c:95:69:61:7d:39:d6:01:f7:3f:29:26:b2:4a:5d:29:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B484D0D250DA2EF1A1A504D39332CA2CCA1565FF
        Validity
            Not Before: May 15 21:50:09 2025 GMT
            Not After : May 14 21:55:09 2026 GMT
        Subject: CN=843C2F128FA8B1EF1ABC7027DAA09F50DA8E6101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5d:29:df:e7:bc:f1:79:01:c8:84:d6:ce:fe:
                    4a:98:ea:e8:d9:f8:d9:3e:03:0b:25:aa:25:3a:1f:
                    53:47:96:fd:96:6c:d6:8a:af:b5:d2:d0:50:37:a4:
                    9b:63:40:67:93:69:fd:e6:3e:79:45:71:fd:b1:25:
                    72:96:da:21:e7:f7:48:c6:ae:05:5e:32:58:32:3c:
                    48:d0:92:3c:30:36:3b:1f:87:25:7c:25:7b:13:d8:
                    28:67:e7:b0:79:14:2a:b6:b5:04:bf:e5:c2:bb:ff:
                    de:ad:5d:f7:1b:7e:62:76:29:25:20:f6:47:8d:5c:
                    4b:92:ea:6e:d7:94:e6:3c:80:e8:d5:3c:30:2b:25:
                    d5:18:56:ce:e8:c7:e3:d9:7d:8d:a0:34:75:cd:21:
                    29:7c:7b:b5:60:9e:6c:db:3c:02:37:86:f7:b7:c2:
                    20:1f:68:d4:0c:94:96:59:22:59:1b:4e:d5:69:cf:
                    d7:14:7b:06:03:c5:26:12:8b:f9:db:f8:52:53:86:
                    f7:cc:27:33:80:55:cf:68:63:aa:87:6c:e4:f9:e0:
                    40:3c:23:1a:65:a5:b8:a5:ad:14:48:5a:b5:a8:9f:
                    4b:a4:e4:2b:32:70:80:ad:ed:da:8b:67:2d:d0:a3:
                    7d:af:50:f2:b7:63:af:b6:c5:fd:af:5e:00:ee:1a:
                    68:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3C:2F:12:8F:A8:B1:EF:1A:BC:70:27:DA:A0:9F:50:DA:8E:61:01
            X509v3 Authority Key Identifier:
                keyid:B4:84:D0:D2:50:DA:2E:F1:A1:A5:04:D3:93:32:CA:2C:CA:15:65:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/B484D0D250DA2EF1A1A504D39332CA2CCA1565FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B484D0D250DA2EF1A1A504D39332CA2CCA1565FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/323830343a356235383a3a2f33322d3438203d3e20323638383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b58::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:bc:38:28:2b:ee:c1:4e:0a:0d:0a:32:f6:05:6c:bd:a2:ee:
         57:5f:ec:55:11:f0:b4:98:13:44:f5:74:e1:fe:83:b9:15:9d:
         52:f4:45:16:4c:56:9c:77:01:77:a3:72:a7:d5:39:28:1c:4a:
         02:76:88:1e:e0:3d:e5:55:f6:81:05:33:2f:f1:52:e1:ac:c1:
         12:1e:ae:18:31:5e:63:1e:cd:a7:f8:06:fe:ef:5c:6b:0b:45:
         4b:85:1f:09:1d:65:cc:f3:29:fd:a9:19:7d:da:98:54:fb:84:
         0b:08:d5:fa:c9:ea:f9:3d:d1:40:5f:42:2a:69:cc:c3:97:4e:
         3b:14:b9:94:3f:15:fb:47:fe:3a:4c:2d:3c:0d:a8:80:eb:67:
         16:98:96:11:6a:04:ab:29:f4:0e:66:d3:21:30:0f:30:43:87:
         2c:de:e1:53:83:8a:f7:ec:3b:e0:a4:d3:63:95:11:9c:e1:a7:
         eb:81:55:51:c6:b9:35:50:ff:bc:dd:7d:af:b7:47:62:56:96:
         65:16:3b:06:8a:03:a4:22:de:ee:63:a5:47:32:d2:3e:87:d8:
         8e:c4:c2:92:09:02:b3:6b:5f:85:f7:b5:6c:81:2c:5d:86:58:
         87:7c:97:c9:86:73:da:81:b0:ab:2b:e8:ca:dc:75:7e:03:59:
         03:2a:f6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:47:27 2025 by rpki-client