Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/323830343a323763633a3a2f33332d3438203d3e203533313235.roa
File:                     323830343a323763633a3a2f33332d3438203d3e203533313235.roa (raw, json)
Hash identifier:          nnYVYIqUJqUsIeVNwvCVNy0/j180TFH8z3Nm/nM5N0Q=
Subject key identifier:   49:A5:7D:40:0C:40:1D:A8:CB:AF:B1:91:80:F5:2B:97:6F:B2:30:D6
Certificate issuer:       /CN=77F99B6CA31CA48560A700A53D4385030C475345
Certificate serial:       3D019A9E31C2805D52AF3E4771E59561B2D40009
Authority key identifier: 77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/323830343a323763633a3a2f33332d3438203d3e203533313235.roa
Signing time:             Thu 12 Jun 2025 11:59:38 +0000
ROA not before:           Thu 12 Jun 2025 11:54:38 +0000
ROA not after:            Thu 11 Jun 2026 11:59:38 +0000
asID:                     53125
IP address blocks:        2804:27cc::/33 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl
                          rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 15:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:01:9a:9e:31:c2:80:5d:52:af:3e:47:71:e5:95:61:b2:d4:00:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F99B6CA31CA48560A700A53D4385030C475345
        Validity
            Not Before: Jun 12 11:54:38 2025 GMT
            Not After : Jun 11 11:59:38 2026 GMT
        Subject: CN=49A57D400C401DA8CBAFB19180F52B976FB230D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d9:93:40:54:37:c1:9f:df:31:99:ef:d3:2f:
                    2a:9e:e8:02:07:ec:e3:b8:d2:19:9c:03:5b:f3:e2:
                    92:00:c1:28:4c:57:70:ac:cc:cb:81:ae:f1:87:40:
                    34:a4:7d:d5:56:8b:9b:7a:cf:f0:4f:e4:8f:2f:70:
                    e2:c9:88:24:82:35:af:1e:41:cf:c3:34:d7:66:0f:
                    38:31:30:62:0a:85:be:9d:5f:16:3d:c2:3a:d3:6e:
                    08:bd:42:f6:80:6b:5f:9e:59:d6:7b:dc:05:2d:1e:
                    85:5b:16:15:94:7e:ad:e9:20:aa:46:17:ba:89:05:
                    19:e3:7c:80:19:15:9b:70:0f:4e:80:f2:13:fc:dd:
                    8a:32:7a:c4:dd:d0:dd:b1:7f:9e:94:48:4b:a6:76:
                    87:39:1e:f4:c0:df:7a:a4:e5:3c:e8:13:3e:f0:ff:
                    4e:65:4d:e7:40:19:fa:e5:cf:61:7a:03:ef:59:f7:
                    1d:83:41:d1:d5:05:da:85:6a:9c:ae:6d:0f:13:0f:
                    c4:c1:40:ab:21:51:0f:2d:d3:eb:4b:11:a2:b4:ea:
                    6d:bf:75:59:91:18:e4:7b:4e:db:e3:6d:71:e3:dd:
                    cc:dd:fa:d4:81:a3:45:15:e0:f0:4b:42:f0:03:fb:
                    77:2d:b9:9e:2b:36:6d:29:ec:7d:2e:9d:49:9f:15:
                    24:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A5:7D:40:0C:40:1D:A8:CB:AF:B1:91:80:F5:2B:97:6F:B2:30:D6
            X509v3 Authority Key Identifier:
                keyid:77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/323830343a323763633a3a2f33332d3438203d3e203533313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27cc::/33

    Signature Algorithm: sha256WithRSAEncryption
         a1:bb:13:13:75:e4:12:cf:61:b8:09:29:0f:12:a5:25:bc:9e:
         d2:2b:1f:0c:71:2a:e1:f5:f7:69:4b:48:39:7b:fe:20:1f:75:
         36:6b:3d:aa:57:50:7c:39:68:4e:88:00:b7:56:67:8b:7a:4c:
         b6:f7:a0:76:d0:3c:71:db:36:c2:94:b5:21:c8:d3:b8:70:f3:
         86:35:c0:bc:6b:96:9d:fc:13:40:85:74:4f:50:2d:6e:4c:b4:
         46:36:82:9b:83:98:67:d4:a4:91:c2:e5:68:b9:76:94:09:76:
         67:3f:14:93:b6:25:7d:75:f0:27:fa:6b:74:03:cf:af:de:30:
         f2:b2:21:27:0f:e6:a6:c5:24:b3:fc:6d:47:90:0f:14:60:f8:
         e9:04:c4:03:8d:ad:0a:7b:31:a3:44:d5:92:f7:0a:fe:c8:30:
         60:e1:75:10:b8:2e:73:e5:73:35:46:fe:77:95:3a:96:c1:e3:
         ee:cc:f4:7d:63:b7:5a:db:fb:64:bc:86:54:9f:c6:22:b8:30:
         75:f5:1b:e3:c1:9d:72:71:29:74:b9:0a:98:36:e7:b0:74:41:
         ca:8b:dd:84:6b:f4:04:b0:36:1c:dd:dd:41:e7:ee:2b:c7:39:
         29:b3:26:44:a3:51:c7:ed:66:81:bd:56:86:ee:74:c2:b8:f5:
         82:50:8a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:00:25 2025 by rpki-client