Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/323830343a386134383a633030303a3a2f33342d3334203d3e20323733363539.roa
File:                     323830343a386134383a633030303a3a2f33342d3334203d3e20323733363539.roa (raw, json)
Hash identifier:          bd/UQ59xJT0WPzT9Sr5odTNjt0cetMbcR7WWaeNje54=
Subject key identifier:   71:67:0E:7C:7C:5E:88:43:FF:6B:82:2A:5C:5C:C2:51:DC:C7:14:E7
Certificate issuer:       /CN=A18299AB9A7616C093827EEE6A67FF105E7C632E
Certificate serial:       554B4778044AF7CD3CE64B96B524A2D3FD956403
Authority key identifier: A1:82:99:AB:9A:76:16:C0:93:82:7E:EE:6A:67:FF:10:5E:7C:63:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A18299AB9A7616C093827EEE6A67FF105E7C632E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/323830343a386134383a633030303a3a2f33342d3334203d3e20323733363539.roa
Signing time:             Tue 14 Jan 2025 19:56:46 +0000
ROA not before:           Tue 14 Jan 2025 19:51:46 +0000
ROA not after:            Tue 13 Jan 2026 19:56:46 +0000
asID:                     273659
IP address blocks:        2804:8a48:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/A18299AB9A7616C093827EEE6A67FF105E7C632E.crl
                          rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/A18299AB9A7616C093827EEE6A67FF105E7C632E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A18299AB9A7616C093827EEE6A67FF105E7C632E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 06:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:4b:47:78:04:4a:f7:cd:3c:e6:4b:96:b5:24:a2:d3:fd:95:64:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A18299AB9A7616C093827EEE6A67FF105E7C632E
        Validity
            Not Before: Jan 14 19:51:46 2025 GMT
            Not After : Jan 13 19:56:46 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:40:64:f9:19:6e:11:a5:75:6c:69:9d:5c:61:
                    dc:f1:be:ee:3e:a3:2d:3a:90:83:e6:f8:20:f0:74:
                    81:d3:4f:a2:e5:5a:89:1d:67:d7:a9:0a:b6:9e:c0:
                    69:c3:9f:cc:b5:59:e3:dd:a6:ae:32:37:3b:d1:1f:
                    a4:18:ef:79:63:a9:e2:fa:f9:38:37:07:5f:e9:b3:
                    a6:b6:f6:1d:f5:5c:45:02:d3:4d:b7:5f:9c:9d:c8:
                    eb:68:a3:21:54:b9:ed:68:3e:97:52:13:7a:f6:a7:
                    46:f9:f9:62:b2:63:b1:41:0f:95:60:33:fa:a2:cf:
                    17:1b:9f:e3:66:0a:16:7a:85:2e:eb:74:83:d2:45:
                    0c:fc:70:af:9d:a2:ed:09:3f:46:2e:ca:dc:0c:5a:
                    36:a3:d2:7a:df:94:b3:c0:4e:cc:bc:b7:91:b6:4e:
                    46:05:65:db:66:02:c4:e4:db:2f:bf:a8:12:e7:84:
                    b1:06:db:04:ef:f8:f8:85:ae:89:98:3b:25:e4:e5:
                    5b:82:cd:df:bd:8d:a9:f8:80:69:06:50:68:e2:eb:
                    29:cf:4a:a0:31:13:e4:23:1d:e7:0a:18:0f:74:60:
                    fb:52:42:12:23:a3:08:0c:a2:d8:11:75:d6:7e:d9:
                    43:0f:5c:92:f3:60:e2:a7:29:af:a4:2f:61:e0:c1:
                    01:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:67:0E:7C:7C:5E:88:43:FF:6B:82:2A:5C:5C:C2:51:DC:C7:14:E7
            X509v3 Authority Key Identifier:
                keyid:A1:82:99:AB:9A:76:16:C0:93:82:7E:EE:6A:67:FF:10:5E:7C:63:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/A18299AB9A7616C093827EEE6A67FF105E7C632E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A18299AB9A7616C093827EEE6A67FF105E7C632E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/323830343a386134383a633030303a3a2f33342d3334203d3e20323733363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a48:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5e:87:35:32:7f:d4:4d:41:68:87:1f:b8:99:57:8d:4d:61:df:
         16:7a:4c:07:9d:62:2b:cf:4d:6b:ae:2e:b9:f4:e4:b7:5a:0e:
         8f:8c:26:b4:2f:e5:f4:28:4f:c7:df:eb:07:ba:14:34:e6:d8:
         64:87:6c:12:67:30:64:3c:59:4c:7d:e1:29:01:30:9d:89:17:
         ca:3d:81:3d:3c:88:22:ac:ed:08:7b:21:19:e2:50:e5:3c:52:
         0b:a9:5d:eb:e0:3c:bb:93:35:55:26:b5:e0:71:c7:d8:16:19:
         e0:54:27:9d:f9:7c:cd:0f:6f:16:06:98:bb:48:1c:6e:55:35:
         12:f4:81:e7:e2:8a:30:37:72:a4:fa:ab:69:b9:35:00:c3:a8:
         9e:5f:d3:8a:39:a0:5e:1c:6b:33:0e:d8:d3:2e:29:91:eb:ba:
         a9:70:90:3e:4a:37:6a:cf:32:5e:08:16:9b:5a:a3:67:9c:1f:
         ba:6e:80:e3:54:a8:1a:71:82:d2:d6:98:79:13:46:fa:fb:8b:
         6e:8b:33:81:22:f6:6b:1a:f8:1c:ae:f9:f6:bb:18:65:17:48:
         59:30:51:ea:86:b5:ec:8c:e5:5a:16:6f:cb:72:f3:e7:fc:63:
         3c:40:6f:fd:b3:c3:45:5b:cd:c8:03:33:1d:14:32:e8:75:a4:
         c5:1e:4e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:45 2025 by rpki-client