Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a343034633a313030313a3a2f34382d3438203d3e20323635393530.roa
File:                     323830343a343034633a313030313a3a2f34382d3438203d3e20323635393530.roa (raw, json)
Hash identifier:          0/rBhT71gT6LKRPu59d4qzEQE7lRwKnTCRiMJol8A6Y=
Subject key identifier:   00:A0:FA:6B:C7:01:F7:CC:B5:41:7E:F3:39:6B:FC:B1:B9:C0:8A:E8
Certificate issuer:       /CN=2DCA2D45B3BD5112EAF183233C1838B22FE43763
Certificate serial:       7F68FB312A8CC3EDC5A14BB5FF920B4246F48E0B
Authority key identifier: 2D:CA:2D:45:B3:BD:51:12:EA:F1:83:23:3C:18:38:B2:2F:E4:37:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCA2D45B3BD5112EAF183233C1838B22FE43763.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a343034633a313030313a3a2f34382d3438203d3e20323635393530.roa
Signing time:             Wed 11 Jun 2025 05:46:59 +0000
ROA not before:           Wed 11 Jun 2025 05:41:59 +0000
ROA not after:            Wed 10 Jun 2026 05:46:59 +0000
asID:                     265950
IP address blocks:        2804:404c:1001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/2DCA2D45B3BD5112EAF183233C1838B22FE43763.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/2DCA2D45B3BD5112EAF183233C1838B22FE43763.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCA2D45B3BD5112EAF183233C1838B22FE43763.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 09:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:68:fb:31:2a:8c:c3:ed:c5:a1:4b:b5:ff:92:0b:42:46:f4:8e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DCA2D45B3BD5112EAF183233C1838B22FE43763
        Validity
            Not Before: Jun 11 05:41:59 2025 GMT
            Not After : Jun 10 05:46:59 2026 GMT
        Subject: CN=00A0FA6BC701F7CCB5417EF3396BFCB1B9C08AE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:f9:b5:f1:28:df:de:57:ed:c4:72:5d:96:
                    4a:f9:2e:e7:91:2c:63:81:d3:b1:c7:d6:19:1a:57:
                    b0:3b:9a:7c:87:e8:88:03:f2:1b:5c:b4:c2:2e:33:
                    f2:17:97:2a:51:cb:9a:d7:07:be:28:48:21:69:d2:
                    5d:c1:68:f5:90:5c:a6:eb:80:53:8d:e8:2d:91:24:
                    98:d4:5c:2e:10:a8:86:2d:18:e0:89:41:a6:45:a4:
                    a6:be:de:16:bb:d2:52:e8:a1:ec:04:98:d0:12:3d:
                    2e:2f:40:30:6a:a0:26:7f:fd:7b:37:44:b9:6b:a5:
                    14:0a:ae:1c:77:27:08:a5:5c:d3:0c:fe:77:1c:7f:
                    af:8a:2c:c8:2e:58:4a:67:6b:a5:36:e1:c1:ee:b2:
                    3c:77:86:91:94:f4:50:1b:74:f9:24:29:b3:b0:ff:
                    b7:4e:98:4f:e6:21:bd:30:f7:70:a6:b6:58:b5:5f:
                    93:e8:67:6d:fd:ae:97:c1:27:ec:e6:85:95:d5:c7:
                    6f:25:45:15:2d:d4:a4:d5:8f:73:36:e5:a1:c4:98:
                    14:ee:47:0f:7c:45:fd:44:2f:68:59:77:63:6e:dc:
                    86:20:1f:2e:bd:29:5b:dd:a3:47:65:52:84:05:ec:
                    5e:26:27:da:7d:b5:97:e7:77:44:09:ee:2c:23:93:
                    cf:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A0:FA:6B:C7:01:F7:CC:B5:41:7E:F3:39:6B:FC:B1:B9:C0:8A:E8
            X509v3 Authority Key Identifier:
                keyid:2D:CA:2D:45:B3:BD:51:12:EA:F1:83:23:3C:18:38:B2:2F:E4:37:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/2DCA2D45B3BD5112EAF183233C1838B22FE43763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCA2D45B3BD5112EAF183233C1838B22FE43763.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a343034633a313030313a3a2f34382d3438203d3e20323635393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:404c:1001::/48

    Signature Algorithm: sha256WithRSAEncryption
         cf:82:45:c4:87:46:53:6f:31:53:c8:a6:b8:20:a9:27:c5:a6:
         83:aa:66:32:70:e8:8d:e2:16:3c:ed:1e:fd:6c:cb:94:30:7c:
         8f:fc:40:56:52:6a:01:49:0a:5d:68:1c:92:c7:f2:59:a0:7f:
         2e:2e:18:eb:c6:0e:ff:fe:7c:9f:4a:6d:27:27:b5:9a:82:6c:
         b6:02:97:cc:32:b0:90:f4:ce:d0:f5:24:35:be:38:d5:6e:88:
         b2:ed:46:14:37:5d:51:75:4c:cf:60:52:41:6b:5a:a5:70:38:
         3b:f8:65:9a:7b:c1:00:fe:56:31:3f:24:6e:d5:83:81:85:6f:
         88:53:50:c2:d6:65:f2:96:3e:72:56:2a:25:f4:d6:a0:55:9e:
         f4:bb:c6:08:bd:d4:ea:35:8c:db:83:1e:14:7f:d0:df:de:45:
         21:4e:72:78:71:0e:8e:5e:86:df:59:08:0b:55:40:5d:1c:87:
         99:ec:a3:85:8e:4a:47:46:8f:35:09:30:c3:ff:8f:f9:a8:2f:
         92:8b:f8:e3:94:5a:ab:10:36:06:8d:10:7d:a7:ac:3f:61:81:
         f3:85:ef:81:6a:70:80:0a:f6:eb:dc:a5:06:3e:c8:91:21:fb:
         10:fa:91:cb:de:80:08:bc:32:bc:9b:58:48:ff:22:1d:a2:90:
         f2:b9:de:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:50:43 2025 by rpki-client