Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a373030343a3a2f33322d3332203d3e203631363032.roa
File:                     323830343a373030343a3a2f33322d3332203d3e203631363032.roa (raw, json)
Hash identifier:          j8WY4Gip67UVTGY7cLEX5S2usa/u4pBY5KIg81e/3bI=
Subject key identifier:   F9:64:28:6B:A2:91:9E:02:40:D3:B8:6D:6D:EC:A6:6B:2B:B1:59:34
Certificate issuer:       /CN=2DCA2D45B3BD5112EAF183233C1838B22FE43763
Certificate serial:       4D1F4ACBB701161BFF224C1D90E59E5D99486FF8
Authority key identifier: 2D:CA:2D:45:B3:BD:51:12:EA:F1:83:23:3C:18:38:B2:2F:E4:37:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCA2D45B3BD5112EAF183233C1838B22FE43763.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a373030343a3a2f33322d3332203d3e203631363032.roa
Signing time:             Wed 11 Jun 2025 05:47:00 +0000
ROA not before:           Wed 11 Jun 2025 05:42:00 +0000
ROA not after:            Wed 10 Jun 2026 05:47:00 +0000
asID:                     61602
IP address blocks:        2804:7004::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/2DCA2D45B3BD5112EAF183233C1838B22FE43763.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/2DCA2D45B3BD5112EAF183233C1838B22FE43763.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCA2D45B3BD5112EAF183233C1838B22FE43763.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 09:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1f:4a:cb:b7:01:16:1b:ff:22:4c:1d:90:e5:9e:5d:99:48:6f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DCA2D45B3BD5112EAF183233C1838B22FE43763
        Validity
            Not Before: Jun 11 05:42:00 2025 GMT
            Not After : Jun 10 05:47:00 2026 GMT
        Subject: CN=F964286BA2919E0240D3B86D6DECA66B2BB15934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:96:ef:92:04:b3:35:6d:68:c0:25:8d:f2:55:
                    4e:9f:b6:7f:51:d0:53:30:51:7f:07:6d:c7:67:7b:
                    bf:00:f7:7f:a0:b5:88:93:46:ce:70:7a:44:c5:56:
                    4b:63:66:45:48:89:75:18:02:42:49:38:8c:1f:2f:
                    72:7a:60:aa:b6:00:35:84:1d:a3:b9:84:4c:5b:4f:
                    09:16:b1:1b:ab:d8:d2:dc:23:9d:f5:b2:71:d7:1f:
                    dd:33:96:1f:6f:52:f6:36:83:60:59:6e:0a:b2:f7:
                    bf:f8:0d:41:41:59:a4:f0:c8:94:85:dc:e3:f6:1c:
                    87:c5:f8:1a:5b:88:81:92:9d:1d:0d:44:65:cb:dd:
                    6f:7f:da:b3:e6:5c:63:82:ff:76:45:40:6c:bc:8f:
                    61:a3:8b:d0:63:1a:41:8b:66:b9:ba:ae:56:0b:a3:
                    26:0c:81:cb:a4:32:30:a9:90:6e:32:4c:23:80:dc:
                    d0:0d:cd:53:5f:a4:0b:3d:51:3a:06:42:44:68:21:
                    70:87:c4:2c:5d:f7:1c:3a:20:6d:dd:e0:5d:6b:40:
                    40:55:60:96:23:15:ce:2a:3e:59:25:32:f7:1e:8b:
                    6b:ff:1f:57:39:f1:b3:a7:ad:33:6c:f8:b0:85:c7:
                    be:5e:c5:10:da:38:30:1f:09:b6:b4:dc:a7:bc:59:
                    64:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:64:28:6B:A2:91:9E:02:40:D3:B8:6D:6D:EC:A6:6B:2B:B1:59:34
            X509v3 Authority Key Identifier:
                keyid:2D:CA:2D:45:B3:BD:51:12:EA:F1:83:23:3C:18:38:B2:2F:E4:37:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/2DCA2D45B3BD5112EAF183233C1838B22FE43763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCA2D45B3BD5112EAF183233C1838B22FE43763.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a373030343a3a2f33322d3332203d3e203631363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7004::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:3b:a8:54:69:ed:21:0b:c7:e0:5f:d1:cc:45:23:4a:b2:6f:
         ed:92:61:fe:ab:65:14:0c:5f:9c:3f:55:fb:e7:ec:b9:f1:c8:
         90:b7:fe:38:f7:d8:5d:8d:da:6c:1a:59:c2:07:31:a9:a6:5f:
         74:9a:9b:f9:5a:70:5e:b0:30:1d:87:1a:da:f8:db:23:c3:ab:
         bb:d2:02:8a:e9:bd:ba:73:a9:5b:7e:5c:63:ce:63:c0:c9:7c:
         d9:e6:f8:03:ce:88:3f:5c:7a:14:71:1d:d1:a3:f3:32:e3:6e:
         39:26:3f:be:6c:5d:94:b9:4f:f8:00:b9:45:b1:eb:44:cd:5e:
         01:1c:3d:b6:60:72:5e:0a:f5:44:a2:2c:f2:ff:f5:8f:ec:c6:
         02:22:c9:88:b2:90:66:6a:d8:08:9f:1b:0b:ee:ec:bd:de:3d:
         12:31:69:3d:3e:9d:13:33:57:f3:e8:4f:0d:86:b9:83:9e:e1:
         b0:a5:b1:87:9a:f1:9b:a1:c4:89:3b:c2:57:9d:38:ea:11:e7:
         32:5c:69:2f:a5:36:09:18:92:45:4a:77:f9:e8:9d:a5:75:04:
         92:c3:24:03:53:ff:14:f9:77:f8:92:12:79:57:c4:f7:ab:45:
         4a:6e:d9:f1:ea:1c:23:78:c7:9b:3d:12:30:1d:95:ab:ee:3b:
         d6:e9:23:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 00:19:34 2025 by rpki-client