Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7aJECB7nDmyZCD4kT3NomJ5kmKT1A66Y7jTiPWuppZjh/0/323830343a393262343a3a2f33322d313238203d3e20323734373238.roa
File:                     323830343a393262343a3a2f33322d313238203d3e20323734373238.roa (raw, json)
Hash identifier:          kW1gG0T2ptR2Mt1Zou4wD5tB838m0Itk5gm3Ps4lI1Q=
Subject key identifier:   E9:5E:30:3A:11:CF:68:82:06:AD:A3:40:F9:23:92:C1:C9:58:82:98
Certificate issuer:       /CN=5606F076081E44A467AE63EA5CC1EFE92F3F0280
Certificate serial:       30CA59396DFB4D88FA37D200148DF6882FF5CD62
Authority key identifier: 56:06:F0:76:08:1E:44:A4:67:AE:63:EA:5C:C1:EF:E9:2F:3F:02:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5606F076081E44A467AE63EA5CC1EFE92F3F0280.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7aJECB7nDmyZCD4kT3NomJ5kmKT1A66Y7jTiPWuppZjh/0/323830343a393262343a3a2f33322d313238203d3e20323734373238.roa
Signing time:             Sun 04 May 2025 23:08:34 +0000
ROA not before:           Sun 04 May 2025 23:03:34 +0000
ROA not after:            Sun 03 May 2026 23:08:34 +0000
asID:                     274728
IP address blocks:        2804:92b4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7aJECB7nDmyZCD4kT3NomJ5kmKT1A66Y7jTiPWuppZjh/0/5606F076081E44A467AE63EA5CC1EFE92F3F0280.crl
                          rsync://rpki-repo.registro.br/repo/7aJECB7nDmyZCD4kT3NomJ5kmKT1A66Y7jTiPWuppZjh/0/5606F076081E44A467AE63EA5CC1EFE92F3F0280.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5606F076081E44A467AE63EA5CC1EFE92F3F0280.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 22:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ca:59:39:6d:fb:4d:88:fa:37:d2:00:14:8d:f6:88:2f:f5:cd:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5606F076081E44A467AE63EA5CC1EFE92F3F0280
        Validity
            Not Before: May  4 23:03:34 2025 GMT
            Not After : May  3 23:08:34 2026 GMT
        Subject: CN=E95E303A11CF688206ADA340F92392C1C9588298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6b:0d:74:a3:be:a2:e8:51:1a:7c:e6:1a:f0:
                    56:23:b4:71:e5:1e:86:f0:ac:1b:7e:d1:f9:42:55:
                    5b:ca:7e:ad:77:01:10:aa:12:74:3a:b4:05:2f:73:
                    55:d0:02:63:f6:34:68:a1:86:47:4c:9e:32:cf:17:
                    1a:f9:4c:de:36:2d:62:6b:8e:ba:b6:c4:62:e5:77:
                    e2:ce:f5:e0:92:06:24:4c:c8:d4:ab:47:02:1f:a6:
                    cf:55:74:1d:55:ad:99:5d:41:84:7c:cd:d7:d5:1d:
                    b8:d3:83:b1:f3:b3:95:7e:0c:c6:1b:94:5c:c8:b6:
                    ba:37:80:43:df:c6:54:84:18:d5:e4:e8:ad:f3:78:
                    0f:df:da:cf:0b:b5:59:e8:76:e6:b0:f4:1d:6f:52:
                    ff:66:83:e5:b8:82:b4:9e:53:ac:77:57:06:4d:79:
                    2a:7e:c7:73:32:3e:67:d4:74:f7:5c:73:98:db:b7:
                    06:8d:fb:9d:4c:77:0b:01:fe:0a:35:82:a9:c9:26:
                    03:82:39:ca:43:36:b1:d0:fd:32:60:46:ae:58:85:
                    ac:b5:91:66:b9:fe:3e:54:ca:d3:9c:b0:e4:fb:e1:
                    a0:b8:ef:88:d0:48:7b:c2:f4:e1:2b:d7:88:94:07:
                    6f:a2:d1:ed:4c:7d:19:fd:b0:28:54:7e:10:96:af:
                    c3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5E:30:3A:11:CF:68:82:06:AD:A3:40:F9:23:92:C1:C9:58:82:98
            X509v3 Authority Key Identifier:
                keyid:56:06:F0:76:08:1E:44:A4:67:AE:63:EA:5C:C1:EF:E9:2F:3F:02:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7aJECB7nDmyZCD4kT3NomJ5kmKT1A66Y7jTiPWuppZjh/0/5606F076081E44A467AE63EA5CC1EFE92F3F0280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5606F076081E44A467AE63EA5CC1EFE92F3F0280.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7aJECB7nDmyZCD4kT3NomJ5kmKT1A66Y7jTiPWuppZjh/0/323830343a393262343a3a2f33322d313238203d3e20323734373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:14:be:76:12:88:14:63:93:70:3b:6a:3d:c6:23:a6:39:41:
         b1:ae:ca:cb:ee:d2:a6:52:b4:38:a6:a5:5a:da:ce:e7:41:74:
         11:58:b5:07:fb:d6:ab:7f:d3:3d:70:7e:31:da:13:a1:7f:4c:
         f3:8b:3f:43:15:d7:a9:b0:3d:22:b2:fa:29:3f:cb:43:5b:15:
         dc:b6:35:05:5c:a1:1d:34:52:cc:79:fa:b6:c3:65:0e:0a:d2:
         aa:f7:72:4a:7b:f7:5e:c8:36:60:02:be:4d:84:e3:fe:a1:f6:
         a0:1b:e5:a0:e1:b7:1e:5e:57:76:10:1f:18:eb:40:82:28:3c:
         dc:af:ea:30:6a:8c:ca:f0:5a:31:d9:54:f5:cc:3b:23:b4:c0:
         55:80:99:01:38:dc:6d:fe:15:0b:16:91:43:e6:40:58:5b:e3:
         50:cc:5a:6f:05:96:67:65:22:b0:9a:ae:85:53:20:75:ce:3a:
         79:41:4b:c6:af:2b:4a:a4:d3:c2:48:46:73:dc:58:eb:91:46:
         7a:cf:0f:22:f2:12:b1:a4:57:29:9a:98:81:0a:7d:cf:a2:19:
         cf:9e:00:2d:e9:e5:4e:83:f0:cc:f9:7e:c2:ef:53:c9:38:dd:
         52:3f:3d:9e:05:0c:d8:58:2a:64:b4:3f:29:7a:54:6a:bd:d2:
         43:17:52:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:52:37 2025 by rpki-client