Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/323830343a313137633a3a2f33322d313238203d3e203533303631.roa
File:                     323830343a313137633a3a2f33322d313238203d3e203533303631.roa (raw, json)
Hash identifier:          C9hSxIxPycPnO3dLrpNxOD6vv9t7nuPFf2qN9g9w9MU=
Subject key identifier:   A1:D7:65:AE:52:F0:8C:CA:10:2D:AF:E7:71:46:CE:7C:65:82:B5:A1
Certificate issuer:       /CN=06BA6CF66550C30DB2603ABA8A3A8301F6476E61
Certificate serial:       53187CA12C889C3A78D43BAECB0082922EB1A44B
Authority key identifier: 06:BA:6C:F6:65:50:C3:0D:B2:60:3A:BA:8A:3A:83:01:F6:47:6E:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06BA6CF66550C30DB2603ABA8A3A8301F6476E61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/323830343a313137633a3a2f33322d313238203d3e203533303631.roa
Signing time:             Thu 06 Mar 2025 19:58:32 +0000
ROA not before:           Thu 06 Mar 2025 19:53:32 +0000
ROA not after:            Thu 05 Mar 2026 19:58:32 +0000
asID:                     53061
IP address blocks:        2804:117c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/06BA6CF66550C30DB2603ABA8A3A8301F6476E61.crl
                          rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/06BA6CF66550C30DB2603ABA8A3A8301F6476E61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06BA6CF66550C30DB2603ABA8A3A8301F6476E61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 11:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:18:7c:a1:2c:88:9c:3a:78:d4:3b:ae:cb:00:82:92:2e:b1:a4:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06BA6CF66550C30DB2603ABA8A3A8301F6476E61
        Validity
            Not Before: Mar  6 19:53:32 2025 GMT
            Not After : Mar  5 19:58:32 2026 GMT
        Subject: CN=A1D765AE52F08CCA102DAFE77146CE7C6582B5A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:10:53:c9:e8:50:bf:36:ca:1c:30:30:5c:a8:
                    80:14:03:57:b4:4c:c3:8d:cc:54:81:3d:74:39:aa:
                    fe:50:3b:39:4f:10:73:37:ed:9c:f1:03:93:c9:19:
                    f6:bc:41:43:52:46:3d:d1:90:77:b3:a7:94:54:ee:
                    4d:9e:7c:29:ec:49:be:7a:34:70:6f:4c:0f:55:69:
                    19:e0:58:89:a1:2b:45:95:aa:3d:ca:88:72:ca:cd:
                    f4:e3:c1:83:f2:ff:8e:2e:e6:78:10:89:33:f2:c0:
                    aa:09:15:d9:c6:0d:9b:46:a8:90:fa:35:a1:1b:2c:
                    7b:ed:f1:2b:5d:13:28:94:41:50:64:8e:5e:d9:8e:
                    91:18:cb:bf:6f:fa:05:9a:90:53:47:1b:2b:2f:0c:
                    76:85:f2:bb:f8:3d:46:14:e4:6f:a6:05:44:e9:cb:
                    84:b9:ad:69:43:8a:10:ce:66:e4:24:ad:4a:de:c4:
                    b1:1f:7e:66:bc:ae:27:4b:50:56:c8:98:66:f3:46:
                    5a:3b:8c:26:a5:df:9a:41:7a:03:4f:89:ea:68:a7:
                    19:1a:60:c9:84:d9:93:0b:7d:a7:0e:19:cb:38:21:
                    05:a3:0d:b6:a0:09:b9:4c:54:87:09:1f:ff:86:cc:
                    cf:64:19:7b:b9:bb:49:ba:53:3b:f8:21:51:65:2c:
                    ef:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D7:65:AE:52:F0:8C:CA:10:2D:AF:E7:71:46:CE:7C:65:82:B5:A1
            X509v3 Authority Key Identifier:
                keyid:06:BA:6C:F6:65:50:C3:0D:B2:60:3A:BA:8A:3A:83:01:F6:47:6E:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/06BA6CF66550C30DB2603ABA8A3A8301F6476E61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06BA6CF66550C30DB2603ABA8A3A8301F6476E61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/323830343a313137633a3a2f33322d313238203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:117c::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:c4:36:23:e4:03:81:d6:c8:b0:ab:2a:3d:0f:1b:cd:3c:16:
         34:e9:2e:00:7b:20:f0:c5:1a:de:ca:38:0f:ab:d0:2b:9b:38:
         4d:d8:f9:8c:5d:40:25:2b:a1:65:a1:e6:fe:1f:3d:78:8c:e7:
         ca:cc:2f:a9:29:e6:13:18:05:4a:7a:20:d3:c8:cc:91:b9:5b:
         78:29:af:1e:eb:c9:1a:a4:04:51:cd:1d:72:a7:99:a0:1b:80:
         03:e1:65:42:8e:29:07:d7:82:41:60:5f:4a:74:88:d2:5a:64:
         54:48:d0:fb:74:8b:3a:24:94:e6:aa:a9:69:8d:d0:49:23:44:
         bb:1e:1f:4e:fd:3f:55:4d:f9:90:d0:24:94:27:de:64:d4:9d:
         ae:5f:9b:a3:01:c7:91:aa:bc:b6:d2:04:da:0e:f6:77:d4:66:
         93:71:a3:71:21:fa:6f:48:fe:92:22:ab:09:05:5d:a5:5e:e5:
         13:95:37:ff:64:0a:a0:9e:76:e8:88:3f:80:4a:c3:2d:2b:d5:
         71:be:88:94:f8:85:bf:cb:53:c0:d7:33:05:e0:f7:2a:a3:b3:
         a9:64:38:ba:3b:f0:50:1b:e1:4b:d0:bd:c9:55:d6:45:b7:c0:
         18:42:16:18:93:ec:3d:28:45:7e:54:50:40:eb:de:69:3e:0c:
         6a:6c:bf:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:18:04 2025 by rpki-client