Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/323830343a386666343a3a2f33322d3332203d3e20323733353234.roa
File:                     323830343a386666343a3a2f33322d3332203d3e20323733353234.roa (raw, json)
Hash identifier:          Q/zh1Dbe0v/Id4jNOBy0FEio6tPBZ2jDdZ5A3fA+Fpw=
Subject key identifier:   7A:87:C0:7F:64:76:95:3C:02:34:61:D0:5B:6B:4D:82:F3:83:B5:6C
Certificate issuer:       /CN=5A26C85C73E6B8570445B0D41258C0AE86AFF28B
Certificate serial:       7B9C09E0DF7D1ADE6956457A80940790044BDBF6
Authority key identifier: 5A:26:C8:5C:73:E6:B8:57:04:45:B0:D4:12:58:C0:AE:86:AF:F2:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/323830343a386666343a3a2f33322d3332203d3e20323733353234.roa
Signing time:             Mon 19 May 2025 20:23:25 +0000
ROA not before:           Mon 19 May 2025 20:18:25 +0000
ROA not after:            Mon 18 May 2026 20:23:25 +0000
asID:                     273524
IP address blocks:        2804:8ff4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.crl
                          rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 16:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:9c:09:e0:df:7d:1a:de:69:56:45:7a:80:94:07:90:04:4b:db:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A26C85C73E6B8570445B0D41258C0AE86AFF28B
        Validity
            Not Before: May 19 20:18:25 2025 GMT
            Not After : May 18 20:23:25 2026 GMT
        Subject: CN=7A87C07F6476953C023461D05B6B4D82F383B56C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:e7:23:68:4c:8b:96:83:02:60:d4:27:a6:
                    3a:91:8c:eb:72:53:14:07:4a:9c:ea:43:33:47:66:
                    de:64:16:64:c3:5c:71:cb:79:89:ce:b6:0c:e6:f7:
                    4c:dc:9b:17:3c:dd:d9:35:9c:c2:b6:a4:ff:86:fe:
                    fa:60:be:94:88:7e:32:4e:7e:55:8f:6d:51:1b:5e:
                    0f:57:4e:d7:18:02:84:0e:29:0e:4d:77:95:76:af:
                    bf:3f:3e:64:95:10:7e:80:27:75:e5:60:96:51:b7:
                    e2:8d:5a:54:8e:58:e6:9e:03:c3:9c:cc:55:54:e8:
                    19:d6:7b:d5:47:a4:f6:0a:db:09:40:9e:0b:6f:2f:
                    c1:1e:81:0b:ea:c5:6d:07:97:55:d1:98:65:f5:08:
                    f7:51:3d:e2:0a:62:ae:e0:3f:56:a5:26:e0:47:41:
                    0e:89:f4:fa:6c:25:2d:77:13:8f:36:2a:22:a3:7c:
                    0a:ff:f4:ab:94:6f:99:81:1e:f7:a6:f3:11:f7:e3:
                    a5:bc:e5:7c:f7:3c:d2:66:aa:a2:fa:eb:75:66:8f:
                    dc:b9:5e:c9:99:32:42:e5:39:84:4a:08:bd:57:02:
                    2b:a3:f1:59:0c:bc:cf:72:e5:12:9a:90:c6:35:f3:
                    ce:9c:8c:66:28:69:60:6d:b2:31:e8:c9:5d:da:a3:
                    e8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:87:C0:7F:64:76:95:3C:02:34:61:D0:5B:6B:4D:82:F3:83:B5:6C
            X509v3 Authority Key Identifier:
                keyid:5A:26:C8:5C:73:E6:B8:57:04:45:B0:D4:12:58:C0:AE:86:AF:F2:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/323830343a386666343a3a2f33322d3332203d3e20323733353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ff4::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:b4:8a:cd:a5:63:d7:de:6c:4b:45:49:dc:9d:88:36:f1:9c:
         a4:be:9f:24:5a:44:f1:b1:9c:d8:ba:24:df:e1:b1:8a:33:8f:
         85:72:de:e2:4b:3d:a9:0c:2e:ae:19:cb:e9:19:b2:3a:eb:02:
         2d:72:39:aa:12:05:bf:26:23:7a:39:ac:d5:27:3b:3a:42:43:
         93:96:23:51:50:87:b2:55:49:a3:93:f3:1a:4b:8c:71:1b:af:
         fa:20:ef:b9:eb:75:44:ab:4a:bf:1d:ee:39:a5:35:a3:bc:18:
         45:7f:4f:94:28:78:66:53:29:3e:ec:3e:2a:77:56:68:6a:ed:
         45:59:61:83:ea:d3:45:17:89:1d:a8:5f:03:93:00:f9:2d:60:
         2d:50:bd:6b:52:8f:d9:70:60:4d:2d:2e:cf:37:41:9e:81:41:
         f5:7c:13:04:f8:8e:d0:65:4d:5f:f7:15:ba:87:66:75:6d:6c:
         b8:db:46:11:0f:4d:66:81:02:aa:e7:39:f2:e9:3d:f8:24:e7:
         96:12:d3:d9:a6:fc:53:ce:7b:e1:d3:2b:8d:10:6a:b0:4c:e8:
         b5:6c:40:77:38:86:46:0f:57:21:d5:d0:f5:a8:7a:f6:48:3d:
         25:0f:32:fa:31:4e:45:c1:eb:35:5e:f8:7b:21:16:b4:e6:38:
         7b:86:fc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 21:16:54 2025 by rpki-client